Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,990cataloged exploits

40,451CVEs with public exploitation

24,696lab-tested

All Referência 26,240Exploit-DB 24,488GitHub PoC 18,043VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecent popular risk

24,488 exploits

Exploit-DB✓ VexDay Proof

IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) - Missing DLL (Metasploit)

CVE-2012-5383—localwindows06 Sep 2013

Untrusted search path vulnerability in the installation functionality in Oracle MySQL 5.5.28, when installed in the top-

23RISK

Exploit-DB✓ VexDay Proof

IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) - Missing DLL (Metasploit)

CVE-2012-5382—localwindows06 Sep 2013

Untrusted search path vulnerability in the installation functionality in Zend Server 5.6.0 SP4, when installed in the to

23RISK

Exploit-DB✓ VexDay Proof

IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) - Missing DLL (Metasploit)

CVE-2012-5378—localwindows06 Sep 2013

Untrusted search path vulnerability in the installation functionality in ActiveTcl 8.5.12, when installed in the top-lev

23RISK

Exploit-DB✓ VexDay Proof

IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) - Missing DLL (Metasploit)

CVE-2012-5377—localwindows06 Sep 2013

Untrusted search path vulnerability in the installation functionality in ActivePerl 5.16.1.1601, when installed in the t

23RISK

Exploit-DB✓ VexDay Proof

IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) - Missing DLL (Metasploit)

CVE-2012-5379HIGHlocalwindows06 Sep 2013

Untrusted search path vulnerability in the installation functionality in ActivePython 3.2.2.3, when installed in the top

41RISK

Exploit-DB✓ VexDay Proof

IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) - Missing DLL (Metasploit)

CVE-2012-5380MEDIUMlocalwindows06 Sep 2013

Untrusted search path vulnerability in the installation functionality in Ruby 1.9.3-p194, when installed in the top-leve

33RISK

Exploit-DB✓ VexDay Proof

KingView 6.53 - 'SuperGrid' Insecure ActiveX Control

CVE-2013-6127—localwindows04 Sep 2013

The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53

28RISK

Exploit-DB

Apple Safari 6.0.1 for iOS 6.0 / Apple Mac OSX 10.7/8 - Heap Buffer Overflow

CVE-2012-3748—remoteios04 Sep 2013

Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote attackers to execute arbitrary

28RISK

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer - CFlatMarkupPointer Use-After-Free (MS13-059) (Metasploit)

CVE-2013-3184—remotewindows04 Sep 2013

Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service

50RISK

Exploit-DB✓ VexDay Proof

KingView 6.53 - 'KChartXY' ActiveX File Creation / Overwrite

CVE-2013-6128—localwindows04 Sep 2013

The KCHARTXYLib.KChartXY ActiveX control in KChartXY.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 doe

23RISK

Exploit-DB✓ VexDay Proof

HP LoadRunner - lrFileIOService ActiveX WriteFileString Remote Code Execution (Metasploit)

CVE-2013-4798—remotewindows04 Sep 2013

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown ve

50RISK

Exploit-DB✓ VexDay Proof

GOMPlayer 2.2.53.5169 - '.wav' Crash (PoC)

CVE-2013-5716—doswindows04 Sep 2013

Gretech GOM Media Player 2.2.53.5169 and possibly earlier allows remote attackers to cause a denial of service (applicat

23RISK

Exploit-DB

Zoom Telephonics ADSL Modem/Router - Multiple Vulnerabilities

CVE-2013-5624—webappshardware03 Sep 2013

20RISK

Exploit-DB

Zoom Telephonics ADSL Modem/Router - Multiple Vulnerabilities

CVE-2013-5622—webappshardware03 Sep 2013

20RISK

Exploit-DB

WordPress Plugin IndiaNIC Testimonial - Multiple Vulnerabilities

CVE-2013-5672—webappsphp03 Sep 2013

Multiple cross-site request forgery (CSRF) vulnerabilities in the IndiaNIC Testimonial plugin 2.2 for WordPress allow re

23RISK

Exploit-DB

Zoom Telephonics ADSL Modem/Router - Multiple Vulnerabilities

CVE-2013-5621—webappshardware03 Sep 2013

20RISK

Exploit-DB

Oracle Java lookUpByteBI - Heap Buffer Overflow

CVE-2013-2470—doswindows03 Sep 2013

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 U

28RISK

Exploit-DB

Zoom Telephonics ADSL Modem/Router - Multiple Vulnerabilities

CVE-2013-5625—webappshardware03 Sep 2013

20RISK

Exploit-DB

WordPress Plugin IndiaNIC Testimonial - Multiple Vulnerabilities

CVE-2013-5673—webappsphp03 Sep 2013

SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for WordPress allows remote attack

23RISK

Exploit-DB

Zoom Telephonics ADSL Modem/Router - Multiple Vulnerabilities

CVE-2013-5630—webappshardware03 Sep 2013

20RISK

Exploit-DB

Zoom Telephonics ADSL Modem/Router - Multiple Vulnerabilities

CVE-2013-5627—webappshardware03 Sep 2013

20RISK

Exploit-DB✓ VexDay Proof

Apple Mac OSX 10.8.4 - Local Privilege Escalation

CVE-2013-1775—localosx30 Aug 2013

sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypas

38RISK

Exploit-DB✓ VexDay Proof

HP LoadRunner - lrFileIOService ActiveX Remote Code Execution (Metasploit)

CVE-2013-2370—remotewindows29 Aug 2013

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown ve

50RISK

Exploit-DB✓ VexDay Proof

AVTECH DVR Firmware 1017-1003-1009-1003 - Multiple Vulnerabilities

CVE-2013-4980—doshardware29 Aug 2013

Buffer overflow in the RTSP Packet Handler in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possi

23RISK

Exploit-DB✓ VexDay Proof

AVTECH DVR Firmware 1017-1003-1009-1003 - Multiple Vulnerabilities

CVE-2013-4982—doshardware29 Aug 2013

AVTECH AVN801 DVR has a security bypass via the administration login captcha

43RISK

Exploit-DB✓ VexDay Proof

VMware - Setuid VMware-mount Unsafe popen(3) (Metasploit)

CVE-2013-1662—locallinux29 Aug 2013

vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allo

38RISK

Exploit-DB✓ VexDay Proof

Apple Mac OSX - Sudo Password Bypass (Metasploit)

CVE-2013-1775—localosx29 Aug 2013

sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypas

38RISK

Exploit-DB✓ VexDay Proof

AVTECH DVR Firmware 1017-1003-1009-1003 - Multiple Vulnerabilities

CVE-2013-4981—doshardware29 Aug 2013

Buffer overflow in cgi-bin/user/Config.cgi in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possi

23RISK

Exploit-DB✓ VexDay Proof

Mozilla Firefox - XMLSerializer Use-After-Free (Metasploit)

CVE-2013-0753—remotewindows29 Aug 2013

Use-after-free vulnerability in the serializeToStream implementation in the XMLSerializer component in Mozilla Firefox b

50RISK

Exploit-DB✓ VexDay Proof

Aloaha PDF Suite - Remote Stack Buffer Overflow

CVE-2013-4978—remotewindows28 Aug 2013

Stack-based buffer overflow in AloahaPDFViewer 5.0.0.7 and earlier in Aloaha PDF Suite FREE allows remote attackers to e

23RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.