Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,883cataloged exploits

40,037CVEs with public exploitation

24,696lab-tested

All Referência 25,956Exploit-DB 24,488GitHub PoC 17,453VulnCheck XDB 9,931Nuclei 4,527Metasploit 3,528✓ verified onlyrecent popular risk

24,488 exploits

Exploit-DB✓ VexDay Proof

McAfee True Key - McAfee.TrueKey.Service Privilege Escalation

CVE-2018-6755HIGHlocalwindows11 Dec 2018

True Key (TK) Windows Client - Weak Directory Permission Vulnerability

41RISK

open ↗

Exploit-DB

PrestaShop 1.6.x/1.7.x - Remote Code Execution

CVE-2018-19125—webappsphp11 Dec 2018

PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to delete an image directory.

28RISK

open ↗

Exploit-DB

TP-Link wireless router Archer C1200 - Cross-Site Scripting

CVE-2018-13134—webappshardware11 Dec 2018

TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATH_INFO to the /webpages/data URI.

23RISK

open ↗

Exploit-DB

Adobe ColdFusion 2018 - Arbitrary File Upload

CVE-2018-15961CRITICALunder attackwebappsmultiple11 Dec 2018

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unr

100RISK

open ↗

Exploit-DB✓ VexDay Proof

XNU - POSIX Shared Memory Mappings have Incorrect Maximum Protection

CVE-2018-4435—localmultiple11 Dec 2018

A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.1.1, macOS Mojave 1

23RISK

open ↗

Exploit-DB

Kubernetes - (Authenticated) Arbitrary Requests

CVE-2018-1002105CRITICALremotemultiple10 Dec 2018

In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upg

70RISK

open ↗

Exploit-DB

Kubernetes - (Unauthenticated) Arbitrary Requests

CVE-2018-1002105CRITICALremotemultiple10 Dec 2018

In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upg

70RISK

open ↗

Exploit-DB

Adiscon LogAnalyzer < 4.1.7 - Cross-Site Scripting

CVE-2018-19877—webappsphp09 Dec 2018

43RISK

open ↗

Exploit-DB

Dolibarr ERP/CRM 8.0.3 - Cross-Site Scripting

CVE-2018-19799—webappsphp04 Dec 2018

Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS.

23RISK

open ↗

Exploit-DB

NUUO NVRMini2 3.9.1 - (Authenticated) Command Injection

CVE-2018-15716—webappsphp04 Dec 2018

NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker can send crafted reques

28RISK

open ↗

Exploit-DB

Rockwell Automation Allen-Bradley PowerMonitor 1000 - Incorrect Access Control Authentication Bypass

CVE-2018-19616—webappshardware04 Dec 2018

An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000. An unauthenticated user can add/edit/rem

35RISK

open ↗

Exploit-DB✓ VexDay Proof

Wireshark - 'find_signature' Heap Out-of-Bounds Read

CVE-2018-19627—dosmultiple04 Dec 2018

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/v

28RISK

open ↗

Exploit-DB✓ VexDay Proof

Microsoft Lync for Mac 2011 - Injection Forced Browsing/Download

CVE-2018-8474—doswindows04 Dec 2018

A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted messa

35RISK

open ↗

Exploit-DB

FreshRSS 1.11.1 - Cross-Site Scripting

CVE-2018-19782—webappsphp04 Dec 2018

Multiple cross-site scripting (XSS) vulnerabilities in GET requests in FreshRSS 1.11.1 allow remote attackers to inject

23RISK

open ↗

Exploit-DB

NEC Univerge Sv9100 WebPro - 6.00 - Predictable Session ID / Clear Text Password Storage

CVE-2018-11742—webappshardware04 Dec 2018

NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI.

28RISK

open ↗

Exploit-DB

DomainMOD 4.11.01 - Custom SSL Fields Cross-Site Scripting

CVE-2018-19751—webappsphp04 Dec 2018

DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields.

38RISK

open ↗

Exploit-DB

DomainMOD 4.11.01 - Owner name Field Cross-Site Scripting

CVE-2018-19749—webappsphp04 Dec 2018

DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field.

38RISK

open ↗

Exploit-DB

DomainMOD 4.11.01 - Registrar Cross-Site Scripting

CVE-2018-19752—webappsphp04 Dec 2018

DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar.

38RISK

open ↗

Exploit-DB

DomainMOD 4.11.01 - Custom Domain Fields Cross-Site Scripting

CVE-2018-19750—webappsphp04 Dec 2018

DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Doma

23RISK

open ↗

Exploit-DB

Xorg X11 Server (AIX) - Local Privilege Escalation

CVE-2018-14665—localaix04 Dec 2018

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RISK

open ↗

Exploit-DB✓ VexDay Proof

HP Intelligent Management - Java Deserialization Remote Code Execution (Metasploit)

CVE-2017-12557—remotewindows04 Dec 2018

A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and e

60RISK

open ↗

Exploit-DB

NEC Univerge Sv9100 WebPro - 6.00 - Predictable Session ID / Clear Text Password Storage

CVE-2018-11741—webappshardware04 Dec 2018

NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in Account Information Disclosure vi

28RISK

open ↗

Exploit-DB

OpenSSH < 7.7 - User Enumeration (2)

CVE-2018-15473MEDIUMremotelinux04 Dec 2018

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISK

open ↗

Exploit-DB

CyberArk 9.7 - Memory Disclosure

CVE-2018-9842—remotewindows03 Dec 2018

CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replay

28RISK

open ↗

Exploit-DB

Apache Superset < 0.23 - Remote Code Execution

CVE-2018-8021—webappslinux03 Dec 2018

Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to pos

35RISK

open ↗

Exploit-DB

xorg-x11-server < 1.20.3 - 'modulepath' Local Privilege Escalation

CVE-2018-14665—localmultiple30 Nov 2018

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RISK

open ↗

Exploit-DB✓ VexDay Proof

VBScript - 'OLEAUT32!VariantClear' and 'scrrun!VBADictionary::put_Item' Use-After-Free

CVE-2018-8544—doswindows30 Nov 2018

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows

35RISK

open ↗

Exploit-DB

PhpSpreadsheet < 1.5.0 - XML External Entity (XXE)

CVE-2018-19277—webappsphp30 Nov 2018

securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 enco

23RISK

open ↗

Exploit-DB

Schneider Electric PLC - Session Calculation Authentication Bypass

CVE-2017-6026—webappshardware30 Nov 2018

A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware ver

35RISK

open ↗

Exploit-DB✓ VexDay Proof

VBScript - 'rtFilter' Out-of-Bounds Read

CVE-2018-8552—doswindows30 Nov 2018

An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which coul

35RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.