Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,958cataloged exploits
40,447CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,024VulnCheck XDB 10,108Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
24,488 exploits
Exploit-DB✓ VexDay Proof
Microsoft Windows - TrackPopupMenuEx Win32k NULL Page (MS13-081) (Metasploit)
win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to ga
43RISK
open ↗Exploit-DB✓ VexDay Proof
Tableau Server < 8.0.7 / < 8.1.2 - Blind SQL Injection
SQL injection vulnerability in Tableau Server 8.0.x before 8.0.7 and 8.1.x before 8.1.2 allows remote authenticated user
23RISK
open ↗Exploit-DB
WordPress Plugin BuddyPress 1.9.1 - Privilege Escalation
The Group creation process in the Buddypress plugin before 1.9.2 for WordPress allows remote authenticated users to gain
28RISK
open ↗Exploit-DB
Linux Kernel < 3.4.5 (Android 4.2.2/4.4 ARM) - Local Privilege Escalation
The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not
98RISK
open ↗Exploit-DB
Titan FTP Server 10.32 Build 1816 - Directory Traversal
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attacke
38RISK
open ↗Exploit-DB
Titan FTP Server 10.32 Build 1816 - Directory Traversal
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attacke
38RISK
open ↗Exploit-DB
ZTE ZXV10 W300 Router - Hard-Coded Credentials
The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account
23RISK
open ↗Exploit-DB✓ VexDay Proof
Publish-It 3.6d - '.pui' Local Buffer Overflow (SEH)
Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI f
50RISK
open ↗Exploit-DB✓ VexDay Proof
osCommerce 2.3.3.4 - 'geo_zones.php?zID' SQL Injection
SQL injection vulnerability in the update_zone function in catalog/admin/geo_zones.php in osCommerce Online Merchant 2.3
23RISK
open ↗Exploit-DB
AuraCMS 2.3 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary
23RISK
open ↗Exploit-DB
doorGets CMS 5.2 - SQL Injection
SQL injection vulnerability in dg-admin/index.php in doorGets CMS 5.2 and earlier allows remote authenticated administra
23RISK
open ↗Exploit-DB✓ VexDay Proof
Android Browser and WebView addJavascriptInterface - Code Execution (Metasploit)
Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly imp
50RISK
open ↗Exploit-DB
CTERA 3.2.29.0/3.2.42.0 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in CTERA Cloud Storage OS before 3.2.29.0, 3.2.42.0, and earlier allows remote
23RISK
open ↗Exploit-DB✓ VexDay Proof
Publish-It 3.6d - Buffer Overflow
Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI f
50RISK
open ↗Exploit-DB
D-Link DIR-100 - Multiple Vulnerabilities
D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script
28RISK
open ↗Exploit-DB
VideoLAN VLC Media Player 2.1.2 - '.asf' Crash (PoC)
The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Playe
23RISK
open ↗Exploit-DB
TopicsViewer 3.0 Beta 1 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in TopicsViewer 3.0 Beta 1 allow remote attackers to execute arbitrary SQL comman
23RISK
open ↗Exploit-DB✓ VexDay Proof
ImpressCMS 1.3.5 - Multiple Vulnerabilities
Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows
23RISK
open ↗Exploit-DB
D-Link DIR-100 - Multiple Vulnerabilities
D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters
28RISK
open ↗Exploit-DB✓ VexDay Proof
XnView 1.92.1 - Command-Line Arguments Buffer Overflow
Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename arg
28RISK
open ↗Exploit-DB
D-Link DIR-100 - Multiple Vulnerabilities
D-Link DIR-100 4.03B07 has PPTP and poe information disclosure
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apache Struts - Developer Mode OGNL Execution (Metasploit)
The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers
60RISK
open ↗Exploit-DB
ownCloud 6.0.0a - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
Skybluecanvas CMS - Remote Code Execution (Metasploit)
The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248
50RISK
open ↗Exploit-DB✓ VexDay Proof
Apache Tomcat Manager - Application Upload (Authenticated) Code Execution (Metasploit)
The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a
60RISK
open ↗Exploit-DB✓ VexDay Proof
Seowon Intech WiMAX SWC-9100 Router - '/cgi-bin/diagnostic.cgi?ping_ipaddr' Remote Code Execution
The ping functionality in cgi-bin/diagnostic.cgi on Seowon Intech SWC-9100 routers allows remote attackers to execute ar
23RISK
open ↗Exploit-DB✓ VexDay Proof
Seowon Intech WiMAX SWC-9100 Router - '/cgi-bin/reboot.cgi' Remote Reboot (Denial of Service)
cgi-bin/reboot.cgi on Seowon Intech SWC-9100 routers allows remote attackers to (1) cause a denial of service (reboot) v
23RISK
open ↗Exploit-DB✓ VexDay Proof
Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.10) - 'CONFIG_X86_X32' Arbitrary Write (2)
The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allo
50RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.