Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,020cataloged exploits

35,276CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,446Referência 22,166GitHub PoC 14,080VulnCheck XDB 8,604Nuclei 4,251Metasploit 3,473✓ verified onlyrecent popular risk

21,899 exploits

Referência

CVE-2016-1596

CVE-2016-1596—

Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authentic

23RISK

Referência

CVE-2016-1611

CVE-2016-1611—

Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.

23RISK

Referência

CVE-2016-1719

CVE-2016-1719—

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RISK

Referência

CVE-2016-1719

CVE-2016-1719—

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RISK

Referência

CVE-2016-1719

CVE-2016-1719—

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RISK

Referência

CVE-2016-1719

CVE-2016-1719—

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RISK

Referência

CVE-2016-1719

CVE-2016-1719—

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RISK

Referência

CVE-2016-1719

CVE-2016-1719—

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RISK

Referência

CVE-2016-1719

CVE-2016-1719—

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RISK

Referência

CVE-2016-1719

CVE-2016-1719—

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RISK

Referência

CVE-2016-1719

CVE-2016-1719—

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RISK

Referência

CVE-2016-1719

CVE-2016-1719—

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RISK

Referência

CVE-2010-1045

CVE-2010-1045—

SQL injection vulnerability in the Productbook (com_productbook) component 1.0.4 for Joomla! allows remote attackers to

23RISK

Referência

CVE-2016-1721

CVE-2016-1721—

The kernel in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges o

23RISK

Referência

CVE-2016-1794

CVE-2016-1794—

The AppleGraphicsControlClient::checkArguments method in AppleGraphicsControl in Apple OS X before 10.11.5 allows attack

23RISK

Referência

CVE-2016-1794

CVE-2016-1794—

The AppleGraphicsControlClient::checkArguments method in AppleGraphicsControl in Apple OS X before 10.11.5 allows attack

23RISK

Referência

CVE-2016-1807

CVE-2016-1807—

Race condition in the Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watch

23RISK

Referência

CVE-2016-1819

CVE-2016-1819—

Use-after-free vulnerability in the IOAccelContext2::clientMemoryForType method in Apple iOS before 9.3.2, OS X before 1

23RISK

Referência

CVE-2016-1823

CVE-2016-1823—

The IOHIDDevice::handleReportWithTime function in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and wa

23RISK

Referência

CVE-2016-1823

CVE-2016-1823—

The IOHIDDevice::handleReportWithTime function in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and wa

23RISK

Referência

CVE-2010-4870

CVE-2010-4870—

SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands v

23RISK

Referência

CVE-2010-4870

CVE-2010-4870—

SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands v

23RISK

Referência

CVE-2016-1863

CVE-2016-1863—

The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local user

23RISK

Referência

CVE-2010-4872

CVE-2010-4872—

SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL c

23RISK

Referência

CVE-2010-4876

CVE-2010-4876—

SQL injection vulnerability in viewpost.php in mBlogger 1.0.04 allows remote attackers to execute arbitrary SQL commands

23RISK

Referência

CVE-2010-4884

CVE-2010-4884—

PHP remote file inclusion vulnerability in guestbook/gbook.php in Gaestebuch 1.2 allows remote attackers to execute arbi

23RISK

Referência

CVE-2016-1960

CVE-2016-1960—

Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox

35RISK

Referência

CVE-2010-1062

CVE-2010-1062—

Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when magi

23RISK

Referência

CVE-2016-2004

CVE-2016-2004—

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary cod

60RISK

Referência

CVE-2010-1066

CVE-2010-1066—

AR Web Content Manager (AWCM) 2.1 stores sensitive information under the web root with insufficient access control, whic

23RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.