Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,589cataloged exploits

34,508CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,554GitHub PoC 13,689VulnCheck XDB 8,216Nuclei 4,223Metasploit 3,464✓ verified onlyrecent popular risk

24,443 exploits

Exploit-DB

Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)

CVE-2014-2763—doswindows_x8608 Jul 2014

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (me

28RISK

Exploit-DB

Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)

CVE-2014-2761—doswindows_x8608 Jul 2014

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co

28RISK

Exploit-DB

Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)

CVE-2014-2760—doswindows_x8608 Jul 2014

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co

28RISK

Exploit-DB

Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)

CVE-2014-2759—doswindows_x8608 Jul 2014

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service

28RISK

Exploit-DB

Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)

CVE-2014-2758—doswindows_x8608 Jul 2014

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service

28RISK

Exploit-DB

Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)

CVE-2014-2756—doswindows_x8608 Jul 2014

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (me

28RISK

Exploit-DB

Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)

CVE-2014-2755—doswindows_x8608 Jul 2014

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co

28RISK

Exploit-DB

Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)

CVE-2014-1783—doswindows_x8608 Jul 2014

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service

28RISK

Exploit-DB

Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)

CVE-2014-1784—doswindows_x8608 Jul 2014

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service

28RISK

Exploit-DB

Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)

CVE-2014-1790—doswindows_x8608 Jul 2014

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory co

28RISK

Exploit-DB

Microsoft Internet Explorer 9/10 - CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)

CVE-2014-1782—doswindows_x8608 Jul 2014

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co

28RISK

Exploit-DB✓ VexDay Proof

Gitlist - Remote Command Execution (Metasploit)

CVE-2013-7392—remotemultiple07 Jul 2014

Gitlist allows remote attackers to execute arbitrary commands via shell metacharacters in a file name to Source/.

23RISK

Exploit-DB✓ VexDay Proof

WordPress Plugin MailPoet Newsletters 2.6.8 - 'wysija-newsletters' Arbitrary File Upload (Metasploit)

CVE-2014-4725—remotephp07 Jul 2014

The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows remote attackers to bypass authen

50RISK

Exploit-DB✓ VexDay Proof

AtomCMS - SQL Injection / Arbitrary File Upload

CVE-2014-4852—webappsphp07 Jul 2014

SQL injection vulnerability in admin/uploads.php in The Digital Craft AtomCMS, possibly 2.0, allows remote attackers to

23RISK

Exploit-DB✓ VexDay Proof

Gitlist - Remote Command Execution (Metasploit)

CVE-2014-4511—remotemultiple07 Jul 2014

Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in

60RISK

Exploit-DB✓ VexDay Proof

Oracle Event Processing FileUploadServlet - Arbitrary File Upload (Metasploit)

CVE-2014-2424—remotewindows07 Jul 2014

Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote

50RISK

Exploit-DB✓ VexDay Proof

xClassified - 'ads.php' SQL Injection

CVE-2014-4741—webappsphp07 Jul 2014

SQL injection vulnerability in demo/ads.php in Artifectx xClassified 1.2 allows remote attackers to execute arbitrary SQ

23RISK

Exploit-DB✓ VexDay Proof

Frog CMS 0.9.5 - Arbitrary File Upload

CVE-2014-4912—webappsphp06 Jul 2014

An Arbitrary File Upload issue was discovered in Frog CMS 0.9.5 due to lack of extension validation.

23RISK

Exploit-DB✓ VexDay Proof

Ubisoft Uplay 4.6 - Insecure File Permissions Privilege Escalation

CVE-2014-5453—localwindows03 Jul 2014

Ubisoft Uplay PC before 4.6.1.3217 use weak permissions (Everyone: Full Control) for the program installation directory

23RISK

Exploit-DB

Baidu Spark Browser 26.5.9999.3511 - Remote Stack Overflow (Denial of Service)

CVE-2014-5349—doswindows02 Jul 2014

Stack-based buffer overflow in Baidu Spark Browser 26.5.9999.3511 allows remote attackers to cause a denial of service (

23RISK

Exploit-DB

Kerio Control 8.3.1 - Blind SQL Injection

CVE-2014-3857—webappsphp02 Jul 2014

Multiple SQL injection vulnerabilities in Kerio Control Statistics in Kerio Control (formerly WinRoute Firewall) before

23RISK

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 8 - Fixed Col Span ID (Full ASLR + DEP + EMET 4.1.x Bypass) (MS12-037)

CVE-2012-1876—remotewindows01 Jul 2014

Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allo

50RISK

Exploit-DB

IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities

CVE-2014-0869—webappsjsp01 Jul 2014

The decrypt function in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algori

23RISK

Exploit-DB

IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities

CVE-2014-0868—webappsjsp01 Jul 2014

RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics relies on client-

23RISK

Exploit-DB

IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities

CVE-2014-0871—webappsjsp01 Jul 2014

RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote att

23RISK

Exploit-DB

IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities

CVE-2014-0870—webappsjsp01 Jul 2014

Multiple cross-site scripting (XSS) vulnerabilities in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 be

23RISK

Exploit-DB

IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities

CVE-2014-0894—webappsjsp01 Jul 2014

RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows context-de

23RISK

Exploit-DB

IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities

CVE-2014-0866—webappsjsp01 Jul 2014

RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics sends cleartext c

23RISK

Exploit-DB

IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities

CVE-2014-0864—webappsjsp01 Jul 2014

Multiple cross-site request forgery (CSRF) vulnerabilities in Executer in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5

23RISK

Exploit-DB

IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities

CVE-2014-0865—webappsjsp01 Jul 2014

RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics relies on client-

23RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.