Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,772cataloged exploits
35,760CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,523GitHub PoC 14,289VulnCheck XDB 8,710Nuclei 4,319Metasploit 3,476✓ verified onlyrecentpopularrisk
22,492 exploits
Referência
CVE-2010-0375
CVE-2010-0375—
SQL injection vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attacker
23RISK
open ↗
Referência
CVE-2010-0380
CVE-2010-0380—
install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restrictio
23RISK
open ↗
Referência
CVE-2010-0380
CVE-2010-0380—
install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restrictio
23RISK
open ↗
Referência
CVE-2017-8683
CVE-2017-8683—
Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold a
28RISK
open ↗
Referência
CVE-2014-4880
CVE-2014-4880—
Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote atta
60RISK
open ↗
Referência
CVE-2016-0954
CVE-2016-0954—
Adobe Digital Editions before 4.5.1 allows attackers to execute arbitrary code or cause a denial of service (memory corr
28RISK
open ↗
Referência
CVE-2010-0457
CVE-2010-0457—
SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute arbitrary SQL commands vi
23RISK
open ↗
Referência
CVE-2017-11153
CVE-2017-11153—
Deserialization vulnerability in synophoto_csPhotoMisc.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allo
28RISK
open ↗
Referência
CVE-2019-16516
CVE-2019-16516—
An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is a user enumer
28RISK
open ↗
Referência
CVE-2018-10070
CVE-2018-10070—
A vulnerability in MikroTik Version 6.41.4 could allow an unauthenticated remote attacker to exhaust all available CPU a
28RISK
open ↗
Referência
CVE-2018-10070
CVE-2018-10070—
A vulnerability in MikroTik Version 6.41.4 could allow an unauthenticated remote attacker to exhaust all available CPU a
28RISK
open ↗
Referência
CVE-2010-0458
CVE-2010-0458—
Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL c
23RISK
open ↗
Referência
CVE-2010-0461
CVE-2010-0461—
SQL injection vulnerability in the casino (com_casino) component 1.0 for Joomla! allows remote attackers to execute arbi
23RISK
open ↗
Referência
CVE-2017-17849
CVE-2017-17849—
A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to exec
28RISK
open ↗
Referência
CVE-2016-6855
CVE-2016-6855—
Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib befor
28RISK
open ↗
Referência
CVE-2016-6855
CVE-2016-6855—
Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib befor
28RISK
open ↗
Referência
CVE-2010-4597
CVE-2010-4597—
Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraX
28RISK
open ↗
Referência
CVE-2020-29597
CVE-2020-29597—
IncomCMS 2.0 has a modules/uploader/showcase/script.php insecure file upload vulnerability. This vulnerability allows un
60RISK
open ↗
Referência
CVE-2015-2153
CVE-2015-2153—
The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers t
28RISK
open ↗
Referência
CVE-2015-2153
CVE-2015-2153—
The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers t
28RISK
open ↗
Referência
CVE-2010-1714
CVE-2010-1714—
Directory traversal vulnerability in the Arcade Games (com_arcadegames) component 1.0 for Joomla! allows remote attacker
43RISK
open ↗
Referência
AROX School-ERP Pro - Unauthenticated Remote Command Execution (Metasploit)
CVE-2019-13294—remotephp
AROX School-ERP Pro has a command execution vulnerability. import_stud.php and upload_fille.php do not have session cont
28RISK
open ↗
Referência
CVE-2024-9458
CVE-2024-9458MEDIUM
Reservit Hotel < 3.0 - Admin+ Stored XSS
33RISK
open ↗
Referência
CVE-2018-8229
CVE-2018-8229—
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
45RISK
open ↗
Referência
CVE-2018-8897
CVE-2018-8897—
A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) wa
43RISK
open ↗
Referência
CVE-2020-3452
CVE-2020-3452HIGHunder attack
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RISK
open ↗
Referência
CVE-2020-3452
CVE-2020-3452HIGHunder attack
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RISK
open ↗
Referência
CVE-2018-8897
CVE-2018-8897—
A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) wa
43RISK
open ↗
Referência
CVE-2015-2433
CVE-2015-2433—
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi
43RISK
open ↗
Referência
CVE-2010-0611
CVE-2010-0611—
Multiple SQL injection vulnerabilities in adminlogin.php in Baal Systems 3.8 and earlier allow remote attackers to execu
23RISK
open ↗
← previouspage 541 / 750next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.