Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

78,958cataloged exploits

36,206CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,460Referência 22,832GitHub PoC 14,991VulnCheck XDB 8,829Nuclei 4,357Metasploit 3,489✓ verified onlyrecent popular risk

3,477 exploits

Metasploit600

Jenkins ACL Bypass and Metaprogramming RCE

CVE-2019-1003002—08 Jan 2019

A sandbox bypass vulnerability exists in Pipeline: Declarative Plugin 1.3.3 and earlier in pipeline-model-definition/src

60RISK

Metasploit600

Jenkins ACL Bypass and Metaprogramming RCE

CVE-2019-1003001—08 Jan 2019

A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.61 and earlier in src/main/java/org/jenkinsci/plugins

60RISK

Metasploit600

Jenkins ACL Bypass and Metaprogramming RCE

CVE-2019-1003005—08 Jan 2019

A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.50 and earlier in src/main/java/org/jenkinsci/

23RISK

Metasploit600

Jenkins ACL Bypass and Metaprogramming RCE

CVE-2019-1003029CRITICALunder attack08 Jan 2019

A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/

100RISK

Metasploit600

Jenkins ACL Bypass and Metaprogramming RCE

CVE-2019-1003000—08 Jan 2019

A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/

60RISK

Metasploit600

Jenkins ACL Bypass and Metaprogramming RCE

CVE-2018-1000861CRITICALunder attack08 Jan 2019

A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and ea

100RISK

Metasploit0

Docker Container Escape Via runC Overwrite

CVE-2019-5736—01 Jan 2019

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISK

Metasploit600

Mailcleaner Remote Code Execution

CVE-2018-20323—19 Dec 2018

www/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote attackers to execute arbitra

30RISK

Metasploit600

LibreNMS addhost Command Injection

CVE-2018-20434—16 Dec 2018

LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to htm

60RISK

Metasploit600

ThinkPHP Multiple PHP Injection RCEs

CVE-2018-20062CRITICALunder attack10 Dec 2018

An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP

100RISK

Metasploit600

ThinkPHP Multiple PHP Injection RCEs

CVE-2019-9082HIGHunder attack10 Dec 2018

ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public/

100RISK

Metasploit600

Cisco Prime Infrastructure Runrshell Privilege Escalation

CVE-2018-15439CRITICAL08 Dec 2018

Cisco Small Business Switches Privileged Access Vulnerability

55RISK

Metasploit500

Linux Nested User Namespace idmap Limit Local Privilege Escalation

CVE-2018-18955—15 Nov 2018

In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalat

38RISK

Metasploit600

Nagios XI Magpie_debug.php Root Remote Code Execution

CVE-2018-15708—14 Nov 2018

Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP r

60RISK

Metasploit600

Nagios XI Magpie_debug.php Root Remote Code Execution

CVE-2018-15710—14 Nov 2018

Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php.

50RISK

Metasploit400

Redis Replication Code Execution

CVE-2018-11218—13 Nov 2018

Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10,

30RISK

Metasploit300

WordPress WP GDPR Compliance Plugin Privilege Escalation

CVE-2018-19207—08 Nov 2018

The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to exe

60RISK

Metasploit500

VyOS restricted-shell Escape and Privilege Escalation

CVE-2018-18556—05 Nov 2018

A privilege escalation issue was discovered in VyOS 1.1.8. The default configuration also allows operator users to execu

23RISK

Metasploit600

Intelliants Subrion CMS 4.2.1 - Authenticated File Upload Bypass to RCE

CVE-2018-19422—04 Nov 2018

/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, beca

50RISK

Metasploit400

Reliable Datagram Sockets (RDS) rds_atomic_free_op NULL pointer dereference Privilege Escalation

CVE-2018-5333—01 Nov 2018

In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning

38RISK

Metasploit400

Reliable Datagram Sockets (RDS) rds_atomic_free_op NULL pointer dereference Privilege Escalation

CVE-2019-9213—01 Nov 2018

In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which make

38RISK

Metasploit400

Xorg X11 Server SUID logfile Privilege Escalation

CVE-2018-14665—25 Oct 2018

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RISK

Metasploit500

Xorg X11 Server Local Privilege Escalation

CVE-2018-14665—25 Oct 2018

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RISK

Metasploit400

Xorg X11 Server SUID modulepath Privilege Escalation

CVE-2018-14665—25 Oct 2018

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RISK

Metasploit0

WebExec Authenticated User Code Execution

CVE-2018-15442HIGH24 Oct 2018

Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability

61RISK

Metasploit400

php imap_open Remote Code Execution

CVE-2018-19518—23 Oct 2018

University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh c

60RISK

Metasploit400

php imap_open Remote Code Execution

CVE-2018-1000859—23 Oct 2018

15RISK

Metasploit300

LibreOffice Macro Code Execution

CVE-2018-16858HIGH18 Oct 2018

It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could

68RISK

Metasploit300

libssh Authentication Bypass Scanner

CVE-2018-10933CRITICAL16 Oct 2018

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul

85RISK

Metasploit300

Nuuo Central Management Server Authenticated Arbitrary File Download

CVE-2018-17934—11 Oct 2018

NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be res

23RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.