Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,813cataloged exploits

35,788CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,455Referência 22,549GitHub PoC 14,290VulnCheck XDB 8,722Nuclei 4,320Metasploit 3,477✓ verified onlyrecent popular risk

22,549 exploits

Referência

CVE-2016-4230

CVE-2016-4230—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows

35RISK

open ↗

Referência

CVE-2010-4740

CVE-2010-4740—

Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote

50RISK

open ↗

Referência✓ VexDay Proof

Oracle 10g - MDSYS.SDO_TOPO_DROP_FTBL SQL Injection (Metasploit)

CVE-2008-3979—localmultiple

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.2 allows remote authent

50RISK

open ↗

Referência

CVE-2017-3131

CVE-2017-3131—

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0 allows attackers to exec

38RISK

open ↗

Referência

CVE-2006-4040

CVE-2006-4040—

PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to e

23RISK

open ↗

Referência

CVE-2018-10718

CVE-2018-10718—

Stack-based buffer overflow in Activision Infinity Ward Call of Duty Modern Warfare 2 before 2018-04-26 allows remote at

35RISK

open ↗

Referência

CVE-2012-5877

CVE-2012-5877—

Nero MediaHome 4.5.8.0 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and cr

23RISK

open ↗

Referência

CVE-2025-34513

CVE-2025-34513CRITICAL

Ilevia EVE X1 Server 4.7.18.0.eden Unauthenticated Command Injection

48RISK

open ↗

Referência

CVE-2018-5333

CVE-2018-5333—

In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning

38RISK

open ↗

Referência

CVE-2014-1202

CVE-2014-1202—

The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a c

23RISK

open ↗

Referência

CVE-2017-7115

CVE-2017-7115—

An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. The issue invo

23RISK

open ↗

Referência

CVE-2023-36355

CVE-2023-36355—

TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6Cfg

35RISK

open ↗

Referência

CVE-2018-6126

CVE-2018-6126—

A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds m

23RISK

open ↗

Referência

CVE-2019-6714

CVE-2019-6714—

An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File Inclusion vulnerability in Po

35RISK

open ↗

Referência

CVE-2013-3482

CVE-2013-3482—

Stack-based buffer overflow in the rf_report_error function in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.

50RISK

open ↗

Referência

CVE-2009-4656

CVE-2009-4656—

Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-as

50RISK

open ↗

Referência✓ VexDay Proof

Dokuwiki 2009-02-14 - Temporary/Remote File Inclusion

CVE-2009-1960—webappsphp

inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote att

28RISK

open ↗

Referência

CVE-2010-4772

CVE-2010-4772—

Cross-site scripting (XSS) vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web

23RISK

open ↗

Referência✓ VexDay Proof

FaScript FaPhoto 1.0 - 'show.php' SQL Injection

CVE-2008-1714—webappsphp

SQL injection vulnerability in show.php in FaScript FaPhoto 1.0, when magic_quotes_gpc is disabled, allows remote attack

23RISK

open ↗

Referência

CVE-2014-3085

CVE-2014-3085—

systest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote auth

23RISK

open ↗

Referência

CVE-2014-3085

CVE-2014-3085—

systest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote auth

23RISK

open ↗

Referência

CVE-2015-0514

CVE-2015-0514—

EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 might allow remote attackers to obtain cleartext data-cen

23RISK

open ↗

Referência

CVE-2009-5067

CVE-2009-5067—

Directory traversal vulnerability in html2ps before 1.0b6 allows remote attackers to read arbitrary files via a .. (dot

23RISK

open ↗

Referência

CVE-2014-3740

CVE-2014-3740—

Cross-site scripting (XSS) vulnerability in SpiceWorks before 7.2.00195 allows remote authenticated users to inject arbi

23RISK

open ↗

Referência

CVE-2016-7185

CVE-2016-7185—

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,

23RISK

open ↗

Referência

CVE-2011-2963

CVE-2011-2963—

TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, whi

23RISK

open ↗

Referência

CVE-2014-4306

CVE-2014-4306—

Directory traversal vulnerability in logs-x.php in WebTitan before 4.04 allows remote attackers to read arbitrary files

23RISK

open ↗

Referência

CVE-2013-1807

CVE-2013-1807—

PHP-Fusion before 7.02.06 stores backup files with predictable filenames in an unrestricted directory under the web docu

23RISK

open ↗

Referência✓ VexDay Proof

EnjoySAP ActiveX rfcguisink.rfcguisink.1 - Remote Heap Overflow (PoC)

CVE-2007-3606—doswindows

Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI, on systems using ASCI

23RISK

open ↗

Referência

CVE-2018-18955

CVE-2018-18955—

In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalat

38RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.