Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
71,666cataloged exploits
32,032CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 19,896GitHub PoC 13,204VulnCheck XDB 8,127Nuclei 4,191Metasploit 3,462✓ verified onlyrecentpopularrisk
22,786 exploits
Exploit-DB
Safari - Proxy Object Type Confusion (Metasploit)
In iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was addressed with improve
61RISK
open ↗Exploit-DB
Fortify Software Security Center (SSC) 17.10/17.20/18.10 - Information Disclosure
MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access
33RISK
open ↗Exploit-DB
Fortify Software Security Center (SSC) 17.10/17.20/18.10 - Information Disclosure (2)
MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access
33RISK
open ↗Exploit-DB
Huawei Router HG532e - Command Execution
Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary
28RISK
open ↗Exploit-DB
Cisco RV110W - Password Disclosure / Command Execution
The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware
28RISK
open ↗Exploit-DB
Safari - Proxy Object Type Confusion (Metasploit)
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud
68RISK
open ↗Exploit-DB
Cisco RV110W - Password Disclosure / Command Execution
The CLI command parser on Cisco RV110W, RV130W, and RV215W devices allows local users to execute arbitrary shell command
23RISK
open ↗Exploit-DB
CyberLink LabelPrint 2.5 - Stack Buffer Overflow (Metasploit)
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) au
43RISK
open ↗Exploit-DB
WebKit JIT - Int32/Double Arrays can have Proxy Objects in the Prototype Chains
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue affe
23RISK
open ↗Exploit-DB
Huawei B315s-22 - Information Leak
Huawei B315s-22 products with software of 21.318.01.00.26 have an information leak vulnerability. Unauthenticated adjace
28RISK
open ↗Exploit-DB
PrestaShop 1.6.x/1.7.x - Remote Code Execution
PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to delete an image directory.
28RISK
open ↗Exploit-DB
Adobe ColdFusion 2018 - Arbitrary File Upload
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unr
100RISK
open ↗Exploit-DB
ZTE ZXHN H168N - Improper Access Restrictions
ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper cha
55RISK
open ↗Exploit-DB
DomainMOD 4.11.01 - Cross-Site Scripting
DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field.
23RISK
open ↗Exploit-DB
PrestaShop 1.6.x/1.7.x - Remote Code Execution
PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file u
28RISK
open ↗Exploit-DB
McAfee True Key - McAfee.TrueKey.Service Privilege Escalation
True Key (TK) Windows Client - Authentication Abuse vulnerability
41RISK
open ↗Exploit-DB
XNU - POSIX Shared Memory Mappings have Incorrect Maximum Protection
A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.1.1, macOS Mojave 1
23RISK
open ↗Exploit-DB
ZTE ZXHN H168N - Improper Access Restrictions
ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper acc
55RISK
open ↗Exploit-DB
TP-Link wireless router Archer C1200 - Cross-Site Scripting
TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATH_INFO to the /webpages/data URI.
23RISK
open ↗Exploit-DB
McAfee True Key - McAfee.TrueKey.Service Privilege Escalation
True Key (TK) Windows Client - Privilege Escalation vulnerability
41RISK
open ↗Exploit-DB
Kubernetes - (Unauthenticated) Arbitrary Requests
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upg
70RISK
open ↗Exploit-DB
Kubernetes - (Authenticated) Arbitrary Requests
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upg
70RISK
open ↗Exploit-DB
Adiscon LogAnalyzer < 4.1.7 - Cross-Site Scripting
login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Referer field.
43RISK
open ↗Exploit-DB
Rockwell Automation Allen-Bradley PowerMonitor 1000 - Incorrect Access Control Authentication Bypass
An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000. An unauthenticated user can add/edit/rem
35RISK
open ↗Exploit-DB
DomainMOD 4.11.01 - Registrar Cross-Site Scripting
DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar.
38RISK
open ↗Exploit-DB
HP Intelligent Management - Java Deserialization Remote Code Execution (Metasploit)
A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and e
60RISK
open ↗Exploit-DB
NUUO NVRMini2 3.9.1 - (Authenticated) Command Injection
NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker can send crafted reques
28RISK
open ↗Exploit-DB
NEC Univerge Sv9100 WebPro - 6.00 - Predictable Session ID / Clear Text Password Storage
NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI.
28RISK
open ↗Exploit-DB
Xorg X11 Server (AIX) - Local Privilege Escalation
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh
43RISK
open ↗Exploit-DB
OpenSSH < 7.7 - User Enumeration (2)
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati
70RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.