Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,620cataloged exploits
35,647CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,429GitHub PoC 14,270VulnCheck XDB 8,693Nuclei 4,299Metasploit 3,474✓ verified onlyrecentpopularrisk
22,429 exploits
Referência
CVE-2012-0209
CVE-2012-0209—
Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November
60RISK
open ↗
Referência
CVE-2024-25735
CVE-2024-25735CRITICAL
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext password
75RISK
open ↗
Referência
CVE-2016-1543
CVE-2016-1543—
The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux a
60RISK
open ↗
Referência
CVE-2016-1543
CVE-2016-1543—
The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux a
60RISK
open ↗
Referência
CVE-2016-1543
CVE-2016-1543—
The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux a
60RISK
open ↗
Referência
CVE-2024-12084
CVE-2024-12084CRITICAL
Rsync: heap buffer overflow in rsync due to improper checksum length handling
70RISK
open ↗
Referência
CVE-2019-6453
CVE-2019-6453—
mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The a
35RISK
open ↗
Referência
CVE-2010-2703
CVE-2010-2703—
Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM)
60RISK
open ↗
Referência
CVE-2017-8755
CVE-2017-8755—
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary
45RISK
open ↗
Referência
CVE-2016-1909
CVE-2016-1909—
Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; FortiCache 3.0.x before 3.0
60RISK
open ↗
Referência
CVE-2016-1909
CVE-2016-1909—
Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; FortiCache 3.0.x before 3.0
60RISK
open ↗
Referência
CVE-2018-10094
CVE-2018-10094—
SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vecto
60RISK
open ↗
Referência
CVE-2012-4876
CVE-2012-4876—
Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera
60RISK
open ↗
Referência✓ VexDay Proof
Bloginator 1a - Cookie Bypass / SQL Injection
CVE-2009-1049—webappsphp
SQL injection vulnerability in articleCall.php in Bloginator 1A allows remote attackers to execute arbitrary SQL command
23RISK
open ↗
Referência✓ VexDay Proof
chCounter 3.1.3 - Authentication Bypass
CVE-2009-1347—webappsphp
Multiple SQL injection vulnerabilities in stats/index.php in chCounter 3.1.3 allow remote attackers to execute arbitrary
23RISK
open ↗
Referência
CVE-2020-8518
CVE-2020-8518—
Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execu
60RISK
open ↗
Referência
CVE-2009-2765
CVE-2009-2765—
httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers
60RISK
open ↗
Referência✓ VexDay Proof
Powl 0.94 - 'htmledit.php' Remote File Inclusion
CVE-2007-3371—webappsphp
PHP remote file inclusion vulnerability in plugins/widgets/htmledit/htmledit.php in Powl 0.94 allows remote attackers to
45RISK
open ↗
Referência✓ VexDay Proof
phpBG 0.9.1 - 'rootdir' Remote File Inclusion
CVE-2007-4636—webappsphp
Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code v
45RISK
open ↗
Referência
CVE-2018-8291
CVE-2018-8291—
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft brow
45RISK
open ↗
Referência
CVE-2018-8288
CVE-2018-8288—
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft brow
45RISK
open ↗
Referência
CVE-2019-7257
CVE-2019-7257—
Linear eMerge E3-Series devices allow Unrestricted File Upload.
35RISK
open ↗
Referência
CVE-2016-0185
CVE-2016-0185HIGHunder attack
Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary
83RISK
open ↗
Referência
CVE-2021-32682
CVE-2021-32682CRITICAL
Multiple vulnerabilities leading to RCE
75RISK
open ↗
Referência
CVE-2015-5082
CVE-2015-5082—
Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW
50RISK
open ↗
Referência
CVE-2015-5082
CVE-2015-5082—
Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW
50RISK
open ↗
Referência
CVE-2015-5082
CVE-2015-5082—
Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW
50RISK
open ↗
Referência
CVE-2015-5082
CVE-2015-5082—
Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW
50RISK
open ↗
Referência
CVE-2014-8517
CVE-2014-8517—
The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 thro
50RISK
open ↗
Referência
CVE-2016-1106
CVE-2016-1106—
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof
35RISK
open ↗
← previouspage 509 / 748next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.