Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,151cataloged exploits
35,370CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,233GitHub PoC 14,119VulnCheck XDB 8,617Nuclei 4,257Metasploit 3,474✓ verified onlyrecentpopularrisk
22,233 exploits
Referência✓ VexDay Proof
AirMore 1.6.1 - Denial of Service (PoC)
CVE-2019-9831—dosandroid
The AirMore application through 1.6.1 for Android allows remote attackers to cause a denial of service (system hang) via
23RISK
open ↗
Referência
CVE-2026-7068
CVE-2026-7068HIGH
D-Link DIR-825 nmbd sserver.c NMBD_process buffer overflow
41RISK
open ↗
Referência
CVE-2021-4039
CVE-2021-4039CRITICAL
A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to exec
70RISK
open ↗
Referência
CVE-2015-2509
CVE-2015-2509—
Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows user-assisted remo
60RISK
open ↗
Referência
CVE-2015-2509
CVE-2015-2509—
Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows user-assisted remo
60RISK
open ↗
Referência
CVE-2019-9879
CVE-2019-9879—
The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever
50RISK
open ↗
Referência
CVE-2018-8279
CVE-2018-8279—
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft E
45RISK
open ↗
Referência
CVE-2017-8895
CVE-2017-8895—
In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a u
60RISK
open ↗
Referência
CVE-2013-4835
CVE-2013-4835—
The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authenti
60RISK
open ↗
Referência
CVE-2011-3492
CVE-2011-3492—
Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial
60RISK
open ↗
Referência
CVE-2020-17456
CVE-2020-17456—
SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi pa
60RISK
open ↗
Referência
CVE-2014-5460
CVE-2014-5460—
Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remot
60RISK
open ↗
Referência
CVE-2014-5460
CVE-2014-5460—
Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remot
60RISK
open ↗
Referência
CVE-2016-5675
CVE-2016-5675—
handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 th
60RISK
open ↗
Referência
CVE-2020-11456
CVE-2020-11456—
LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and applicati
45RISK
open ↗
Referência
CVE-2018-7490
CVE-2018-7490—
uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversa
50RISK
open ↗
Referência
CVE-2021-35064
CVE-2021-35064—
KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits runn
60RISK
open ↗
Referência
CVE-2012-6588
CVE-2012-6588—
SQL injection vulnerability in links.php in MYRE Business Directory allows remote attackers to execute arbitrary SQL com
23RISK
open ↗
Referência
CVE-2018-8291
CVE-2018-8291—
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft brow
45RISK
open ↗
Referência
CVE-2018-8288
CVE-2018-8288—
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft brow
45RISK
open ↗
Referência✓ VexDay Proof
PHP Generic library & Framework - 'INCLUDE_PATH' Remote File Inclusion
CVE-2007-0584—webappsphp
PHP remote file inclusion vulnerability in membres/membreManager.php in PhP Generic Library & Framework for comm (g-neri
35RISK
open ↗
Referência
CVE-2019-7257
CVE-2019-7257—
Linear eMerge E3-Series devices allow Unrestricted File Upload.
35RISK
open ↗
Referência
CVE-2016-0185
CVE-2016-0185HIGHunder attack
Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary
83RISK
open ↗
Referência
CVE-2021-32682
CVE-2021-32682CRITICAL
Multiple vulnerabilities leading to RCE
75RISK
open ↗
Referência
CVE-2015-5082
CVE-2015-5082—
Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW
50RISK
open ↗
Referência
CVE-2015-5082
CVE-2015-5082—
Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW
50RISK
open ↗
Referência
CVE-2015-5082
CVE-2015-5082—
Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW
50RISK
open ↗
Referência
CVE-2015-5082
CVE-2015-5082—
Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW
50RISK
open ↗
Referência
CVE-2014-8517
CVE-2014-8517—
The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 thro
50RISK
open ↗
Referência
CVE-2016-1106
CVE-2016-1106—
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof
35RISK
open ↗
← previouspage 394 / 742next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.