Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,886cataloged exploits
32,153CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 19,978GitHub PoC 13,282VulnCheck XDB 8,176Nuclei 4,202Metasploit 3,462✓ verified onlyrecentpopularrisk
19,978 exploits
Referência
CVE-2019-18634
CVE-2019-18634—
In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the
28RISK
open ↗
Referência
CVE-2021-26599
CVE-2021-26599—
ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection.
43RISK
open ↗
Referência
CVE-2020-6507
CVE-2020-6507—
Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap
28RISK
open ↗
Referência
CVE-2020-6507
CVE-2020-6507—
Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap
28RISK
open ↗
Referência
CVE-2018-9021
CVE-2018-9021—
An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to exec
28RISK
open ↗
Referência
CVE-2011-1568
CVE-2011-1568—
Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11
28RISK
open ↗
Referência
CVE-2017-8636
CVE-2017-8636—
Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve
45RISK
open ↗
Referência
cTorrent/DTorrent - '.torrent' Local Buffer Overflow
CVE-2009-1759—
Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent)
28RISK
open ↗
Referência
CVE-2017-7285
CVE-2017-7285—
A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remot
28RISK
open ↗
Referência
CVE-2017-7997
CVE-2017-7997—
Multiple SQL injection vulnerabilities in Gespage before 7.4.9 allow remote attackers to execute arbitrary SQL commands
28RISK
open ↗
Referência
CVE-2016-3116
CVE-2016-3116—
CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to bypass intended shell-c
28RISK
open ↗
Referência
CVE-2018-15139
CVE-2018-15139—
Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote
28RISK
open ↗
Referência
CVE-2018-15139
CVE-2018-15139—
Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote
28RISK
open ↗
Referência
CVE-2017-8740
CVE-2017-8740—
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current u
45RISK
open ↗
Referência
CVE-2017-8636
CVE-2017-8636—
Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve
45RISK
open ↗
Referência
CVE-2017-8636
CVE-2017-8636—
Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve
45RISK
open ↗
Referência
CVE-2017-8636
CVE-2017-8636—
Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve
45RISK
open ↗
Referência
CVE-2019-2215
CVE-2019-2215HIGHunder attack
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISK
open ↗
Referência
CVE-2019-2215
CVE-2019-2215HIGHunder attack
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISK
open ↗
Referência
CVE-2019-2215
CVE-2019-2215HIGHunder attack
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISK
open ↗
Referência
CVE-2019-19208
CVE-2019-19208—
Codiad Web IDE through 2.8.4 allows PHP Code injection.
28RISK
open ↗
Referência
Codiad 2.8.4 - Remote Code Execution (Authenticated) (2)
CVE-2019-19208—
Codiad Web IDE through 2.8.4 allows PHP Code injection.
28RISK
open ↗
Referência
CVE-2023-22809
CVE-2023-22809HIGH
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen
68RISK
open ↗
Referência
CVE-2025-9501
CVE-2025-9501CRITICAL
W3 Total Cache < 2.8.13 - Unauthenticated Command Injection
53RISK
open ↗
Referência
CVE-2018-20556
CVE-2018-20556—
SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary
28RISK
open ↗
Referência
CVE-2018-20556
CVE-2018-20556—
SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary
28RISK
open ↗
Referência
CVE-2019-1322
CVE-2019-1322HIGHunder attackransomware
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft W
91RISK
open ↗
Referência
CVE-2017-8683
CVE-2017-8683—
Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold a
28RISK
open ↗
Referência
CVE-2017-14627
CVE-2017-14627—
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) au
43RISK
open ↗
Referência
CVE-2017-14627
CVE-2017-14627—
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) au
43RISK
open ↗
← previouspage 109 / 666next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.