Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
10,121 exploits
VulnCheck XDB
initial-access
CVE-2014-3120HIGHunder attack07 Jul 2014
The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execut
100RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2014-0224—12 Jun 2014
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
60RISK
open ↗
VulnCheck XDB
local
CVE-2014-0196MEDIUMunder attack13 May 2014
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver a
68RISK
open ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHunder attack03 May 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHunder attack01 May 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHunder attack19 Apr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHunder attack15 Apr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHunder attack13 Apr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHunder attack12 Apr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHunder attack10 Apr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHunder attack10 Apr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHunder attack09 Apr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHunder attack09 Apr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHunder attack08 Apr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHunder attack08 Apr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHunder attack08 Apr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHunder attack08 Apr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHunder attack08 Apr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHunder attack08 Apr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHunder attack07 Apr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2012-3152CRITICALunder attack28 Jan 2014
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and
100RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2012-3153—28 Jan 2014
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and
60RISK
open ↗
VulnCheck XDB
local
CVE-2013-6282HIGHunder attack21 Dec 2013
The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not
98RISK
open ↗
VulnCheck XDB
client-side
CVE-2013-3893HIGHunder attack15 Oct 2013
Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 throug
100RISK
open ↗
VulnCheck XDB
local
CVE-2013-2595—03 Oct 2013
The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm
23RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-22954CRITICALunder attackransomware01 Oct 2013
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISK
open ↗
VulnCheck XDB
denial-of-service
CVE-2013-1300—09 Sep 2013
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, W
43RISK
open ↗
VulnCheck XDB
local
CVE-2013-2596HIGHunder attack16 Jul 2013
Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain
71RISK
open ↗
VulnCheck XDB
initial-access
CVE-2013-2597HIGHunder attack11 Jun 2013
Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6
71RISK
open ↗
VulnCheck XDB
local
CVE-2013-2094HIGHunder attack05 Jun 2013
The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data t
83RISK
open ↗
← previouspage 337 / 338next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.