Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,886cataloged exploits
32,153CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 19,978GitHub PoC 13,282VulnCheck XDB 8,176Nuclei 4,202Metasploit 3,462✓ verified onlyrecentpopularrisk
19,978 exploits
Referência
CVE-2022-3921
CVE-2022-3921CRITICAL
Listingo < 3.2.7 - Unauthenticated Arbitrary File Upload
53RISK
open ↗
Referência
CVE-2019-12991
CVE-2019-12991HIGHunder attack
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of
93RISK
open ↗
Referência
CVE-2012-5054
CVE-2012-5054HIGHunder attack
Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remo
76RISK
open ↗
Referência
CVE-2014-8272
CVE-2014-8272—
The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57
28RISK
open ↗
Referência
CVE-2016-4338
CVE-2016-4338—
The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x bef
28RISK
open ↗
Referência
CVE-2016-4338
CVE-2016-4338—
The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x bef
28RISK
open ↗
Referência
CVE-2010-3143
CVE-2010-3143—
Untrusted search path vulnerability in Microsoft Windows Contacts allows local users, and possibly remote attackers, to
28RISK
open ↗
Referência
CVE-2010-3227
CVE-2010-3227—
Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microso
28RISK
open ↗
Referência
CVE-2005-2842
CVE-2005-2842—
Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary c
28RISK
open ↗
Referência
CVE-2016-0015
CVE-2016-0015—
DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi
35RISK
open ↗
Referência
CVE-2020-3956
CVE-2020-3956—
VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4
28RISK
open ↗
Referência
CVE-2019-14348
CVE-2019-14348—
The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information via
28RISK
open ↗
Referência
CVE-2016-3223
CVE-2016-3223—
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold an
28RISK
open ↗
Referência
CVE-2016-3223
CVE-2016-3223—
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold an
28RISK
open ↗
Referência
CVE-2021-46387
CVE-2021-46387—
ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS). Insecure URI handling leads t
43RISK
open ↗
Referência
CVE-2019-19368
CVE-2019-19368—
A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker ca
43RISK
open ↗
Referência
CVE-2021-44595
CVE-2021-44595—
Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send m
28RISK
open ↗
Referência
CVE-2014-2908
CVE-2014-2908—
Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x
43RISK
open ↗
Referência
CVE-2019-9955
CVE-2019-9955—
On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, U
43RISK
open ↗
Referência
CVE-2019-9955
CVE-2019-9955—
On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, U
43RISK
open ↗
Referência
CVE-2011-0406
CVE-2011-0406—
Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary co
28RISK
open ↗
Referência
CVE-2019-6110
CVE-2019-6110MEDIUM
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-T
38RISK
open ↗
Referência
CVE-2020-9283
CVE-2020-9283—
golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the
28RISK
open ↗
Referência
CVE-2016-2209
CVE-2016-2209—
Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec
28RISK
open ↗
Referência
CVE-2019-1003029
CVE-2019-1003029CRITICALunder attack
A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/
100RISK
open ↗
Referência
CVE-2011-1866
CVE-2011-1866—
Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remot
28RISK
open ↗
Referência★ 1
Exploit for EasyNAS version 1.1.0. The vulnerability exploited is a command injection flaw, which requires authentication.
CVE-2023-0830MEDIUM
EasyNAS backup.pl system os command injection
38RISK
open ↗
Referência
CVE-2016-5639
CVE-2016-5639—
Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13
28RISK
open ↗
Referência
CVE-2012-5612
CVE-2012-5612—
Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly ot
28RISK
open ↗
Referência
CVE-2015-4664
CVE-2015-4664—
An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers t
28RISK
open ↗
← previouspage 104 / 666next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.