Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,760cataloged exploits

32,083CVEs with public exploitation

1,932lab-tested

All Exploit-DB 22,786Referência 19,934GitHub PoC 13,235VulnCheck XDB 8,150Nuclei 4,193Metasploit 3,462✓ verified onlyrecent popular risk

22,786 exploits

Exploit-DB

Cloudme 1.9 - Buffer Overflow (DEP) (Metasploit)

CVE-2018-6892—14 Aug 2018

An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sy

60RISK

open ↗

Exploit-DB

Oracle GlassFish Server Open Source Edition 4.1 - Path Traversal (Metasploit)

CVE-2017-1000028—14 Aug 2018

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Trave

60RISK

open ↗

Exploit-DB

Oracle Glassfish OSE 4.1 - Path Traversal (Metasploit)

CVE-2017-1000028—14 Aug 2018

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Trave

60RISK

open ↗

Exploit-DB

Oracle Weblogic Server - Deserialization Remote Code Execution (Metasploit)

CVE-2018-2628CRITICALunder attack13 Aug 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISK

open ↗

Exploit-DB

IBM Sterling B2B Integrator 5.2.0.1/5.2.6.3 - Cross-Site Scripting

CVE-2018-1563MEDIUM13 Aug 2018

IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) is vulnerable to cross-site

33RISK

open ↗

Exploit-DB

IBM Sterling B2B Integrator 5.2.0.1/5.2.6.3 - Cross-Site Scripting

CVE-2018-1513MEDIUM13 Aug 2018

IBM Sterling B2B Integrator Standard Edition 5.2.0 through 5.2.6 is vulnerable to cross-site scripting. This vulnerabili

33RISK

open ↗

Exploit-DB

MyBB Thank You/Like Plugin 3.0.0 - Cross-Site Scripting

CVE-2018-14888—10 Aug 2018

inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or threa

23RISK

open ↗

Exploit-DB

Zimbra 8.6.0_GA_1153 - Cross-Site Scripting

CVE-2016-3411—10 Aug 2018

Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrar

23RISK

open ↗

Exploit-DB

reSIProcate 1.10.2 - Heap Overflow

CVE-2018-12584—09 Aug 2018

The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows rem

28RISK

open ↗

Exploit-DB

Linux Kernel 4.14.7 (Ubuntu 16.04 / CentOS 7) - (KASLR & SMEP Bypass) Arbitrary File Read

CVE-2017-18344—09 Aug 2018

The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly

23RISK

open ↗

Exploit-DB

osTicket 1.10.1 - Arbitrary File Upload

CVE-2017-15580—08 Aug 2018

osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats. However, it does not properly v

28RISK

open ↗

Exploit-DB

Subrion CMS 4.2.1 - Cross-Site Scripting

CVE-2018-14840—06 Aug 2018

uploads/.htaccess in Subrion CMS 4.2.1 allows XSS because it does not block .html file uploads (but does block, for exam

23RISK

open ↗

Exploit-DB

Sitecore.Net 8.1 - Directory Traversal

CVE-2018-7669—06 Aug 2018

An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The 'Log Viewer' application

28RISK

open ↗

Exploit-DB

Open-AudIT Community 2.2.6 - Cross-Site Scripting

CVE-2018-14493—06 Aug 2018

Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inj

35RISK

open ↗

Exploit-DB

LAMS < 3.1 - Cross-Site Scripting

CVE-2018-12090—06 Aug 2018

There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introd

23RISK

open ↗

Exploit-DB

Fortinet FortiClient 5.2.3 (Windows 10 x64 Creators) - Local Privilege Escalation

CVE-2015-5736—05 Aug 2018

The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel

23RISK

open ↗

Exploit-DB

Fortinet FortiClient 5.2.3 (Windows 10 x64 Creators) - Local Privilege Escalation

CVE-2015-4077—05 Aug 2018

The (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, and (4) mdare64_52.sys drivers in Fortinet FortiClient b

23RISK

open ↗

Exploit-DB

PHP Template Store Script 3.0.6 - Cross-Site Scripting

CVE-2018-14869—03 Aug 2018

PHP Template Store Script 3.0.6 allows XSS via the Address line 1, Address Line 2, Bank name, or A/C Holder name field i

23RISK

open ↗

Exploit-DB

Linux Kernel - UDP Fragmentation Offset 'UFO' Privilege Escalation (Metasploit)

CVE-2017-1000112—03 Aug 2018

Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE

43RISK

open ↗

Exploit-DB

Vuze Bittorrent Client 5.7.6.0 - SSDP Processing XML External Entity Injection

CVE-2018-13417—03 Aug 2018

In Vuze Bittorrent Client 5.7.6.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External E

28RISK

open ↗

Exploit-DB

Plex Media Server 1.13.2.5154 - SSDP Processing XML External Entity Injection

CVE-2018-13415—03 Aug 2018

In Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External En

35RISK

open ↗

Exploit-DB

WityCMS 0.6.2 - Cross-Site Request Forgery (Password Change)

CVE-2018-14029—02 Aug 2018

CSRF vulnerability in admin/user/edit in Creatiwity wityCMS 0.6.2 allows an attacker to take over a user account, as dem

23RISK

open ↗

Exploit-DB

Sun Solaris 11.3 AVS Kernel - Local Privilege Escalation

CVE-2018-2892—02 Aug 2018

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Availability Suite Service).

23RISK

open ↗

Exploit-DB

Universal Media Server 7.1.0 - SSDP Processing XML External Entity Injection

CVE-2018-13416—02 Aug 2018

In Universal Media Server (UMS) 7.1.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML Extern

28RISK

open ↗

Exploit-DB

Seq 4.2.476 - Authentication Bypass

CVE-2018-8096—02 Aug 2018

Datalust Seq before 4.2.605 is vulnerable to Authentication Bypass (with the attacker obtaining admin access) via '"Name

35RISK

open ↗

Exploit-DB

Craft CMS SEOmatic plugin 3.1.4 - Server-Side Template Injection

CVE-2018-14716—31 Jul 2018

A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because reques

35RISK

open ↗

Exploit-DB

Responsive Filemanager 9.13.1 - Server-Side Request Forgery

CVE-2018-14728—30 Jul 2018

upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.

60RISK

open ↗

Exploit-DB

fusermount - user_allow_other Restriction Bypass and SELinux Label Control

CVE-2018-10906MEDIUM30 Jul 2018

In fuse before versions 2.9.8 and 3.x before 3.2.5, fusermount is vulnerable to a restriction bypass when SELinux is act

33RISK

open ↗

Exploit-DB

H2 Database 1.4.197 - Information Disclosure

CVE-2018-14335MEDIUM30 Jul 2018

An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read

38RISK

open ↗

Exploit-DB

SoftNAS Cloud < 4.0.3 - OS Command Injection

CVE-2018-14417—27 Jul 2018

A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3. In particul

45RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.