Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,724cataloged exploits
35,724CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,492GitHub PoC 14,286VulnCheck XDB 8,703Nuclei 4,314Metasploit 3,474✓ verified onlyrecentpopularrisk
22,492 exploits
Referência
CVE-2013-5065
CVE-2013-5065HIGHunder attack
NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges
98RISK
open ↗
Referência
CVE-2021-37975
CVE-2021-37975HIGHunder attack
Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corrup
83RISK
open ↗
Referência
CVE-2017-11282
CVE-2017-11282—
Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation co
35RISK
open ↗
Referência
CVE-2019-10266
CVE-2019-10266—
An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. When sending an out-of-bounds XML document to a URL
28RISK
open ↗
Referência
CVE-2009-4107
CVE-2009-4107—
Buffer overflow in Invisible Browsing 5.0.52 allows user-assisted remote attackers to execute arbitrary code via a craft
23RISK
open ↗
Referência
CVE-2019-12480
CVE-2019-12480—
BACnet Protocol Stack through 0.8.6 has a segmentation fault leading to denial of service in BACnet APDU Layer because a
35RISK
open ↗
Referência
CVE-2014-8499
CVE-2014-8499—
Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Servi
50RISK
open ↗
Referência
CVE-2014-8499
CVE-2014-8499—
Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Servi
50RISK
open ↗
Referência
CVE-2017-7588
CVE-2017-7588—
On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a
35RISK
open ↗
Referência
CVE-2010-5299
CVE-2010-5299—
Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl f
50RISK
open ↗
Referência
CVE-2018-17552
CVE-2018-17552—
SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigat
60RISK
open ↗
Referência
CVE-2011-4885
CVE-2011-4885—
PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions pre
60RISK
open ↗
Referência
CVE-2015-6131
CVE-2015-6131—
Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers t
35RISK
open ↗
Referência
CVE-2013-3111
CVE-2013-3111—
Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service
35RISK
open ↗
Referência
CVE-2013-3111
CVE-2013-3111—
Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service
35RISK
open ↗
Referência
CVE-2022-48194
CVE-2022-48194HIGH
TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a De
53RISK
open ↗
Referência
CVE-2015-0050
CVE-2015-0050—
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memo
35RISK
open ↗
Referência
CVE-2017-16885
CVE-2017-16885—
Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices (intended for obtaining informati
35RISK
open ↗
Referência
CVE-2012-2925
CVE-2012-2925—
SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL co
23RISK
open ↗
Referência
CVE-2010-4091
CVE-2010-4091—
The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows
28RISK
open ↗
Referência
CVE-2017-5375
CVE-2017-5375—
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. T
35RISK
open ↗
Referência
CVE-2017-5375
CVE-2017-5375—
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. T
35RISK
open ↗
Referência
CVE-2009-4461
CVE-2009-4461—
Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.909 allow remote attackers to inject arbitrary web sc
23RISK
open ↗
Referência
CVE-2009-4140
CVE-2009-4140—
Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer
60RISK
open ↗
Referência
CVE-2017-3241
CVE-2017-3241—
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versi
35RISK
open ↗
Referência
CVE-2020-14882
CVE-2020-14882CRITICALunder attack
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
Referência
CVE-2020-14882
CVE-2020-14882CRITICALunder attack
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
Referência
CVE-2009-4140
CVE-2009-4140—
Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer
60RISK
open ↗
Referência
CVE-2017-2992
CVE-2017-2992—
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 h
35RISK
open ↗
Referência
CVE-2013-3143
CVE-2013-3143—
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (mem
35RISK
open ↗
← previouspage 534 / 750next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.