Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,724cataloged exploits
35,724CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,492GitHub PoC 14,286VulnCheck XDB 8,703Nuclei 4,314Metasploit 3,474✓ verified onlyrecentpopularrisk
22,429 exploits
Referência
CVE-2016-0998
CVE-2016-0998—
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows
28RISK
open ↗
Referência
CVE-2017-5173
CVE-2017-5173—
An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD
28RISK
open ↗
Referência
CVE-2018-6794
CVE-2018-6794—
Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. If a malicious se
28RISK
open ↗
Referência
CVE-2015-7648
CVE-2015-7648—
Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux all
28RISK
open ↗
Referência
CVE-2019-9810
CVE-2019-9810—
Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check
28RISK
open ↗
Referência
CVE-2009-4686
CVE-2009-4686—
Cross-site scripting (XSS) vulnerability in account.php in phplemon AdQuick 2.2.1 allows remote attackers to inject arbi
23RISK
open ↗
Referência
CVE-2020-14011
CVE-2020-14011—
Lansweeper 6.0.x through 7.2.x has a default installation in which the admin password is configured for the admin accoun
28RISK
open ↗
Referência✓ VexDay Proof
Distinct TFTP 3.10 - Writable Directory Traversal Execution (Metasploit)
CVE-2012-6664CRITICALwebappswindows
Multiple directory traversal vulnerabilities in the TFTP Server in Distinct Intranet Servers 3.10 and earlier allow remo
68RISK
open ↗
Referência
CVE-2017-0901
CVE-2017-0901—
RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potenti
28RISK
open ↗
Referência
CVE-2015-1730
CVE-2015-1730—
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor
28RISK
open ↗
Referência
CVE-2022-4101
CVE-2022-4101CRITICAL
Images Optimize and Upload CF7 <= 2.1.4 - Unauthenticated Arbitrary File Deletion
53RISK
open ↗
Referência
CVE-2009-4199
CVE-2009-4199—
Multiple SQL injection vulnerabilities in the Mambo Resident (aka Mos Res or com_mosres) component 1.0f for Mambo and Jo
23RISK
open ↗
Referência
CVE-2013-5015
CVE-2013-5015—
SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.74
43RISK
open ↗
Referência
CVE-2013-5015
CVE-2013-5015—
SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.74
43RISK
open ↗
Referência
CVE-2018-9032
CVE-2018-9032—
An authentication bypass vulnerability on D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router (Hardware Versi
28RISK
open ↗
Referência
CVE-2018-1189
CVE-2018-1189—
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and vers
28RISK
open ↗
Referência
CVE-2010-2620
CVE-2010-2620—
Open&Compact FTP Server (Open-FTPD) 1.2 and earlier allows remote attackers to bypass authentication by sending (1) LIST
43RISK
open ↗
Referência
CVE-2015-0008
CVE-2015-0008—
The UNC implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Wind
28RISK
open ↗
Referência
CVE-2019-6225
CVE-2019-6225—
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.
28RISK
open ↗
Referência
CVE-2013-0946
CVE-2013-0946—
Buffer overflow in the Library Control Program (LCP) in EMC AlphaStor 4.0 before build 910 allows remote attackers to ex
28RISK
open ↗
Referência
CVE-2010-4107
CVE-2010-4107—
The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printer
28RISK
open ↗
Referência
CVE-2014-6363
CVE-2014-6363—
vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allo
28RISK
open ↗
Referência
CVE-2013-6720
CVE-2013-6720—
Directory traversal vulnerability in download.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX
28RISK
open ↗
Referência
CVE-2016-3324
CVE-2016-3324—
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service
28RISK
open ↗
Referência
CVE-2014-1912
CVE-2014-1912—
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.
28RISK
open ↗
Referência
CVE-2020-3153
CVE-2020-3153MEDIUMunder attackransomware
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
83RISK
open ↗
Referência
CVE-2020-3153
CVE-2020-3153MEDIUMunder attackransomware
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
83RISK
open ↗
Referência
CVE-2022-28079
CVE-2022-28079—
College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter.
43RISK
open ↗
Referência
CVE-2009-3976
CVE-2009-3976—
Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or execu
43RISK
open ↗
Referência
CVE-2016-6897
CVE-2016-6897—
Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.
43RISK
open ↗
← previouspage 521 / 748next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.