Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,813cataloged exploits
35,788CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,549GitHub PoC 14,290VulnCheck XDB 8,722Nuclei 4,320Metasploit 3,477✓ verified onlyrecentpopularrisk
22,523 exploits
Referência
CVE-2007-6544
CVE-2007-6544—
Multiple SQL injection vulnerabilities in RunCMS before 1.6.1 allow remote attackers to execute arbitrary SQL commands v
23RISK
open ↗
Referência
CVE-2018-13417
CVE-2018-13417—
In Vuze Bittorrent Client 5.7.6.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External E
28RISK
open ↗
Referência
CVE-2022-40032
CVE-2022-40032CRITICAL
SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' paramet
68RISK
open ↗
Referência
CVE-2010-0317
CVE-2010-0317—
Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer dereference, memory consumptio
28RISK
open ↗
Referência
CVE-2010-2321
CVE-2010-2321—
Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafted
28RISK
open ↗
Referência
CVE-2019-0186
CVE-2019-0186—
The input fields of the Apache Pluto "Chat Room" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting (XS
28RISK
open ↗
Referência
CVE-2019-0186
CVE-2019-0186—
The input fields of the Apache Pluto "Chat Room" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting (XS
28RISK
open ↗
Referência
CVE-2014-9734
CVE-2014-9734—
Directory traversal vulnerability in the Slider Revolution (revslider) plugin before 4.2 for WordPress allows remote att
28RISK
open ↗
Referência
CVE-2014-9734
CVE-2014-9734—
Directory traversal vulnerability in the Slider Revolution (revslider) plugin before 4.2 for WordPress allows remote att
28RISK
open ↗
Referência
CVE-2016-3309
CVE-2016-3309HIGHunder attackransomware
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1;
76RISK
open ↗
Referência
CVE-2016-0984
CVE-2016-0984HIGHunder attack
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and
83RISK
open ↗
Referência✓ VexDay Proof
RunCMS 1.6 - Multiple Vulnerabilities
CVE-2007-6547—webappsphp
RunCMS before 1.6.1 does not require entry of the old password during a password change, which allows context-dependent
23RISK
open ↗
Referência
CVE-2018-9022
CVE-2018-9022—
An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to exec
28RISK
open ↗
Referência
CVE-2014-8768
CVE-2014-8768—
Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow rem
28RISK
open ↗
Referência
CVE-2014-8768
CVE-2014-8768—
Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow rem
28RISK
open ↗
Referência
CVE-2017-3068
CVE-2017-3068—
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced V
28RISK
open ↗
Referência
CVE-2013-1814
CVE-2013-1814—
The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain s
60RISK
open ↗
Referência
CVE-2022-31161
CVE-2022-31161CRITICAL
Roxy-WI Vulnerable to Unauthenticated Remote Code Execution via ssl_cert Upload
68RISK
open ↗
Referência
CVE-2010-3187
CVE-2010-3187—
Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST com
28RISK
open ↗
Referência
CVE-2010-3187
CVE-2010-3187—
Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST com
28RISK
open ↗
Referência
CVE-2010-2305
CVE-2010-2305—
Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote
28RISK
open ↗
Referência
CVE-2023-38836
CVE-2023-38836—
File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header t
60RISK
open ↗
Referência
CVE-2016-3387
CVE-2016-3387—
Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which al
28RISK
open ↗
Referência
CVE-2017-16921
CVE-2017-16921—
In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.2
28RISK
open ↗
Referência
CVE-2015-5568
CVE-2015-5568—
Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Ad
28RISK
open ↗
Referência
CVE-2009-2439
CVE-2009-2439—
Multiple SQL injection vulnerabilities in Web Development House Alibaba Clone allow remote attackers to execute arbitrar
23RISK
open ↗
Referência
CVE-2023-22809
CVE-2023-22809HIGH
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen
68RISK
open ↗
Referência
D-Link DIR-615 Wireless Router  -  Persistent Cross-Site Scripting
CVE-2019-19742—webappshardware
On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field.
28RISK
open ↗
Referência
CVE-2009-2441
CVE-2009-2441—
Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject a
23RISK
open ↗
Referência
CVE-2009-4551
CVE-2009-4551—
SQL injection vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to execute arbitrary SQL co
23RISK
open ↗
← previouspage 564 / 751next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.