Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,449cataloged exploits

35,552CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,451Referência 22,367GitHub PoC 14,225VulnCheck XDB 8,649Nuclei 4,283Metasploit 3,474✓ verified onlyrecent popular risk

22,332 exploits

Referência

CVE-2018-17380

CVE-2018-17380—

SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the start_date, m_start_date, or m_e

23RISK

open ↗

Referência

CVE-2018-17383

CVE-2018-17383—

SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filter_order or filter_order_Dir para

23RISK

open ↗

Referência

CVE-2018-17384

CVE-2018-17384—

SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filter_order_Dir or filter_order parameter.

23RISK

open ↗

Referência

CVE-2018-17385

CVE-2018-17385—

SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radius[lat], radius[lng], or radius[radiu

23RISK

open ↗

Referência

CVE-2018-17385

CVE-2018-17385—

SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radius[lat], radius[lng], or radius[radiu

23RISK

open ↗

Referência

CVE-2018-17391

CVE-2018-17391—

SQL Injection exists in authors_post.php in Super Cms Blog Pro 1.0 via the author parameter.

23RISK

open ↗

Referência

CVE-2018-17391

CVE-2018-17391—

SQL Injection exists in authors_post.php in Super Cms Blog Pro 1.0 via the author parameter.

23RISK

open ↗

Referência

CVE-2018-17394

CVE-2018-17394—

SQL Injection exists in the Timetable Schedule 3.6.8 component for Joomla! via the eid parameter.

23RISK

open ↗

Referência

CVE-2018-17394

CVE-2018-17394—

SQL Injection exists in the Timetable Schedule 3.6.8 component for Joomla! via the eid parameter.

23RISK

open ↗

Referência

CVE-2018-17397

CVE-2018-17397—

SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter.

23RISK

open ↗

Referência

CVE-2018-17397

CVE-2018-17397—

SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter.

23RISK

open ↗

Referência

CVE-2018-17442

CVE-2018-17442—

An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. An unrestricted file upload vulnerabili

28RISK

open ↗

Referência

CVE-2023-3844

CVE-2023-3844LOW

mooSocial mooDating URL friends cross site scripting

43RISK

open ↗

Referência

CVE-2018-17587

CVE-2018-17587—

AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

23RISK

open ↗

Referência

CVE-2018-17587

CVE-2018-17587—

AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

23RISK

open ↗

Referência

CVE-2018-17590

CVE-2018-17590—

AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

23RISK

open ↗

Referência

CVE-2018-17590

CVE-2018-17590—

AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

23RISK

open ↗

Referência

CVE-2018-17591

CVE-2018-17591—

AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

23RISK

open ↗

Referência

CVE-2018-17591

CVE-2018-17591—

AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

23RISK

open ↗

Referência

CVE-2018-17593

CVE-2018-17593—

AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

23RISK

open ↗

Referência

CVE-2018-17593

CVE-2018-17593—

AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

23RISK

open ↗

Referência

CVE-2018-17775

CVE-2018-17775—

Seqrite End Point Security v7.4 has "Everyone: (F)" permission for %PROGRAMFILES%\Seqrite\Seqrite, which allows local us

23RISK

open ↗

Referência

CVE-2018-17776

CVE-2018-17776—

PCProtect Anti-Virus v4.8.35 has "Everyone: (F)" permission for %PROGRAMFILES(X86)%\PCProtect, which allows local users

23RISK

open ↗

Referência

CVE-2018-18322

CVE-2018-18322—

CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/ind

28RISK

open ↗

Referência

CVE-2018-18325

CVE-2018-18325HIGHunder attack

DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue ex

100RISK

open ↗

Referência

CVE-2018-18326

CVE-2018-18326—

DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expect

50RISK

open ↗

Referência

CVE-2018-18416

CVE-2018-18416—

LANGO Codeigniter Multilingual Script 1.0 has XSS in the input and upload sections, as demonstrated by the site_name par

23RISK

open ↗

Referência

CVE-2018-18416

CVE-2018-18416—

LANGO Codeigniter Multilingual Script 1.0 has XSS in the input and upload sections, as demonstrated by the site_name par

23RISK

open ↗

Referência

CVE-2018-18417

CVE-2018-18417—

In the 3.1 version of Ekushey Project Manager CRM, Stored XSS has been discovered in the input and upload sections, as d

23RISK

open ↗

Referência

CVE-2018-18777

CVE-2018-18777—

Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter subp

43RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.