Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,760cataloged exploits

32,083CVEs with public exploitation

1,932lab-tested

All Exploit-DB 22,786Referência 19,934GitHub PoC 13,235VulnCheck XDB 8,150Nuclei 4,193Metasploit 3,462✓ verified onlyrecent popular risk

22,786 exploits

Exploit-DB

ASRock Drivers - Privilege Escalation

CVE-2018-10712—29 Oct 2018

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Str

23RISK

open ↗

Exploit-DB

AjentiCP 1.2.23.13 - Cross-Site Scripting

CVE-2018-18548—25 Oct 2018

ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in Fi

23RISK

open ↗

Exploit-DB

WebExec - (Authenticated) User Code Execution (Metasploit)

CVE-2018-15442HIGH25 Oct 2018

Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability

61RISK

open ↗

Exploit-DB

xorg-x11-server < 1.20.3 - Local Privilege Escalation

CVE-2018-14665—25 Oct 2018

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RISK

open ↗

Exploit-DB

Ekushey Project Manager CRM 3.1 - Cross-Site Scripting

CVE-2018-18417—25 Oct 2018

In the 3.1 version of Ekushey Project Manager CRM, Stored XSS has been discovered in the input and upload sections, as d

23RISK

open ↗

Exploit-DB

User Management 1.1 - Cross-Site Scripting

CVE-2018-18419—25 Oct 2018

Stored XSS has been discovered in the upload section of ARDAWAN.COM User Management 1.1, as demonstrated by a .jpg filen

23RISK

open ↗

Exploit-DB

ProjeQtOr Project Management Tool 7.2.5 - Remote Code Execution

CVE-2018-18924—25 Oct 2018

The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a .shtml file

23RISK

open ↗

Exploit-DB

WebEx - Local Service Permissions Exploit (Metasploit)

CVE-2018-15442HIGH25 Oct 2018

Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability

61RISK

open ↗

Exploit-DB

libtiff 4.0.9 - Decodes Arbitrarily Sized JBIG into a Target Buffer

CVE-2018-18557—25 Oct 2018

LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3

28RISK

open ↗

Exploit-DB

Oracle Weblogic Server - Deserialization Remote Command Execution (Patch Bypass)

CVE-2018-3245—25 Oct 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

45RISK

open ↗

Exploit-DB

Oracle Weblogic Server - Deserialization Remote Command Execution (Patch Bypass)

CVE-2018-2628CRITICALunder attack25 Oct 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISK

open ↗

Exploit-DB

Adult Filter 1.0 - Buffer Overflow (SEH)

CVE-2018-19459—25 Oct 2018

Adult Filter 1.0 has a Buffer Overflow via a crafted Black Domain List file.

23RISK

open ↗

Exploit-DB

LANGO Codeigniter Multilingual Script 1.0 - Cross-Site Scripting

CVE-2018-18416—24 Oct 2018

LANGO Codeigniter Multilingual Script 1.0 has XSS in the input and upload sections, as demonstrated by the site_name par

23RISK

open ↗

Exploit-DB

exim 4.90 - Remote Code Execution

CVE-2018-6789CRITICALunder attackransomware24 Oct 2018

An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted mes

100RISK

open ↗

Exploit-DB

Axioscloud Sissiweb Registro Elettronico 7.0.0 - 'Error_desc' Cross-Site Scripting

CVE-2018-18437—24 Oct 2018

In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the Error_Desc paramete

23RISK

open ↗

Exploit-DB

Microsoft Windows - SetImeInfoEx Win32k NULL Pointer Dereference (Metasploit)

CVE-2018-8120HIGHunder attackransomware22 Oct 2018

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

100RISK

open ↗

Exploit-DB

Keybase keybase-redirector - '$PATH' Local Privilege Escalation

CVE-2018-18629—22 Oct 2018

An issue was discovered in the Keybase command-line client before 2.8.0-20181023124437 for Linux. An untrusted search pa

23RISK

open ↗

Exploit-DB

LibSSH 0.7.6 / 0.8.4 - Unauthorized Access

CVE-2018-10933CRITICAL20 Oct 2018

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul

85RISK

open ↗

Exploit-DB

libSSH - Authentication Bypass

CVE-2018-10933CRITICAL18 Oct 2018

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul

85RISK

open ↗

Exploit-DB

TP-Link TL-SC3130 1.6.18 - RTSP Stream Disclosure

CVE-2018-18428—17 Oct 2018

TP-Link TL-SC3130 1.6.18P12_121101 devices allow unauthenticated RTSP stream access, as demonstrated by a /jpg/image.jpg

28RISK

open ↗

Exploit-DB

BigTree CMS 4.2.23 - Cross-Site Scripting

CVE-2018-18308—17 Oct 2018

In the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax/file-browser/upload/ (ak

23RISK

open ↗

Exploit-DB

Microsoft Windows - 'FSCTL_FIND_FILES_BY_SID' Information Disclosure

CVE-2018-8411—16 Oct 2018

An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vuln

23RISK

open ↗

Exploit-DB

Git Submodule - Arbitrary Code Execution

CVE-2018-17456—16 Oct 2018

Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x be

60RISK

open ↗

Exploit-DB

Solaris - RSH Stack Clash Privilege Escalation (Metasploit)

CVE-2017-1000364—16 Oct 2018

An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficie

38RISK

open ↗

Exploit-DB

VLC Media Player - MKV Use-After-Free (Metasploit)

CVE-2018-11529—16 Oct 2018

VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arb

50RISK

open ↗

Exploit-DB

Solaris - RSH Stack Clash Privilege Escalation (Metasploit)

CVE-2017-3631—16 Oct 2018

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported versio

38RISK

open ↗

Exploit-DB

Solaris - RSH Stack Clash Privilege Escalation (Metasploit)

CVE-2017-3630—16 Oct 2018

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions t

38RISK

open ↗

Exploit-DB

Solaris - RSH Stack Clash Privilege Escalation (Metasploit)

CVE-2017-3629—16 Oct 2018

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions t

38RISK

open ↗

Exploit-DB

Centos Web Panel 0.9.8.480 - Multiple Vulnerabilities

CVE-2018-18324—15 Oct 2018

CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has XSS via the admin/fileManager2.php fm_current_dir parameter

23RISK

open ↗

Exploit-DB

Centos Web Panel 0.9.8.480 - Multiple Vulnerabilities

CVE-2018-18322—15 Oct 2018

CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/ind

28RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.