Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,302cataloged exploits
35,469CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,301GitHub PoC 14,141VulnCheck XDB 8,646Nuclei 4,289Metasploit 3,474✓ verified onlyrecentpopularrisk
22,301 exploits
Referência
CVE-2015-7246
CVE-2015-7246—
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root accou
28RISK
open ↗
Referência
CVE-2015-7246
CVE-2015-7246—
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root accou
28RISK
open ↗
Referência
CVE-2010-3132
CVE-2010-3132—
Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909, and probably other versions, a
28RISK
open ↗
Referência
CVE-2023-36812
CVE-2023-36812CRITICAL
Remote Code Execution in OpenTSDB
68RISK
open ↗
Referência
CVE-2009-4691
CVE-2009-4691—
SQL injection vulnerability in addlink.php in Classified Linktrader Script allows remote attackers to execute arbitrary
23RISK
open ↗
Referência
CVE-2018-17442
CVE-2018-17442—
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. An unrestricted file upload vulnerabili
28RISK
open ↗
Referência
CVE-2017-11154
CVE-2017-11154—
Unrestricted file upload vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-296
23RISK
open ↗
Referência
CVE-2019-7751
CVE-2019-7751—
A directory traversal and local file inclusion vulnerability in FPProducerInternetServer.exe in Ricoh MarcomCentral, for
28RISK
open ↗
Referência
CVE-2018-16283
CVE-2018-16283—
The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter.
50RISK
open ↗
Referência
CVE-2020-10181
CVE-2020-10181CRITICALunder attack
goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevate
83RISK
open ↗
Referência
CVE-2017-9347
CVE-2017-9347—
In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This was addressed in epan/d
28RISK
open ↗
Referência
CVE-2020-8416
CVE-2020-8416—
IKTeam BearFTP before 0.2.0 allows remote attackers to achieve denial of service via a large volume of connections to th
28RISK
open ↗
Referência
CVE-2015-7944
CVE-2015-7944—
The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11
28RISK
open ↗
Referência
CVE-2015-7944
CVE-2015-7944—
The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11
28RISK
open ↗
Referência
CVE-2008-6264
CVE-2008-6264—
SQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote attackers to execute arbitrary
23RISK
open ↗
Referência
CVE-2023-32749
CVE-2023-32749HIGH
Pydio Cells allows users by default to create so-called external users in order to share files with them. By modifying t
46RISK
open ↗
Referência
CVE-2019-11080
CVE-2019-11080—
Sitecore Experience Platform (XP) prior to 9.1.1 is vulnerable to remote code execution via deserialization, aka TFS # 2
28RISK
open ↗
Referência
CVE-2013-1597
CVE-2013-1597—
A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET requ
28RISK
open ↗
Referência✓ VexDay Proof
FutureSoft TFTP Server 2000 - Remote Overwrite (SEH)
CVE-2007-1645—remotewindows
Buffer overflow in FutureSoft TFTP Server 2000 on Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrar
28RISK
open ↗
Referência
CVE-2022-3792
CVE-2022-3792CRITICAL
SQL Injection in GullsEye Terminal Operating System
53RISK
open ↗
Referência
CVE-2022-3792
CVE-2022-3792CRITICAL
SQL Injection in GullsEye Terminal Operating System
53RISK
open ↗
Referência
CVE-2014-4170
CVE-2014-4170—
A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restric
28RISK
open ↗
Referência✓ VexDay Proof
Alstrasoft Forum Pay Per Post Exchange 2.0 - SQL Injection
CVE-2008-0429—webappsphp
SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execut
23RISK
open ↗
Referência✓ VexDay Proof
360 Web Manager 3.0 - 'IDFM' SQL Injection
CVE-2008-0430—webappsphp
SQL injection vulnerability in form.php in 360 Web Manager 3.0 allows remote attackers to execute arbitrary SQL commands
23RISK
open ↗
Referência
MarcomCentral FusionPro VDP Creator < 10.0 - Directory Traversal
CVE-2019-7751—webappswindows
A directory traversal and local file inclusion vulnerability in FPProducerInternetServer.exe in Ricoh MarcomCentral, for
28RISK
open ↗
Referência
CVE-2009-4722
CVE-2009-4722—
SQL injection vulnerability in the CheckLogin function in includes/functions.php in Limny 1.01, when magic_quotes_gpc is
23RISK
open ↗
Referência
CVE-2017-7478
CVE-2017-7478—
OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control
28RISK
open ↗
Referência
CVE-2015-7874
CVE-2015-7874—
Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary
28RISK
open ↗
Referência
CVE-2012-4330
CVE-2012-4330—
The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long
28RISK
open ↗
Referência
CVE-2009-4724
CVE-2009-4724—
SQL injection vulnerability in shop.htm in PaymentProcessorScript.net PPScript allows remote attackers to execute arbitr
23RISK
open ↗
← previouspage 443 / 744next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.