Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
85,566cataloged exploits
39,907CVEs with public exploitation
24,696lab-tested
AllReferência 25,846Exploit-DB 24,488GitHub PoC 17,314VulnCheck XDB 9,877Nuclei 4,513Metasploit 3,528✓ verified onlyrecentpopularrisk
24,696 exploits
Exploit-DB✓ VexDay Proof
Flash Boundless Tunes - Universal SOP Bypass Through ActionSctipt's Sound Object
Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481
28RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - Heap Buffer Overflow Due to Indexing Error When Loading FLV File
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows an
28RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - createTextField Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - Setting Value Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - XMLSocket Destructor Not Cleared Before Setting User Data in connect
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - swapDepths Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - NetConnection.connect Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash (Linux x64) - Bad Dereference at 0x23c
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - Out-of-Bounds Memory Read While Parsing a Mutated '.TTF' File Embedded in SWF
Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - Heap Buffer Overflow Loading '.FLV' File with Nellymoser Audio Codec
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows an
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - Heap Use-After-Free in SurfaceFilterList::CreateFromScriptAtom
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu
35RISK
open ↗Exploit-DB✓ VexDay Proof
Flash Broker-Based - Sandbox Escape via Unexpected Directory Lock
Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash AS2 - DisplacementMapFilter.mapBitmap Use-After-Free (1)
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - AVSS.setSubscribedTags Use-After-Free Memory Corruption
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows an
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash AS2 - DisplacementMapFilter.mapBitmap Use-After-Free (2)
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - '.SWF' Out-of-Bounds Memory Read (1)
Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - Display List Handling Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash AS2 - textfield.filters Use-After-Free (2)
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - attachMovie Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash AS2 - textfield.filters Use-After-Free (3)
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - Type Confusion in TextRenderer.setAdvancedAntialiasingTable
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - Pointer Crash in Button Handling
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - URL Resource Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows
35RISK
open ↗Exploit-DB✓ VexDay Proof
Flash - PCRE Regex Compilation Zero-Length Assertion Arbitrary Bytecode Execution
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - XML.childNodes Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu
35RISK
open ↗Exploit-DB✓ VexDay Proof
Flash - Issues in DefineBitsLossless and DefineBitsLossless2 Leads to Using Uninitialized Memory
Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460
35RISK
open ↗Exploit-DB✓ VexDay Proof
Flash - Uninitialized Stack Variable MPD Parsing Memory Corruption
Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - Pointer Crash in XML Handling
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,
35RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Flash - Bad Write in XML When Callback Modifies XML Tree During Property Delete
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,
35RISK
open ↗Exploit-DB✓ VexDay Proof
Flash Broker-Based - Sandbox Escape via Timing Attack Against File Moving
Race condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and b
28RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.