Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,724cataloged exploits
35,724CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,492GitHub PoC 14,286VulnCheck XDB 8,703Nuclei 4,314Metasploit 3,474✓ verified onlyrecentpopularrisk
22,492 exploits
Referência
CVE-2010-0698
CVE-2010-0698—
SQL injection vulnerability in backoffice/login.asp in Dynamicsoft WSC CMS 2.2 allows remote attackers to execute arbitr
23RISK
open ↗
Referência
CVE-2010-0698
CVE-2010-0698—
SQL injection vulnerability in backoffice/login.asp in Dynamicsoft WSC CMS 2.2 allows remote attackers to execute arbitr
23RISK
open ↗
Referência
OpenSIS 8.0 'modname' - Directory Traversal
CVE-2021-40651—webappsphp
OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vulnerability in Modules.php (modname parameter), wh
43RISK
open ↗
Referência
CVE-2010-0701
CVE-2010-0701—
SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows remote attackers to execute ar
23RISK
open ↗
Referência
CVE-2010-0701
CVE-2010-0701—
SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows remote attackers to execute ar
23RISK
open ↗
Referência
CVE-2020-13448
CVE-2020-13448—
QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8 allows an authenticated remote attacker to execut
28RISK
open ↗
Referência
CVE-2021-31159
CVE-2021-31159—
Zoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due to improper error-messag
28RISK
open ↗
Referência
CVE-2016-3644
CVE-2016-3644—
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS
28RISK
open ↗
Referência
CVE-2016-9949
CVE-2016-9949—
An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates t
28RISK
open ↗
Referência
CVE-2017-5177
CVE-2017-5177—
A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior. A stack-based buffer overfl
28RISK
open ↗
Referência
CVE-2026-21902
CVE-2026-21902CRITICAL
Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root
53RISK
open ↗
Referência
CVE-2018-19627
CVE-2018-19627—
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/v
28RISK
open ↗
Referência
CVE-2012-4992
CVE-2012-4992—
Multiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote authenticated users to execute arbitrary code via
28RISK
open ↗
Referência
CVE-2015-5079
CVE-2015-5079—
Directory traversal vulnerability in widgets/logs.php in BlackCat CMS before 1.1.2 allows remote attackers to read arbit
28RISK
open ↗
Referência
CVE-2015-2993
CVE-2015-2993—
SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers t
50RISK
open ↗
Referência
CVE-2017-8535
CVE-2017-8535—
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serve
28RISK
open ↗
Referência
CVE-2010-4227
CVE-2010-4227—
The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of s
28RISK
open ↗
Referência
CVE-2010-0803
CVE-2010-0803—
SQL injection vulnerability in the jVideoDirect (com_jvideodirect) component 1.1 RC3b for Joomla! allows remote attacker
23RISK
open ↗
Referência
CVE-2015-8396
CVE-2015-8396—
Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cx
28RISK
open ↗
Referência
CVE-2015-8396
CVE-2015-8396—
Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cx
28RISK
open ↗
Referência
CVE-2016-1768
CVE-2016-1768—
QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (m
28RISK
open ↗
Referência
CVE-2020-0938
CVE-2020-0938HIGHunder attack
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly
83RISK
open ↗
Referência
CVE-2018-5234
CVE-2018-5234—
The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in whic
28RISK
open ↗
Referência
CVE-2012-6554
CVE-2012-6554—
functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute
43RISK
open ↗
Referência
CVE-2018-11220
CVE-2018-11220—
Bitmain Antminer D3, L3+, and S9 devices allow Remote Command Execution via the system restore function.
28RISK
open ↗
Referência
CVE-2010-4931
CVE-2010-4931—
Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary
28RISK
open ↗
Referência
CVE-2016-4136
CVE-2016-4136—
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsof
28RISK
open ↗
Referência✓ VexDay Proof
TaskFreak! 0.6.1 - SQL Injection
CVE-2008-0270—webappsphp
SQL injection vulnerability in index.php in TaskFreak! 0.6.1 and earlier allows remote authenticated users to execute ar
23RISK
open ↗
Referência
CVE-2010-0943
CVE-2010-0943—
Directory traversal vulnerability in the JA Showcase (com_jashowcase) component for Joomla! allows remote attackers to r
43RISK
open ↗
Referência
CVE-2010-0943
CVE-2010-0943—
Directory traversal vulnerability in the JA Showcase (com_jashowcase) component for Joomla! allows remote attackers to r
43RISK
open ↗
← previouspage 532 / 750next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.