Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,589cataloged exploits
34,508CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,554GitHub PoC 13,689VulnCheck XDB 8,216Nuclei 4,223Metasploit 3,464✓ verified onlyrecentpopularrisk
24,443 exploits
Exploit-DB✓ VexDay Proof
SafeNet Sentinel Protection Server 7.0 < 7.4 / Sentinel Keys Server 1.0.3 < 1.0.4 - Directory Traversal
CVE-2007-6483—webappswindows19 May 2014
Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and possibly earlier version
28RISK
open ↗
Exploit-DB✓ VexDay Proof
XOOPS Glossaire Module - '/modules/glossaire/glossaire-aff.php' SQL Injection
CVE-2014-3935—webappsphp19 May 2014
SQL injection vulnerability in glossaire-aff.php in the Glossaire module 1.0 for XOOPS allows remote attackers to execut
23RISK
open ↗
Exploit-DB
SPIP CMS < 2.0.23/ 2.1.22/3.0.9 - Privilege Escalation
CVE-2013-2118—webappsphp19 May 2014
SPIP 3.0.x before 3.0.9, 2.1.x before 2.1.22, and 2.0.x before 2.0.23 allows remote attackers to gain privileges and "ta
23RISK
open ↗
Exploit-DB
HP Release Control - (Authenticated) XML External Entity (Metasploit)
CVE-2014-2612—webappswindows19 May 2014
Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x b
23RISK
open ↗
Exploit-DB
eGroupWare 1.8.006 - Multiple Vulnerabilities
CVE-2014-2987—webappsphp16 May 2014
Multiple cross-site request forgery (CSRF) vulnerabilities in EGroupware Enterprise Line (EPL) before 1.1.20140505, EGro
23RISK
open ↗
Exploit-DB✓ VexDay Proof
RealPlayer - '.3gp' File Processing Memory Corruption
CVE-2014-3444—dosmultiple16 May 2014
The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to exec
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Winamp - '.flv' File Processing Memory Corruption
CVE-2014-3442—doswindows16 May 2014
Winamp 5.666 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) via a malfor
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Wireshark 1.10.7 - Denial of Service (PoC)
CVE-2014-5116—doswindows16 May 2014
The cairo_image_surface_get_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent attac
23RISK
open ↗
Exploit-DB✓ VexDay Proof
CIS Manager - 'email' SQL Injection
CVE-2014-3749—webappsasp16 May 2014
SQL injection vulnerability in Construtiva CIS Manager allows remote attackers to execute arbitrary SQL commands via the
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ElasticSearch - Remote Code Execution
CVE-2014-3120HIGHunder attackwebappsmultiple15 May 2014
The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execut
100RISK
open ↗
Exploit-DB✓ VexDay Proof
Broadcom PIPA C211 - Sensitive Information Disclosure
CVE-2014-2046—webappshardware14 May 2014
cgi-bin/rpcBridge in the web interface 1.1 on Broadcom Ltd PIPA C211 rev2 does not properly restrict access, which allow
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Easy File Sharing Web Server 6.8 - Remote Stack Buffer Overflow
CVE-2014-3791—remotewindows14 May 2014
Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 6.8 allows remote attackers to execute arbitrary code
60RISK
open ↗
Exploit-DB
VM Turbo Operations Manager 4.5x - Directory Traversal
CVE-2014-3806—webappscgi12 May 2014
Directory traversal vulnerability in cgi-bin/help/doIt.cgi in VMTurbo Operations Manager before 4.6 allows remote attack
23RISK
open ↗
Exploit-DB✓ VexDay Proof
EFS Easy Chat Server 3.1 - Remote Stack Buffer Overflow
CVE-2004-2466—remotewindows12 May 2014
chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username
60RISK
open ↗
Exploit-DB✓ VexDay Proof
JetAudio 8.1.1 - '.ogg' Crash (PoC)
CVE-2014-3443—doswindows12 May 2014
JetMPAd.ax in JetAudio 8.1.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .ogg
23RISK
open ↗
Exploit-DB✓ VexDay Proof
GOM Player 2.2.57.5189 - '.ogg' Crash (PoC)
CVE-2014-3216—doswindows12 May 2014
GOM Media Player 2.2.57.5189 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .ogg
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SpiceWorks 7.2.00174 - Persistent Cross-Site Scripting
CVE-2014-3740—webappswindows12 May 2014
Cross-site scripting (XSS) vulnerability in SpiceWorks before 7.2.00195 allows remote authenticated users to inject arbi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Adobe Flash Player - Shader Buffer Overflow (Metasploit)
CVE-2014-0515—remotewindows12 May 2014
Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Yokogawa CS3000 - 'BKESimmgr.exe' Remote Buffer Overflow (Metasploit)
CVE-2014-0782—remotewindows12 May 2014
Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow
68RISK
open ↗
Exploit-DB
Skybox Security 6.3.x < 6.4.x - Multiple Information Disclosures
CVE-2014-2084—webappshardware12 May 2014
Skybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57 does not properly re
23RISK
open ↗
Exploit-DB
Skybox Security 6.3.x < 6.4.x - Multiple Denial of Service Vulnerabilities
CVE-2014-2085—doshardware12 May 2014
20RISK
open ↗
Exploit-DB
Alienvault Open Source SIEM (OSSIM) 4.6.1 - (Authenticated) SQL Injection (Metasploit)
CVE-2014-5383—webappsphp12 May 2014
SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL
43RISK
open ↗
Exploit-DB
Skybox Security 6.3.x < 6.4.x - Multiple Denial of Service Vulnerabilities
CVE-2014-2084—doshardware12 May 2014
Skybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57 does not properly re
23RISK
open ↗
Exploit-DB✓ VexDay Proof
VideoLAN VLC Media Player 2.1.3 - '.wav' File Memory Corruption
CVE-2014-3441—dosmultiple09 May 2014
codec\libpng_plugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a denial of service (crash)
23RISK
open ↗
Exploit-DB
Cobbler 2.4.x < 2.6.x - Local File Inclusion
CVE-2014-3225—webappsphp08 May 2014
Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated us
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Foscam IP Camera - Predictable Credentials Security Bypass
CVE-2014-1849—remotehardware08 May 2014
Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates credentials based on pred
28RISK
open ↗
Exploit-DB✓ VexDay Proof
TOA - Cross-Site Request Forgery
CVE-2014-2989—webappsphp08 May 2014
Cross-site request forgery (CSRF) vulnerability in Open Assessment Technologies TAO 2.5.6 allows remote attackers to hij
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Collabtive 1.2 - Persistent Cross-Site Scripting
CVE-2014-3247—webappsphp08 May 2014
Cross-site scripting (XSS) vulnerability in Collabtive 1.2 allows remote authenticated users to inject arbitrary web scr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Collabtive 1.2 - SQL Injection
CVE-2014-3246—webappsphp08 May 2014
SQL injection vulnerability in Collabtive 1.2 allows remote authenticated users to execute arbitrary SQL commands via th
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Caldera - '/costview2/printers.php?tr' SQL Injection
CVE-2014-2934—webappsphp07 May 2014
Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the
23RISK
open ↗
← previouspage 228 / 815next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.