Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,302cataloged exploits
35,469CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,301GitHub PoC 14,141VulnCheck XDB 8,646Nuclei 4,289Metasploit 3,474✓ verified onlyrecentpopularrisk
22,266 exploits
Referência
CVE-2010-0943
CVE-2010-0943—
Directory traversal vulnerability in the JA Showcase (com_jashowcase) component for Joomla! allows remote attackers to r
43RISK
open ↗
Referência
CVE-2010-0943
CVE-2010-0943—
Directory traversal vulnerability in the JA Showcase (com_jashowcase) component for Joomla! allows remote attackers to r
43RISK
open ↗
Referência✓ VexDay Proof
TaskFreak! 0.6.1 - SQL Injection
CVE-2008-0270—webappsphp
SQL injection vulnerability in index.php in TaskFreak! 0.6.1 and earlier allows remote authenticated users to execute ar
23RISK
open ↗
Referência
CVE-2018-11412
CVE-2018-11412—
In the Linux kernel 4.13 through 4.16.11, ext4_read_inline_data() in fs/ext4/inline.c performs a memcpy with an untruste
28RISK
open ↗
Referência
CVE-2017-7455
CVE-2017-7455—
Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control.
28RISK
open ↗
Referência
CVE-2017-7455
CVE-2017-7455—
Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control.
28RISK
open ↗
Referência
CVE-2010-1532
CVE-2010-1532—
Directory traversal vulnerability in the givesight PowerMail Pro (com_powermail) component 1.5.3 for Joomla! allows remo
43RISK
open ↗
Referência
CVE-2010-1532
CVE-2010-1532—
Directory traversal vulnerability in the givesight PowerMail Pro (com_powermail) component 1.5.3 for Joomla! allows remo
43RISK
open ↗
Referência
CVE-2015-5065
CVE-2015-5065—
Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic
28RISK
open ↗
Referência
CVE-2015-5065
CVE-2015-5065—
Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic
28RISK
open ↗
Referência
CVE-2018-0834
CVE-2018-0834—
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot
35RISK
open ↗
Referência
CVE-2010-3142
CVE-2010-3142—
Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attacker
28RISK
open ↗
Referência
CVE-2018-14485
CVE-2018-14485—
BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.
28RISK
open ↗
Referência
CVE-2019-7262
CVE-2019-7262—
Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).
28RISK
open ↗
Referência
CVE-2011-0501
CVE-2011-0501—
Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions all
28RISK
open ↗
Referência
CVE-2011-4362
CVE-2011-4362—
Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lighttp
28RISK
open ↗
Referência
CVE-2015-4666
CVE-2015-4666—
Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attack
43RISK
open ↗
Referência
CVE-2015-4666
CVE-2015-4666—
Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attack
43RISK
open ↗
Referência
CVE-2020-11749
CVE-2020-11749—
Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator
28RISK
open ↗
Referência
CVE-2017-6206
CVE-2017-6206—
D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devi
28RISK
open ↗
Referência
CVE-2019-18396
CVE-2019-18396—
An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Comm
28RISK
open ↗
Referência
CVE-2013-2571
CVE-2013-2571—
Iris 3.8 before build 1548, as used in Xpient point of sale (POS) systems, allows remote attackers to execute arbitrary
28RISK
open ↗
Referência
CVE-2013-2571
CVE-2013-2571—
Iris 3.8 before build 1548, as used in Xpient point of sale (POS) systems, allows remote attackers to execute arbitrary
28RISK
open ↗
Referência
CVE-2020-5330
CVE-2020-5330HIGH
Dell EMC Networking X-Series firmware versions 3.0.1.2 and older, Dell EMC Networking PC5500 firmware versions 4.1.0.22
46RISK
open ↗
Referência
CVE-2017-1000251
CVE-2017-1000251—
The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and includ
28RISK
open ↗
Referência✓ VexDay Proof
Total Video Player 1.03 - '.m3u' File Local Buffer Overflow
CVE-2007-0949—localwindows
Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers t
28RISK
open ↗
Referência✓ VexDay Proof
DomPHP 0.81 - Remote Add Administrator
CVE-2008-0282—webappsphp
SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute arb
23RISK
open ↗
Referência
CVE-2018-15442
CVE-2018-15442HIGH
Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability
61RISK
open ↗
Referência
CVE-2014-0787
CVE-2014-0787—
WellinTech KingSCADA Stack-based Buffer Overflow
53RISK
open ↗
Referência
CVE-2017-12785
CVE-2017-12785—
The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on Novi
28RISK
open ↗
← previouspage 428 / 743next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.