Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
10,121 exploits
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALunder attack09 Nov 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALunder attack09 Nov 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2019-0708CRITICALunder attackransomware06 Nov 2020
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2020-0796CRITICALunder attackransomware06 Nov 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-14750CRITICALunder attack06 Nov 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-14847CRITICALunder attack06 Nov 2020
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated
100RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2020-14882CRITICALunder attack05 Nov 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2016-6415HIGHunder attack04 Nov 2020
The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALunder attack04 Nov 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2020-14882CRITICALunder attack03 Nov 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALunder attack03 Nov 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-11022MEDIUM02 Nov 2020
jQuery has a potential XSS vulnerability
55RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALunder attack01 Nov 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
local
CVE-2014-3153HIGHunder attack31 Oct 2020
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two diff
98RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALunder attack31 Oct 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2019-11447—30 Oct 2020
An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce
35RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALunder attack30 Oct 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2015-7858—29 Oct 2020
SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via un
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALunder attack29 Oct 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALunder attack29 Oct 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALunder attack29 Oct 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
local
CVE-2020-1054HIGHunder attack28 Oct 2020
Win32k Elevation of Privilege Vulnerability
98RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALunder attack28 Oct 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALunder attack28 Oct 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
local
CVE-2019-2215HIGHunder attack27 Oct 2020
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2020-0688HIGHunder attackransomware23 Oct 2020
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2019-1579HIGHunder attackransomware21 Oct 2020
Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with Glob
83RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-1472MEDIUMunder attackransomware21 Oct 2020
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-25540—19 Oct 2020
ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2017-5638CRITICALunder attackransomware19 Oct 2020
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RISK
open ↗
← previouspage 295 / 338next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.