Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,386cataloged exploits

36,533CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,466Referência 23,104GitHub PoC 15,075VulnCheck XDB 8,883Nuclei 4,365Metasploit 3,493✓ verified onlyrecent popular risk

79,305 exploits

GitHub PoC

Adapted CVE-2015-8562 payload

CVE-2015-8562—07 Feb 2020

Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbi

60RISK

GitHub PoC★ 59

A functional exploit for CVE-2019-18634, a BSS overflow in sudo's pwfeedback feature that allows for for privesc

CVE-2019-18634—07 Feb 2020

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the

28RISK

GitHub PoC★ 237

Proof of Concept for CVE-2019-18634

CVE-2019-18634—07 Feb 2020

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the

28RISK

VulnCheck XDB

remote-with-credentials

CVE-2015-8562—07 Feb 2020

Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbi

60RISK

Exploit-DB

EyesOfNetwork 5.3 - Remote Code Execution

CVE-2020-8654—webappsphp07 Feb 2020

An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoD

60RISK

Exploit-DB

EyesOfNetwork 5.3 - Remote Code Execution

CVE-2020-8655HIGHunder attackwebappsphp07 Feb 2020

An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability

98RISK

Exploit-DB✓ VexDay Proof

Windscribe - WindscribeService Named Pipe Privilege Escalation (Metasploit)

CVE-2018-11479—localwindows07 Feb 2020

The VPN component in Windscribe 1.81 uses the OpenVPN client for connections. Also, it creates a WindScribeService.exe s

38RISK

Exploit-DB

EyesOfNetwork 5.3 - Remote Code Execution

CVE-2020-8656—webappsphp07 Feb 2020

An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthe

60RISK

Metasploit600

EyesOfNetwork 5.1-5.3 AutoDiscovery Target Command Execution

CVE-2020-8654—06 Feb 2020

An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoD

60RISK

Metasploit600

EyesOfNetwork 5.1-5.3 AutoDiscovery Target Command Execution

CVE-2020-9465—06 Feb 2020

An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3. The eonweb web interface is prone to a SQL

40RISK

Metasploit600

EyesOfNetwork 5.1-5.3 AutoDiscovery Target Command Execution

CVE-2020-8657CRITICALunder attack06 Feb 2020

An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include

100RISK

Metasploit600

EyesOfNetwork 5.1-5.3 AutoDiscovery Target Command Execution

CVE-2020-8655HIGHunder attack06 Feb 2020

An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability

98RISK

Metasploit600

EyesOfNetwork 5.1-5.3 AutoDiscovery Target Command Execution

CVE-2020-8656—06 Feb 2020

An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthe

60RISK

Exploit-DB✓ VexDay Proof

Cisco Data Center Network Manager 11.2.1 - 'getVmHostData' SQL Injection

CVE-2019-15976CRITICALwebappsjava06 Feb 2020

Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

70RISK

GitHub PoC★ 1

Final Project for Security and Privacy CS 600.443

CVE-2011-4862—06 Feb 2020

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka k

60RISK

Exploit-DB

Sudo 1.8.25p - 'pwfeedback' Buffer Overflow

CVE-2019-18634—locallinux06 Feb 2020

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the

28RISK

Exploit-DB✓ VexDay Proof

Cisco Data Center Network Manager 11.2 - Remote Code Execution

CVE-2019-15975CRITICALwebappsjava06 Feb 2020

Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

85RISK

Exploit-DB✓ VexDay Proof

Cisco Data Center Network Manager 11.2.1 - 'LanFabricImpl' Command Injection

CVE-2019-15978HIGHwebappsjava06 Feb 2020

Cisco Data Center Network Manager Command Injection Vulnerabilities

53RISK

VulnCheck XDB

client-side

CVE-2020-0601HIGHunder attack06 Feb 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

Exploit-DB✓ VexDay Proof

Cisco Data Center Network Manager 11.2.1 - 'getVmHostData' SQL Injection

CVE-2019-15984HIGHwebappsjava06 Feb 2020

Cisco Data Center Network Manager SQL Injection Vulnerabilities

53RISK

Exploit-DB✓ VexDay Proof

Cisco Data Center Network Manager 11.2.1 - 'LanFabricImpl' Command Injection

CVE-2019-15977CRITICALwebappsjava06 Feb 2020

Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

60RISK

VulnCheck XDB

client-side

CVE-2018-2628CRITICALunder attack05 Feb 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISK

Exploit-DB

Kronos WebTA 4.0 - Authenticated Remote Privilege Escalation

CVE-2020-8493MEDIUMwebappsjava05 Feb 2020

A stored XSS vulnerability in Kronos Web Time and Attendance (webTA) affects 3.8.x and later 3.x versions before 4.0 via

33RISK

Exploit-DB

Verodin Director Web Console 3.5.4.0 - Remote Authenticated Password Disclosure (PoC)

CVE-2019-10716—webappsjson05 Feb 2020

An Information Disclosure issue in Verodin Director 3.5.3.1 and earlier reveals usernames and passwords of integrated se

23RISK

Metasploit600

PlaySMS index.php Unauthenticated Template Injection Code Execution

CVE-2020-8644CRITICALunder attack05 Feb 2020

PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.

100RISK

Metasploit600

CA Unified Infrastructure Management Nimsoft 7.80 - Remote Buffer Overflow

CVE-2020-8012—05 Feb 2020

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerabi

60RISK

Metasploit600

CA Unified Infrastructure Management Nimsoft 7.80 - Remote Buffer Overflow

CVE-2020-8010—05 Feb 2020

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vu

30RISK

Exploit-DB

xglance-bin 11.00 - Privilege Escalation

CVE-2014-2630—locallinux05 Feb 2020

Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via u

38RISK

Exploit-DB

Kronos WebTA 4.0 - Authenticated Remote Privilege Escalation

CVE-2020-8495HIGHwebappsjava05 Feb 2020

In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H491delegate se

41RISK

VulnCheck XDB

local

CVE-2019-5736—04 Feb 2020

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.