Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,584cataloged exploits
34,508CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,554GitHub PoC 13,687VulnCheck XDB 8,213Nuclei 4,223Metasploit 3,464✓ verified onlyrecentpopularrisk
24,443 exploits
Exploit-DB✓ VexDay Proof
Kolibri Web Server 2.0 - GET (SEH)
CVE-2014-4158—remotewindows14 Jul 2014
Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a GET req
28RISK
open ↗
Exploit-DB
Shopizer 1.1.5 - Multiple Vulnerabilities
CVE-2014-4964—webappsphp14 Jul 2014
Multiple cross-site request forgery (CSRF) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to hijac
23RISK
open ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin DZS-VideoGallery - Cross-Site Scripting / Command Injection
CVE-2014-9094—webappsphp13 Jul 2014
Multiple cross-site scripting (XSS) vulnerabilities in deploy/designer/preview.php in the Digital Zoom Studio (DZS) Vide
38RISK
open ↗
Exploit-DB
OpenVPN Private Tunnel Core Service - Unquoted Service Path Privilege Escalation
CVE-2014-5455MEDIUMlocalwindows_x8612 Jul 2014
Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and Ope
33RISK
open ↗
Exploit-DB✓ VexDay Proof
WeBid - Multiple Cross-Site Scripting / LDAP Injection Vulnerabilities
CVE-2014-5101—webappsphp10 Jul 2014
Multiple cross-site scripting (XSS) vulnerabilities in WeBid 1.1.1 allow remote attackers to inject arbitrary web script
23RISK
open ↗
Exploit-DB
Infoblox 6.8.2.11 - OS Command Injection
CVE-2014-3418—webappslinux_x8610 Jul 2014
config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via she
23RISK
open ↗
Exploit-DB
OpenVAS Manager 4.0 - Authentication Bypass
CVE-2013-6765—remotelinux10 Jul 2014
OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP authentication restricti
23RISK
open ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin BSK PDF Manager - '/wp-admin/admin.php' Multiple SQL Injections
CVE-2014-4944—webappsphp09 Jul 2014
Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF Manager plugin 1.3.2 for WordPress al
23RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-2766—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service
28RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-1797—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (me
28RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-1775—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service
28RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-1803—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service
28RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-2757—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service
28RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-1795—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service
28RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-1799—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service
35RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-1769—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co
28RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-1774—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor
28RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-1788—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor
28RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-1766—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service
35RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-1791—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service
28RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-1778—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary web script with increased privileg
28RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-1780—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (me
28RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-2776—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Dolibarr ERP/CRM 3.5.3 - Multiple Vulnerabilities
CVE-2014-3991—webappsphp08 Jul 2014
Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote attackers to inject arbitrary
23RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-2777—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary web script with increased privileg
28RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-2773—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (
28RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-2772—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co
28RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-1779—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service
28RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-2771—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (me
28RISK
open ↗
Exploit-DB
Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)
CVE-2014-2770—doswindows_x8608 Jul 2014
Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor
28RISK
open ↗
← previouspage 222 / 815next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.