Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
10,121 exploits
VulnCheck XDB
local
CVE-2019-5736—04 Feb 2020
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b
60RISK
open ↗
VulnCheck XDB
client-side
CVE-2020-0601HIGHunder attack03 Feb 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISK
open ↗
VulnCheck XDB
local
CVE-2020-15368MEDIUM02 Feb 2020
AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering
33RISK
open ↗
VulnCheck XDB
local
CVE-2019-2215HIGHunder attack30 Jan 2020
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2020-0601HIGHunder attack29 Jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISK
open ↗
VulnCheck XDB
client-side
CVE-2020-0601HIGHunder attack28 Jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-7980—28 Jan 2020
Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to th
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-22947CRITICALunder attack25 Jan 2020
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2020-0601HIGHunder attack23 Jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISK
open ↗
VulnCheck XDB
denial-of-service
CVE-2020-0610—23 Jan 2020
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta
35RISK
open ↗
VulnCheck XDB
denial-of-service
CVE-2020-0609—23 Jan 2020
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta
45RISK
open ↗
VulnCheck XDB
initial-access
CVE-2019-19781CRITICALunder attackransomware22 Jan 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISK
open ↗
VulnCheck XDB
local
CVE-2019-8605HIGHunder attack20 Jan 2020
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.1
76RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-2551CRITICALunder attack19 Jan 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2020-0601HIGHunder attack19 Jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2019-19781CRITICALunder attackransomware17 Jan 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2020-0601HIGHunder attack16 Jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-2893—15 Jan 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
60RISK
open ↗
VulnCheck XDB
client-side
CVE-2020-0601HIGHunder attack15 Jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-14883HIGHunder attack15 Jan 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2016-0638—15 Jan 2020
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, an
35RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-2883CRITICALunder attack15 Jan 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2017-10271HIGHunder attackransomware15 Jan 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-2628CRITICALunder attack15 Jan 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-2894—15 Jan 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Su
50RISK
open ↗
VulnCheck XDB
initial-access
CVE-2019-2725HIGHunder attackransomware15 Jan 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALunder attack15 Jan 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2019-2729CRITICAL15 Jan 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte
85RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-2555CRITICALunder attack15 Jan 2020
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Su
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-14750CRITICALunder attack15 Jan 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
← previouspage 310 / 338next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.