Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,760cataloged exploits

32,083CVEs with public exploitation

1,932lab-tested

All Exploit-DB 22,786Referência 19,934GitHub PoC 13,235VulnCheck XDB 8,150Nuclei 4,193Metasploit 3,462✓ verified onlyrecent popular risk

22,786 exploits

Exploit-DB

Linux - Broken uid/gid Mapping for Nested User Namespaces

CVE-2018-18955—16 Nov 2018

In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalat

38RISK

open ↗

Exploit-DB

PHP-Proxy 5.1.0 - Local File Inclusion

CVE-2018-19246—15 Nov 2018

PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "pre-installed version" (intended for users w

28RISK

open ↗

Exploit-DB

WordPress Plugin Ninja Forms 3.3.17 - Cross-Site Scripting

CVE-2018-19287—15 Nov 2018

XSS in the Ninja Forms plugin before 3.3.18 for WordPress allows Remote Attackers to execute JavaScript via the includes

38RISK

open ↗

Exploit-DB

Dell OpenManage Network Manager 6.2.0.51 SP3 - Multiple Vulnerabilities

CVE-2018-15768—14 Nov 2018

Insecure MySQL Configuration Vulnerability

23RISK

open ↗

Exploit-DB

ntpd 4.2.8p10 - Out-of-Bounds Read (PoC)

CVE-2018-7182—14 Nov 2018

The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-

28RISK

open ↗

Exploit-DB

Dell OpenManage Network Manager 6.2.0.51 SP3 - Multiple Vulnerabilities

CVE-2018-15767—14 Nov 2018

Improper Authorization Vulnerability

28RISK

open ↗

Exploit-DB

Advanced Comment System 1.0 - SQL Injection

CVE-2018-18619—14 Nov 2018

internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability bec

23RISK

open ↗

Exploit-DB

SwitchVPN for macOS 2.1012.03 - Privilege Escalation

CVE-2018-18860—14 Nov 2018

A local privilege escalation vulnerability has been identified in the SwitchVPN client 2.1012.03 for macOS. Due to over-

23RISK

open ↗

Exploit-DB

ClipperCMS 1.3.3 - Cross-Site Request Forgery (File Upload)

CVE-2018-19135—13 Nov 2018

ClipperCMS 1.3.3 does not have CSRF protection on its kcfinder file upload (enabled by default). This can be used by an

23RISK

open ↗

Exploit-DB

CentOS Web Panel 0.9.8.740 - Cross-Site Request Forgery / Cross-Site Scripting

CVE-2018-18772—13 Nov 2018

CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=send_ssh, as dem

23RISK

open ↗

Exploit-DB

CentOS Web Panel 0.9.8.740 - Cross-Site Request Forgery / Cross-Site Scripting

CVE-2018-18773—13 Nov 2018

CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=rootpwd, as demo

23RISK

open ↗

Exploit-DB

CentOS Web Panel 0.9.8.740 - Cross-Site Request Forgery / Cross-Site Scripting

CVE-2018-18774—13 Nov 2018

CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows XSS via the admin/index.php module parameter.

23RISK

open ↗

Exploit-DB

Evince 3.24.0 - Command Injection

CVE-2017-1000083—13 Nov 2018

backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to e

50RISK

open ↗

Exploit-DB

xorg-x11-server < 1.20.1 - Local Privilege Escalation

CVE-2018-14665—13 Nov 2018

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RISK

open ↗

Exploit-DB

WordPress Plugin Media File Manager 1.4.2 - Directory Traversal / Cross-Site Scripting

CVE-2018-19040—12 Nov 2018

The Media File Manager plugin 1.4.2 for WordPress allows directory listing via a ../ directory traversal in the dir para

28RISK

open ↗

Exploit-DB

WordPress Plugin Media File Manager 1.4.2 - Directory Traversal / Cross-Site Scripting

CVE-2018-19043—12 Nov 2018

The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file renaming (specifying a "from" and "to" filename)

28RISK

open ↗

Exploit-DB

WordPress Plugin Media File Manager 1.4.2 - Directory Traversal / Cross-Site Scripting

CVE-2018-19042—12 Nov 2018

The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file movement via a ../ directory traversal in the di

28RISK

open ↗

Exploit-DB

WordPress Plugin Media File Manager 1.4.2 - Directory Traversal / Cross-Site Scripting

CVE-2018-19041—12 Nov 2018

The Media File Manager plugin 1.4.2 for WordPress allows XSS via the dir parameter of an mrelocator_getdir action to the

23RISK

open ↗

Exploit-DB

OpenSLP 2.0.0 - Multiple Vulnerabilities

CVE-2016-7567—07 Nov 2018

Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have

28RISK

open ↗

Exploit-DB

blueimp's jQuery 9.22.0 - (Arbitrary) File Upload (Metasploit)

CVE-2018-9206—06 Nov 2018

Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0

60RISK

open ↗

Exploit-DB

FaceTime - 'VCPDecompressionDecodeFrame' Memory Corruption

CVE-2018-4366—06 Nov 2018

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.

23RISK

open ↗

Exploit-DB

FaceTime - 'readSPSandGetDecoderParams' Stack Corruption

CVE-2018-4367—06 Nov 2018

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.

23RISK

open ↗

Exploit-DB

CMS Made Simple 2.2.7 - (Authenticated) Remote Code Execution

CVE-2018-10517—06 Nov 2018

In CMS Made Simple (CMSMS) through 2.2.7, the "module import" operation in the admin dashboard contains a remote code ex

28RISK

open ↗

Exploit-DB

libiec61850 1.3 - Stack Based Buffer Overflow

CVE-2018-18957—06 Nov 2018

An issue has been found in libIEC61850 v1.3. It is a stack-based buffer overflow in prepareGooseBuffer in goose/goose_pu

28RISK

open ↗

Exploit-DB

FaceTime - RTP Video Processing Heap Corruption

CVE-2018-4384—06 Nov 2018

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1,

23RISK

open ↗

Exploit-DB

Advantech WebAccess SCADA 8.3.2 - Remote Code Execution

CVE-2018-15707—05 Nov 2018

Advantech WebAccess 8.3.1 and 8.3.2 are vulnerable to cross-site scripting in the Bwmainleft.asp page. An attacker could

23RISK

open ↗

Exploit-DB

LiquidVPN 1.36 / 1.37 - Privilege Escalation

CVE-2018-18856—05 Nov 2018

Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS.

23RISK

open ↗

Exploit-DB

LiquidVPN 1.36 / 1.37 - Privilege Escalation

CVE-2018-18857—05 Nov 2018

Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS.

23RISK

open ↗

Exploit-DB

LiquidVPN 1.36 / 1.37 - Privilege Escalation

CVE-2018-18858—05 Nov 2018

Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS.

23RISK

open ↗

Exploit-DB

LiquidVPN 1.36 / 1.37 - Privilege Escalation

CVE-2018-18859—05 Nov 2018

Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS.

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.