Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
85,883cataloged exploits
40,037CVEs with public exploitation
24,696lab-tested
AllReferência 25,956Exploit-DB 24,488GitHub PoC 17,453VulnCheck XDB 9,931Nuclei 4,527Metasploit 3,528✓ verified onlyrecentpopularrisk
24,488 exploits
Exploit-DB✓ VexDay Proof
Netatalk 3.1.12 - Authentication Bypass
Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking
70RISK
open ↗Exploit-DB✓ VexDay Proof
Netatalk 3.1.12 - Authentication Bypass (PoC)
Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking
70RISK
open ↗Exploit-DB✓ VexDay Proof
VBScript - MSXML Execution Policy Bypass
A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly rest
35RISK
open ↗Exploit-DB✓ VexDay Proof
VBScript - VbsErase Reference Leak Use-After-Free
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows
35RISK
open ↗Exploit-DB
Bolt CMS < 3.6.2 - Cross-Site Scripting
Bolt CMS <3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of a Configured and Ne
23RISK
open ↗Exploit-DB
Integria IMS 5.0.83 - Cross-Site Request Forgery
Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/lista_usuarios, resulting in the ability to delete an arbitrary
23RISK
open ↗Exploit-DB
Yeswiki Cercopitheque - 'id' SQL Injection
SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to ex
23RISK
open ↗Exploit-DB
Integria IMS 5.0.83 - 'search_string' Cross-Site Scripting
Artica Integria IMS 5.0.83 has XSS via the search_string parameter.
23RISK
open ↗Exploit-DB✓ VexDay Proof
IBM Operational Decision Manager 8.x - XML External Entity Injection
IBM Operational Decision Management 8.5, 8.6, 8.7, 8.8, and 8.9 is vulnerable to a XML External Entity Injection (XXE) a
46RISK
open ↗Exploit-DB
Linux Kernel 4.4 - 'rtnetlink' Stack Memory Disclosure
The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain
23RISK
open ↗Exploit-DB
MiniShare 1.4.1 - 'HEAD/POST' Remote Buffer Overflow
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP POST re
28RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - 'jscript!JsArrayFunctionHeapSort' Out-of-Bounds Write
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet
35RISK
open ↗Exploit-DB
SDL Web Content Manager 8.5.0 - XML External Entity Injection
The SaveUserSettings service in Content Manager in SDL Web 8.5.0 has an XXE Vulnerability that allows reading sensitive
23RISK
open ↗Exploit-DB
MiniShare 1.4.1 - 'HEAD/POST' Remote Buffer Overflow
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP HEAD re
28RISK
open ↗Exploit-DB
Huawei Router HG532e - Command Execution
Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary
28RISK
open ↗Exploit-DB✓ VexDay Proof
Fortify Software Security Center (SSC) 17.10/17.20/18.10 - Information Disclosure
MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access
33RISK
open ↗Exploit-DB✓ VexDay Proof
Safari - Proxy Object Type Confusion (Metasploit)
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud
68RISK
open ↗Exploit-DB✓ VexDay Proof
Safari - Proxy Object Type Confusion (Metasploit)
In iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was addressed with improve
61RISK
open ↗Exploit-DB
Cisco RV110W - Password Disclosure / Command Execution
The CLI command parser on Cisco RV110W, RV130W, and RV215W devices allows local users to execute arbitrary shell command
23RISK
open ↗Exploit-DB✓ VexDay Proof
Fortify Software Security Center (SSC) 17.10/17.20/18.10 - Information Disclosure (2)
MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access
33RISK
open ↗Exploit-DB
Cisco RV110W - Password Disclosure / Command Execution
The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware
28RISK
open ↗Exploit-DB✓ VexDay Proof
CyberLink LabelPrint 2.5 - Stack Buffer Overflow (Metasploit)
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) au
43RISK
open ↗Exploit-DB✓ VexDay Proof
WebKit JIT - Int32/Double Arrays can have Proxy Objects in the Prototype Chains
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue affe
23RISK
open ↗Exploit-DB
PrestaShop 1.6.x/1.7.x - Remote Code Execution
PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file u
28RISK
open ↗Exploit-DB
DomainMOD 4.11.01 - Cross-Site Scripting
DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field.
23RISK
open ↗Exploit-DB✓ VexDay Proof
McAfee True Key - McAfee.TrueKey.Service Privilege Escalation
True Key (TK) Windows Client - Weak Directory Permission Vulnerability
41RISK
open ↗Exploit-DB
Huawei B315s-22 - Information Leak
Huawei B315s-22 products with software of 21.318.01.00.26 have an information leak vulnerability. Unauthenticated adjace
28RISK
open ↗Exploit-DB✓ VexDay Proof
ZTE ZXHN H168N - Improper Access Restrictions
ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper acc
55RISK
open ↗Exploit-DB✓ VexDay Proof
ZTE ZXHN H168N - Improper Access Restrictions
ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper cha
55RISK
open ↗Exploit-DB
TP-Link wireless router Archer C1200 - Cross-Site Scripting
TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATH_INFO to the /webpages/data URI.
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.