Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,058cataloged exploits
35,300CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,175GitHub PoC 14,096VulnCheck XDB 8,607Nuclei 4,255Metasploit 3,474✓ verified onlyrecentpopularrisk
22,175 exploits
Referência
CVE-2014-8656
CVE-2014-8656—
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH have a d
28RISK
open ↗
Referência
CVE-2014-8656
CVE-2014-8656—
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH have a d
28RISK
open ↗
Referência
CVE-2010-4259
CVE-2010-4259—
Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application cras
28RISK
open ↗
Referência
CVE-2018-9302
CVE-2018-9302—
SSRF (Server Side Request Forgery) in /assets/lib/fuc.js.php in Cockpit 0.4.4 through 0.5.5 allows remote attackers to r
23RISK
open ↗
Referência
CVE-2014-1907
CVE-2014-1907—
Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for Wor
28RISK
open ↗
Referência
CVE-2015-6567
CVE-2015-6567—
Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/
28RISK
open ↗
Referência
CVE-2015-6567
CVE-2015-6567—
Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/
28RISK
open ↗
Referência
CVE-2017-3006
CVE-2017-3006—
Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions durin
28RISK
open ↗
Referência
CVE-2013-6234
CVE-2013-6234—
Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users
23RISK
open ↗
Referência
CVE-2022-38841
CVE-2022-38841HIGH
Linksys AX3200 1.1.00 is vulnerable to OS command injection by authenticated users via shell metacharacters to the diagn
46RISK
open ↗
Referência
CVE-2015-3205
CVE-2015-3205—
libmimedir allows remote attackers to execute arbitrary code via a VCF file with two NULL bytes at the end of the file,
28RISK
open ↗
Referência
CVE-2015-3205
CVE-2015-3205—
libmimedir allows remote attackers to execute arbitrary code via a VCF file with two NULL bytes at the end of the file,
28RISK
open ↗
Referência
CVE-2018-12908
CVE-2018-12908—
Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensiti
28RISK
open ↗
Referência
CVE-2022-4681
CVE-2022-4681CRITICAL
Hide My WP < 6.2.9 - Unauthenticated SQLi
48RISK
open ↗
Referência✓ VexDay Proof
CCProxy 6.2 - 'ping' Remote Buffer Overflow
CVE-2004-2685—remotewindows
Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long addre
28RISK
open ↗
Referência
CVE-2017-20216
CVE-2017-20216CRITICAL
FLIR Thermal Camera PT-Series firmware version 8.0.0.64 Unauthenticated Remote Command Injection
53RISK
open ↗
Referência
CVE-2009-2924
CVE-2009-2924—
Multiple SQL injection vulnerabilities in Videos Broadcast Yourself 2 allow remote attackers to execute arbitrary SQL co
23RISK
open ↗
Referência✓ VexDay Proof
Mambo Component com_gallery - SQL Injection
CVE-2008-0746—webappsphp
SQL injection vulnerability in index.php in the Gallery (com_gallery) component for Mambo and Joomla! allows remote atta
23RISK
open ↗
Referência
CVE-2018-12293
CVE-2018-12293—
The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKi
28RISK
open ↗
Referência
CVE-2018-12293
CVE-2018-12293—
The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKi
28RISK
open ↗
Referência
CVE-2020-15956
CVE-2020-15956—
ActiveMediaServer.exe in ACTi NVR3 Standard Server 3.0.12.42 allows remote unauthenticated attackers to trigger a buffer
28RISK
open ↗
Referência
CVE-2023-29809
CVE-2023-29809CRITICAL
SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbit
53RISK
open ↗
Referência
CVE-2009-2927
CVE-2009-2927—
SQL injection vulnerability in DetailFile.php in DigitalSpinners DS CMS 1.0 allows remote attackers to execute arbitrary
23RISK
open ↗
Referência
CVE-2021-31682
CVE-2021-31682—
The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for re
43RISK
open ↗
Referência
CVE-2012-0698
CVE-2012-0698—
tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash) via a crafted type_of
28RISK
open ↗
Referência
CVE-2012-0698
CVE-2012-0698—
tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash) via a crafted type_of
28RISK
open ↗
Referência
CVE-2022-37109
CVE-2022-37109CRITICAL
patrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Access
60RISK
open ↗
Referência
CVE-2012-1803
CVE-2012-1803—
RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Ad
50RISK
open ↗
Referência
CVE-2018-4222
CVE-2018-4222—
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud
28RISK
open ↗
Referência
CVE-2022-46552
CVE-2022-46552HIGH
D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution (RCE) vulnerability via the lan
46RISK
open ↗
← previouspage 369 / 740next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.