Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,589cataloged exploits
34,508CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,554GitHub PoC 13,689VulnCheck XDB 8,216Nuclei 4,223Metasploit 3,464✓ verified onlyrecentpopularrisk
8,216 exploits
VulnCheck XDB
local
CVE-2019-18988HIGHunder attack01 Jul 2020
TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for dif
86RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-2883CRITICALunder attack30 Jun 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th
100RISK
open ↗
VulnCheck XDB
local
CVE-2020-0787HIGHunder attackransomware30 Jun 2020
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperl
98RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2018-7602CRITICALunder attackransomware25 Jun 2020
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
100RISK
open ↗
VulnCheck XDB
local
CVE-2020-1048—23 Jun 2020
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writin
43RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-2551CRITICALunder attack20 Jun 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2019-15107CRITICALunder attackransomware20 Jun 2020
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-2551CRITICALunder attack19 Jun 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor
100RISK
open ↗
VulnCheck XDB
local
CVE-2020-0796CRITICALunder attackransomware19 Jun 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2017-7921CRITICALunder attack19 Jun 2020
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-11776HIGHunder attack18 Jun 2020
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-7600CRITICALunder attackransomware18 Jun 2020
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-16763—16 Jun 2020
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISK
open ↗
VulnCheck XDB
local
CVE-2020-0787HIGHunder attackransomware16 Jun 2020
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperl
98RISK
open ↗
VulnCheck XDB
local
CVE-2020-0787HIGHunder attackransomware16 Jun 2020
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperl
98RISK
open ↗
VulnCheck XDB
local
CVE-2020-1054HIGHunder attack16 Jun 2020
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o
98RISK
open ↗
VulnCheck XDB
client-side
CVE-2020-6418HIGHunder attack13 Jun 2020
Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corru
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-11776HIGHunder attack12 Jun 2020
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN
100RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2020-0688HIGHunder attackransomware12 Jun 2020
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o
100RISK
open ↗
VulnCheck XDB
local
CVE-2017-9805HIGHunder attack11 Jun 2020
The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with a
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-0796CRITICALunder attackransomware10 Jun 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISK
open ↗
VulnCheck XDB
local
CVE-2019-2215HIGHunder attack07 Jun 2020
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
98RISK
open ↗
VulnCheck XDB
local
CVE-2020-0796CRITICALunder attackransomware06 Jun 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2020-0796CRITICALunder attackransomware04 Jun 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISK
open ↗
VulnCheck XDB
denial-of-service
CVE-2020-0796CRITICALunder attackransomware04 Jun 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISK
open ↗
VulnCheck XDB
local
CVE-2020-0796CRITICALunder attackransomware04 Jun 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-0796CRITICALunder attackransomware02 Jun 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISK
open ↗
VulnCheck XDB
local
CVE-2020-1066—01 Jun 2020
An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privileg
23RISK
open ↗
VulnCheck XDB
local
CVE-2020-1066—01 Jun 2020
An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privileg
23RISK
open ↗
VulnCheck XDB
initial-access
CVE-2019-18935CRITICALunder attackransomware29 May 2020
Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp
100RISK
open ↗
← previouspage 241 / 274next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.