Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,760cataloged exploits

32,083CVEs with public exploitation

1,932lab-tested

All Exploit-DB 22,786Referência 19,934GitHub PoC 13,235VulnCheck XDB 8,150Nuclei 4,193Metasploit 3,462✓ verified onlyrecent popular risk

19,934 exploits

Referência

CVE-2017-9675

CVE-2017-9675—

On D-Link DIR-605L devices, firmware before 2.08UIBetaB01.bin allows an unauthenticated GET request to trigger a reboot.

28RISK

open ↗

Referência

CVE-2012-4399

CVE-2012-4399—

The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via X

28RISK

open ↗

Referência

CVE-2009-2479

CVE-2009-2479—

Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service (uncaught exceptio

28RISK

open ↗

Referência

CVE-2010-4557

CVE-2010-4557—

Buffer overflow in the lm_tcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Series

28RISK

open ↗

Referência

CVE-2021-36711

CVE-2021-36711—

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.

28RISK

open ↗

Referência

CVE-2014-8673

CVE-2014-8673—

Multiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php in

28RISK

open ↗

Referência

CVE-2014-8673

CVE-2014-8673—

Multiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php in

28RISK

open ↗

Referência

CVE-2017-15118

CVE-2017-15118HIGH

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client

46RISK

open ↗

Referência

CVE-2010-3595

CVE-2010-3595—

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 all

28RISK

open ↗

Referência

Microsoft Word 2007 - Multiple Vulnerabilities

CVE-2007-1911—

Multiple unspecified vulnerabilities in Microsoft Word 2007 allow remote attackers to cause a denial of service (CPU con

28RISK

open ↗

Referência

CVE-2015-7039

CVE-2015-7039—

Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows rem

28RISK

open ↗

Referência

CVE-2021-33990

CVE-2021-33990CRITICAL

Liferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists. NOTE: The

53RISK

open ↗

Referência

EDraw Office Viewer Component - Denial of Service

CVE-2007-3169—

Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and

28RISK

open ↗

Referência

CVE-2011-1525

CVE-2011-1525—

Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and R

28RISK

open ↗

Referência

CVE-2010-1597

CVE-2010-1597—

Stack-based buffer overflow in zgtips.dll in ZipGenius 6.3.1.2552 allows user-assisted remote attackers to execute arbit

28RISK

open ↗

Referência

CVE-2014-9014

CVE-2014-9014—

Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin b

28RISK

open ↗

Referência

CVE-2020-28687

CVE-2020-28687—

The edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upl

28RISK

open ↗

Referência

CVE-2020-28688

CVE-2020-28688—

The add artwork functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to uplo

28RISK

open ↗

Referência

CVE-2013-5758

CVE-2013-5758—

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by

28RISK

open ↗

Referência

CVE-2013-5758

CVE-2013-5758—

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by

28RISK

open ↗

Referência

CVE-2013-5758

CVE-2013-5758—

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by

28RISK

open ↗

Referência

CVE-2013-5758

CVE-2013-5758—

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by

28RISK

open ↗

Referência

CVE-2017-17739

CVE-2017-17739—

The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html

28RISK

open ↗

Referência

CVE-2010-1981

CVE-2010-1981—

Directory traversal vulnerability in the Fabrik (com_fabrik) component 2.0 for Joomla! allows remote attackers to read a

43RISK

open ↗

Referência

CVE-2010-1981

CVE-2010-1981—

Directory traversal vulnerability in the Fabrik (com_fabrik) component 2.0 for Joomla! allows remote attackers to read a

43RISK

open ↗

Referência

CVE-2023-0159

CVE-2023-0159—

Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE

50RISK

open ↗

Referência

Backup Exec System Recovery Manager 7.0.1 - Arbitrary File Upload

CVE-2008-0457—

Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, a

28RISK

open ↗

Referência

CVE-2013-10069

CVE-2013-10069CRITICAL

D-Link Devices Unauthenticated RCE

68RISK

open ↗

Referência

CVE-2013-10069

CVE-2013-10069CRITICAL

D-Link Devices Unauthenticated RCE

68RISK

open ↗

Referência

CVE-2013-10069

CVE-2013-10069CRITICAL

D-Link Devices Unauthenticated RCE

68RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.