Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,886cataloged exploits
32,153CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 19,978GitHub PoC 13,282VulnCheck XDB 8,176Nuclei 4,202Metasploit 3,462✓ verified onlyrecentpopularrisk
19,978 exploits
Referência
CVE-2015-4664
CVE-2015-4664—
An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers t
28RISK
open ↗
Referência
CVE-2017-1000112
CVE-2017-1000112—
Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE
43RISK
open ↗
Referência
CVE-2016-4201
CVE-2016-4201—
Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acro
28RISK
open ↗
Referência
CVE-2015-9266
CVE-2015-9266CRITICAL
Ubiquiti airOS HTTP(S) unauthenticated arbitrary file upload
85RISK
open ↗
Referência
CVE-2015-9266
CVE-2015-9266CRITICAL
Ubiquiti airOS HTTP(S) unauthenticated arbitrary file upload
85RISK
open ↗
Referência
CVE-2024-7332
CVE-2024-7332CRITICAL
TOTOLINK CP450 Telnet Service product.ini hard-coded password
68RISK
open ↗
Referência
CVE-2010-1305
CVE-2010-1305—
Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly ot
43RISK
open ↗
Referência
CVE-2010-1305
CVE-2010-1305—
Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly ot
43RISK
open ↗
Referência
CVE-2018-13417
CVE-2018-13417—
In Vuze Bittorrent Client 5.7.6.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External E
28RISK
open ↗
Referência
CVE-2022-40032
CVE-2022-40032CRITICAL
SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' paramet
68RISK
open ↗
Referência
CVE-2010-2321
CVE-2010-2321—
Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafted
28RISK
open ↗
Referência
CVE-2019-0186
CVE-2019-0186—
The input fields of the Apache Pluto "Chat Room" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting (XS
28RISK
open ↗
Referência
CVE-2019-0186
CVE-2019-0186—
The input fields of the Apache Pluto "Chat Room" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting (XS
28RISK
open ↗
Referência
CVE-2014-9734
CVE-2014-9734—
Directory traversal vulnerability in the Slider Revolution (revslider) plugin before 4.2 for WordPress allows remote att
28RISK
open ↗
Referência
CVE-2014-9734
CVE-2014-9734—
Directory traversal vulnerability in the Slider Revolution (revslider) plugin before 4.2 for WordPress allows remote att
28RISK
open ↗
Referência
CVE-2016-3309
CVE-2016-3309HIGHunder attackransomware
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1;
76RISK
open ↗
Referência
CVE-2016-0984
CVE-2016-0984HIGHunder attack
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and
83RISK
open ↗
Referência
CVE-2016-1002
CVE-2016-1002—
Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577
28RISK
open ↗
Referência
CVE-2015-6018
CVE-2015-6018—
The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote attac
28RISK
open ↗
Referência
CVE-2016-0964
CVE-2016-0964—
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on
28RISK
open ↗
Referência
CVE-2016-0965
CVE-2016-0965—
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on
28RISK
open ↗
Referência
CVE-2016-0967
CVE-2016-0967—
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on
28RISK
open ↗
Referência
WinFTP Server 2.3.0 - 'PASV Mode' Remote Denial of Service
CVE-2008-5666—
WinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users to cause a denial of se
43RISK
open ↗
Referência
CVE-2019-9017
CVE-2019-9017—
DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow associated with the size field for the m
28RISK
open ↗
Referência
CVE-2019-9017
CVE-2019-9017—
DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow associated with the size field for the m
28RISK
open ↗
Referência
CVE-2019-14312
CVE-2019-14312—
Aptana Jaxer 1.0.3.4547 is vulnerable to a local file inclusion vulnerability in the wikilite source code viewer. This v
43RISK
open ↗
Referência
CVE-2016-0951
CVE-2016-0951—
Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to exec
28RISK
open ↗
Referência
CVE-2016-0952
CVE-2016-0952—
Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to exec
28RISK
open ↗
Referência
CVE-2016-0953
CVE-2016-0953—
Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to exec
28RISK
open ↗
Referência
CVE-2018-8120
CVE-2018-8120HIGHunder attackransomware
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in
100RISK
open ↗
← previouspage 105 / 666next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.