Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,772cataloged exploits
35,760CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,523GitHub PoC 14,289VulnCheck XDB 8,710Nuclei 4,319Metasploit 3,476✓ verified onlyrecentpopularrisk
22,492 exploits
Referência
CVE-2015-2825
CVE-2015-2825—
Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPres
28RISK
open ↗
Referência
CVE-2020-35848
CVE-2020-35848—
Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.
60RISK
open ↗
Referência
CVE-2010-1350
CVE-2010-1350—
SQL injection vulnerability in the JP Jobs (com_jp_jobs) component 1.4.1 and earlier for Joomla! allows remote attackers
23RISK
open ↗
Referência
OpenKM 6.3.2 < 6.3.7 - Remote Command Execution (Metasploit)
CVE-2019-11445—webappsjsp
OpenKM 6.3.2 through 6.3.7 allows an attacker to upload a malicious JSP file into the /okm:root directories and move tha
28RISK
open ↗
Referência
CVE-2018-9958
CVE-2018-9958—
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1
50RISK
open ↗
Referência
CVE-2018-9958
CVE-2018-9958—
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1
50RISK
open ↗
Referência
CVE-2018-9958
CVE-2018-9958—
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1
50RISK
open ↗
Referência
CVE-2011-0917
CVE-2011-0917—
Buffer overflow in nLDAP.exe in IBM Lotus Domino allows remote attackers to execute arbitrary code via a long string in
28RISK
open ↗
Referência
CVE-2014-4158
CVE-2014-4158—
Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a GET req
28RISK
open ↗
Referência
CVE-2014-4158
CVE-2014-4158—
Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a GET req
28RISK
open ↗
Referência
CVE-2020-5377
CVE-2020-5377CRITICAL
Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities.
60RISK
open ↗
Referência
CVE-2015-7246
CVE-2015-7246—
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root accou
28RISK
open ↗
Referência
CVE-2015-7246
CVE-2015-7246—
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root accou
28RISK
open ↗
Referência
Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE
CVE-2025-1974CRITICALremotemultiple
ingress-nginx admission controller RCE escalation
85RISK
open ↗
Referência
CVE-2023-36812
CVE-2023-36812CRITICAL
Remote Code Execution in OpenTSDB
68RISK
open ↗
Referência
CVE-2010-1354
CVE-2010-1354—
Directory traversal vulnerability in the VJDEO (com_vjdeo) component 1.0 and 1.0.1 for Joomla! allows remote attackers t
43RISK
open ↗
Referência
CVE-2010-1360
CVE-2010-1360—
Multiple PHP remote file inclusion vulnerabilities in FAQEngine 4.24.00 allow remote attackers to execute arbitrary PHP
23RISK
open ↗
Referência✓ VexDay Proof
Mooseguy Blog System 1.0 - 'month' SQL Injection
CVE-2008-0424—webappsphp
SQL injection vulnerability in blog.php in Mooseguy Blog System (MGBS) 1.0 allows remote attackers to execute arbitrary
23RISK
open ↗
Referência
CVE-2009-4696
CVE-2009-4696—
SQL injection vulnerability in index.php in RadNICS Gold 5 allows remote attackers to execute arbitrary SQL commands via
23RISK
open ↗
Referência
CVE-2016-5679
CVE-2016-5679—
cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticat
28RISK
open ↗
Referência
CVE-2018-9842
CVE-2018-9842—
CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replay
28RISK
open ↗
Referência
CVE-2018-9842
CVE-2018-9842—
CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replay
28RISK
open ↗
Referência
CVE-2018-9842
CVE-2018-9842—
CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replay
28RISK
open ↗
Referência
CVE-2003-0264
CVE-2003-0264—
Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO arg
60RISK
open ↗
Referência
CVE-2012-5106
CVE-2012-5106—
Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via
28RISK
open ↗
Referência
CVE-2019-4013
CVE-2019-4013CRITICAL
IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root pr
53RISK
open ↗
Referência
CVE-2016-9838
CVE-2016-9838—
An issue was discovered in components/com_users/models/registration.php in Joomla! before 3.6.5. Incorrect filtering of
28RISK
open ↗
Referência
CVE-2019-6445
CVE-2019-6445—
An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd
28RISK
open ↗
Referência
CVE-2010-1431
CVE-2010-1431—
SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbit
23RISK
open ↗
Referência
CVE-2017-9080
CVE-2017-9080—
PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. sendfromfile
50RISK
open ↗
← previouspage 543 / 750next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.