Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,836cataloged exploits
32,133CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 19,967GitHub PoC 13,264VulnCheck XDB 8,156Nuclei 4,201Metasploit 3,462✓ verified onlyrecentpopularrisk
19,967 exploits
Referência
CVE-2020-8656
CVE-2020-8656—
An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthe
60RISK
open ↗
Referência
CVE-2016-8022
CVE-2016-8022—
Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier)
28RISK
open ↗
Referência
CVE-2018-8898
CVE-2018-8898—
A flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782 (A1_WI_20170303 || SWVer="V100R001B0
28RISK
open ↗
Referência
CVE-2018-8898
CVE-2018-8898—
A flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782 (A1_WI_20170303 || SWVer="V100R001B0
28RISK
open ↗
Referência
CVE-2019-12828
CVE-2019-12828—
An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and orig
28RISK
open ↗
Referência
Cisco IP Phone 7940 - Reboot (Denial of Service)
CVE-2006-0179—
The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large amount of TCP SYN pack
28RISK
open ↗
Referência
CVE-2015-0565
CVE-2015-0565—
NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible.
28RISK
open ↗
Referência
CVE-2015-0565
CVE-2015-0565—
NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible.
28RISK
open ↗
Referência
CVE-2018-7448
CVE-2018-7448—
Remote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple version 2.1.6 allows remote
28RISK
open ↗
Referência
CVE-2018-7448
CVE-2018-7448—
Remote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple version 2.1.6 allows remote
28RISK
open ↗
Referência
CVE-2018-7921
CVE-2018-7921—
Huawei B315s-22 products with software of 21.318.01.00.26 have an information leak vulnerability. Unauthenticated adjace
28RISK
open ↗
Referência
CVE-2015-1830
CVE-2015-1830—
Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5
60RISK
open ↗
Referência
CVE-2010-5330
CVE-2010-5330CRITICALunder attack
On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the if
90RISK
open ↗
Referência
Joomla! Component ChronoForms 2.3.5 - Remote File Inclusion
CVE-2008-0567—
Multiple PHP remote file inclusion vulnerabilities in ChronoEngine ChronoForms (com_chronocontact) 2.3.5 component for J
35RISK
open ↗
Referência
CVE-2017-17090
CVE-2017-17090—
An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and old
45RISK
open ↗
Referência
Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE
CVE-2025-1097HIGH
ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation
68RISK
open ↗
Referência
CVE-2014-8682
CVE-2014-8682—
Multiple SQL injection vulnerabilities in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.x before 0.5.6.1105 Beta allow r
50RISK
open ↗
Referência
CVE-2017-14495
CVE-2017-14495—
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote
45RISK
open ↗
Referência
CVE-2014-8682
CVE-2014-8682—
Multiple SQL injection vulnerabilities in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.x before 0.5.6.1105 Beta allow r
50RISK
open ↗
Referência
CVE-2015-1376
CVE-2015-1376—
pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not validate hostnames, which allows remot
50RISK
open ↗
Referência
CVE-2022-25236
CVE-2022-25236CRITICAL
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace
60RISK
open ↗
Referência
Photoshop CS2/CS3 / Paint Shop Pro 11.20 - '.png' Local Buffer Overflow
CVE-2007-2366—
Buffer overflow in Corel Paint Shop Pro 11.20 allows user-assisted remote attackers to execute arbitrary code via a craf
35RISK
open ↗
Referência
CVE-2017-11281
CVE-2017-11281—
Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploita
35RISK
open ↗
Referência
CVE-2017-11281
CVE-2017-11281—
Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploita
35RISK
open ↗
Referência
CVE-2015-2995
CVE-2015-2995—
The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote at
50RISK
open ↗
Referência
CVE-2015-2995
CVE-2015-2995—
The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote at
50RISK
open ↗
Referência
CVE-2010-1342
CVE-2010-1342—
Multiple PHP remote file inclusion vulnerabilities in Direct News 4.10.2, when register_globals is enabled, allow remote
23RISK
open ↗
Referência
CVE-2019-12480
CVE-2019-12480—
BACnet Protocol Stack through 0.8.6 has a segmentation fault leading to denial of service in BACnet APDU Layer because a
35RISK
open ↗
Referência
CVE-2014-8499
CVE-2014-8499—
Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Servi
50RISK
open ↗
Referência
CVE-2014-8499
CVE-2014-8499—
Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Servi
50RISK
open ↗
← previouspage 83 / 666next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.