Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,724cataloged exploits
35,724CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,492GitHub PoC 14,286VulnCheck XDB 8,703Nuclei 4,314Metasploit 3,474✓ verified onlyrecentpopularrisk
22,492 exploits
Referência
CVE-2018-18323
CVE-2018-18323—
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/
60RISK
open ↗
Referência
CVE-2009-4574
CVE-2009-4574—
SQL injection vulnerability in country_escorts.php in I-Escorts Directory Script allows remote attackers to execute arbi
23RISK
open ↗
Referência
CVE-2018-1321
CVE-2018-1321—
An administrator with report and template entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and un
28RISK
open ↗
Referência
CVE-2018-19423
CVE-2018-19423—
Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file.
28RISK
open ↗
Referência
CVE-2022-31101
CVE-2022-31101HIGH
SQL Injection in prestashop/blockwishlist
61RISK
open ↗
Referência✓ VexDay Proof
Microsoft Windows Media Player - '.mid' Integer Overflow (PoC)
CVE-2009-1331—doswindows
Integer overflow in Microsoft Windows Media Player (WMP) 11.0.5721.5260 allows remote attackers to cause a denial of ser
28RISK
open ↗
Referência
CVE-2015-3440
CVE-2015-3440—
Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.1 allows remote attackers to i
28RISK
open ↗
Referência
CVE-2010-2091
CVE-2010-2091—
Microsoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly
28RISK
open ↗
Referência
CVE-2015-3089
CVE-2015-3089—
Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460
35RISK
open ↗
Referência
CVE-2010-1955
CVE-2010-1955—
Directory traversal vulnerability in the Deluxe Blog Factory (com_blogfactory) component 1.1.2 for Joomla! allows remote
43RISK
open ↗
Referência
CVE-2017-7308
CVE-2017-7308—
The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate cer
43RISK
open ↗
Referência
CVE-2017-7308
CVE-2017-7308—
The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate cer
43RISK
open ↗
Referência
CVE-2019-10678
CVE-2019-10678—
Domoticz before 4.10579 neglects to categorize \n and \r as insecure argument options.
28RISK
open ↗
Referência
CVE-2019-10678
CVE-2019-10678—
Domoticz before 4.10579 neglects to categorize \n and \r as insecure argument options.
28RISK
open ↗
Referência
CVE-2018-0494
CVE-2018-0494—
GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequen
28RISK
open ↗
Referência
CVE-2019-6706
CVE-2019-6706—
Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attack
28RISK
open ↗
Referência
CVE-2018-18065
CVE-2018-18065—
_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by
28RISK
open ↗
Referência
CVE-2016-3237
CVE-2016-3237—
Kerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server
28RISK
open ↗
Referência
CVE-2010-0761
CVE-2010-0761—
SQL injection vulnerability in index.php in CommodityRentals Books/eBooks Rentals Script allows remote attackers to exec
23RISK
open ↗
Referência
CVE-2018-19908
CVE-2018-19908—
An issue was discovered in MISP 2.4.9x before 2.4.99. In app/Model/Event.php (the STIX 1 import code), an unescaped file
28RISK
open ↗
Referência
CVE-2010-0761
CVE-2010-0761—
SQL injection vulnerability in index.php in CommodityRentals Books/eBooks Rentals Script allows remote attackers to exec
23RISK
open ↗
Referência
CVE-2017-14244
CVE-2017-14244—
An authentication bypass vulnerability on iBall Baton ADSL2+ Home Router FW_iB-LR7011A_1.0.2 devices potentially allows
28RISK
open ↗
Referência
CVE-2017-2361
CVE-2017-2361—
An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "Help Viewer
28RISK
open ↗
Referência
CVE-2020-10770
CVE-2020-10770—
A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using
50RISK
open ↗
Referência
CVE-2009-0695
CVE-2009-0695—
hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attacker
50RISK
open ↗
Referência
CVE-2013-0008
CVE-2013-0008—
win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7
43RISK
open ↗
Referência✓ VexDay Proof
Microsoft Internet Explorer 6 - 'mshtml.dll' Null Pointer Dereference
CVE-2007-0811—doswindows
Microsoft Internet Explorer 6.0 SP1 on Windows 2000, and 6.0 SP2 on Windows XP, allows remote attackers to cause a denia
28RISK
open ↗
Referência✓ VexDay Proof
QuickTime Player 7.3.1.70 - 'RTSP' Remote Buffer Overflow
CVE-2008-0234—remotewindows
Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allo
28RISK
open ↗
Referência
CVE-2024-20359
CVE-2024-20359MEDIUMunder attack
A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been ava
68RISK
open ↗
Referência
CVE-2015-2280
CVE-2015-2280—
snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709
28RISK
open ↗
← previouspage 533 / 750next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.