Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,724cataloged exploits
35,724CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,492GitHub PoC 14,286VulnCheck XDB 8,703Nuclei 4,314Metasploit 3,474✓ verified onlyrecentpopularrisk
22,429 exploits
Referência
CVE-2016-3325
CVE-2016-3325—
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted w
35RISK
open ↗
Referência
CVE-2017-11810
CVE-2017-11810—
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Window
35RISK
open ↗
Referência
CVE-2018-8831
CVE-2018-8831—
A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/s
35RISK
open ↗
Referência
CVE-2018-4233
CVE-2018-4233HIGH
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud
68RISK
open ↗
Referência
CVE-2018-4233
CVE-2018-4233HIGH
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud
68RISK
open ↗
Referência
CVE-2022-36267
CVE-2022-36267—
In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerabilit
35RISK
open ↗
Referência
CVE-2016-5312
CVE-2016-5312—
Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote au
35RISK
open ↗
Referência
CVE-2024-9441
CVE-2024-9441CRITICAL
Linear eMerge e3-Series Forgot Password Command Injection
60RISK
open ↗
Referência
CVE-2013-0722
CVE-2013-0722—
Stack-based buffer overflow in the scan_load_hosts function in ec_scan.c in Ettercap 0.7.5.1 and earlier might allow loc
23RISK
open ↗
Referência
CVE-2012-4329
CVE-2012-4329—
The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restart
28RISK
open ↗
Referência✓ VexDay Proof
Microsoft Windows - '.chm' Denial of Service (HTML Compiled)
CVE-2009-0119—doswindows
Buffer overflow in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (memory corruption and
35RISK
open ↗
Referência✓ VexDay Proof
MyioSoft Ajax Portal 3.0 - 'page' SQL Injection
CVE-2009-1509—webappsphp
SQL injection vulnerability in ajaxp_backend.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrary
23RISK
open ↗
Referência✓ VexDay Proof
Roundcube Webmail 0.2-3 Beta - Code Execution
CVE-2008-5619—webappsphp
html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail)
35RISK
open ↗
Referência
CVE-2009-2484
CVE-2009-2484—
Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.
50RISK
open ↗
Referência
CVE-2020-1054
CVE-2020-1054HIGHunder attack
Win32k Elevation of Privilege Vulnerability
98RISK
open ↗
Referência
CVE-2009-3430
CVE-2009-3430—
SQL injection vulnerability in login.php in Allomani Mobile 2.5 allows remote attackers to execute arbitrary SQL command
23RISK
open ↗
Referência
CVE-2017-13772
CVE-2017-13772—
Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated
35RISK
open ↗
Referência
CVE-2017-8734
CVE-2017-8734—
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arb
35RISK
open ↗
Referência
CVE-2013-1359
CVE-2013-1359—
An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5
60RISK
open ↗
Referência
CVE-2023-27823
CVE-2023-27823CRITICAL
An authentication bypass in Optoma 1080PSTX C02 allows an attacker to access the administration console without valid cr
60RISK
open ↗
Referência✓ VexDay Proof
GForge < 4.6b2 - 'skill_delete' SQL Injection
CVE-2007-4966—webappsphp
SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute
23RISK
open ↗
Referência
CVE-2010-2309
CVE-2010-2309—
Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary cod
50RISK
open ↗
Referência
CVE-2009-2639
CVE-2009-2639—
SQL injection vulnerability in admin.php in MRCGIGUY The Ticket System 2.0 allows remote attackers to execute arbitrary
23RISK
open ↗
Referência
CVE-2017-14535
CVE-2017-14535—
trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php
50RISK
open ↗
Referência
CVE-2015-8256
CVE-2015-8256—
Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras.
35RISK
open ↗
Referência
CVE-2015-8256
CVE-2015-8256—
Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras.
35RISK
open ↗
Referência
CVE-2019-12518
CVE-2019-12518—
Anviz CrossChex access control management software 4.3.8.0 and 4.3.12 is vulnerable to a buffer overflow vulnerability.
50RISK
open ↗
Referência
CVE-2020-15050
CVE-2020-15050—
An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2. Remote attackers can read arbitrary fi
50RISK
open ↗
Referência
CVE-2015-5131
CVE-2015-5131—
Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR
35RISK
open ↗
Referência
CVE-2015-5132
CVE-2015-5132—
Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR
35RISK
open ↗
← previouspage 519 / 748next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.