Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,337cataloged exploits

39,873CVEs with public exploitation

24,696lab-tested

All Referência 25,822Exploit-DB 24,487GitHub PoC 17,115VulnCheck XDB 9,874Nuclei 4,511Metasploit 3,528✓ verified onlyrecent popular risk

4,511 exploits

Nucleimedium

Nordex NC2 - Cross-Site Scripting

CVE-2015-6477MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in the Wind Farm Portal application in Nordex Control 2 (NC2) SCADA

33RISK

open ↗

Nucleimedium

Combodo iTop <2.2.0-2459 - Cross-Site Scripting

CVE-2015-6544—

Cross-site scripting (XSS) vulnerability in application/dashboard.class.inc.php in Combodo iTop before 2.2.0-2459 allows

18RISK

open ↗

Nucleimedium

WordPress sourceAFRICA <=0.1.3 - Cross-Site Scripting

CVE-2015-6920—

Cross-site scripting (XSS) vulnerability in js/window.php in the sourceAFRICA plugin 0.1.3 for WordPress allows remote a

18RISK

open ↗

Nucleihigh

D-Link DVG-N5402SP - Local File Inclusion

CVE-2015-7245—

Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remot

50RISK

open ↗

Nucleihigh

Joomla! Core SQL Injection

CVE-2015-7297—

SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via un

60RISK

open ↗

Nucleimedium

WordPress Pie-Register <2.0.19 - Cross-Site Scripting

CVE-2015-7377—

Cross-site scripting (XSS) vulnerability in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for W

18RISK

open ↗

Nucleicritical

IBM WebSphere Java Object Deserialization - Remote Code Execution

CVE-2015-7450CRITICALunder attack

Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and

100RISK

open ↗

Nucleicritical

Red Hat JBoss - Insecure Deserialization

CVE-2015-7501—

Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5

60RISK

open ↗

Nucleimedium

ManageEngine Firewall Analyzer <8.0 - Local File Inclusion

CVE-2015-7780—

Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0.

23RISK

open ↗

Nucleimedium

Kentico CMS 8.2 - Open Redirect

CVE-2015-7823—

Open redirect vulnerability in CMSPages/GetDocLink.ashx in Kentico CMS 8.2 through 8.2.41 allows remote attackers to red

18RISK

open ↗

Nucleimedium

SourceBans <2.0 - Cross-Site Scripting

CVE-2015-8349—

Cross-site scripting (XSS) vulnerability in SourceBans before 2.0 pre-alpha allows remote attackers to inject arbitrary

18RISK

open ↗

Nucleimedium

WordPress Calls to Action <=2.4.3 - Authenticated Reflected XSS

CVE-2015-8350—

Multiple cross-site scripting (XSS) vulnerabilities in the Calls to Action plugin before 2.5.1 for WordPress allow remot

18RISK

open ↗

Nucleimedium

Atlassian Confluence <5.8.17 - Information Disclosure

CVE-2015-8399—

Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName p

50RISK

open ↗

Nucleihigh

Joomla HTTP Header Unauthenticated - Remote Code Execution

CVE-2015-8562—

Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbi

60RISK

open ↗

Nucleihigh

Umbraco <7.4.0- Server-Side Request Forgery

CVE-2015-8813—

The Page_Load function in Umbraco.Web/umbraco.presentation/umbraco/dashboard/FeedProxy.aspx.cs in Umbraco before 7.4.0 a

23RISK

open ↗

Nucleimedium

NewStatPress <=1.0.4 - Cross-Site Scripting

CVE-2015-9312—

The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element.

18RISK

open ↗

Nucleicritical

404 to 301 <= 2.0.2 - Authenticated Blind SQL Injection

CVE-2015-9323—

The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection.

50RISK

open ↗

Nucleihigh

mTheme Unus < 2.3 - Directory Traversal

CVE-2015-9406—

Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary

30RISK

open ↗

Nucleimedium

WordPress Symposium <=15.8.1 - Cross-Site Scripting

CVE-2015-9414—

The wp-symposium plugin through 15.8.1 for WordPress has XSS via the wp-content/plugins/wp-symposium/get_album_item.php?

18RISK

open ↗

Nucleihigh

BJ Lazy Load (Timthumb) <= 0.7.5 - Remote File Inclusion

CVE-2015-9415—

The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion.

18RISK

open ↗

Nucleihigh

WordPress RobotCPA 5 - Directory Traversal

CVE-2015-9480—

The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter.

23RISK

open ↗

Nucleicritical

WordPress ShowBiz Pro <= 1.7.1 - Authenticated Arbitrary File Upload to RCE

CVE-2015-9499—

The Showbiz Pro plugin through 1.7.1 for WordPress has PHP code execution by uploading a .php file within a ZIP archive.

43RISK

open ↗

Nucleihigh

Adobe AEM Dispatcher <4.15 - Rules Bypass

CVE-2016-0957—

Dispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 does not properly implement a URL filter, wh

30RISK

open ↗

Nucleimedium

WordPress Admin Font Editor <=1.8 - Cross-Site Scripting

CVE-2016-1000126—

Reflected XSS in wordpress plugin admin-font-editor v1.8

18RISK

open ↗

Nucleimedium

WordPress AJAX Random Post <=2.00 - Cross-Site Scripting

CVE-2016-1000127—

Reflected XSS in wordpress plugin ajax-random-post v2.00

18RISK

open ↗

Nucleicritical

Apache Struts2 S2-053 - Remote Code Execution

CVE-2017-12611—

In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag in

60RISK

open ↗

Nucleihigh

Apache Tomcat Servers - Remote Code Execution

CVE-2017-12615HIGHunder attackransomware

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati

100RISK

open ↗

Nucleihigh

Apache Tomcat - Remote Code Execution

CVE-2017-12617HIGHunder attack

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT

100RISK

open ↗

Nucleicritical

Apache Solr <= 7.1 - XML Entity Injection

CVE-2017-12629—

Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction wi

60RISK

open ↗

Nucleicritical

Apache CouchDB 1.7.0 / 2.x < 2.1.1 - Remote Privilege Escalation

CVE-2017-12635—

Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB be

60RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.