Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,886cataloged exploits
32,153CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 19,978GitHub PoC 13,282VulnCheck XDB 8,176Nuclei 4,202Metasploit 3,462✓ verified onlyrecentpopularrisk
19,978 exploits
Referência
CVE-2016-7241
CVE-2016-7241—
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of
45RISK
open ↗
Referência
CVE-2010-2259
CVE-2010-2259—
Directory traversal vulnerability in the BF Survey (com_bfsurvey) component for Joomla! allows remote attackers to inclu
43RISK
open ↗
Referência
CVE-2013-2227
CVE-2013-2227—
GLPI 0.83.7 has Local File Inclusion in common.tabs.php.
28RISK
open ↗
Referência
No-IP DUC 2.1.7 - Remote Code Execution
CVE-2008-5297—
Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted respon
28RISK
open ↗
Referência
CVE-2018-5701
CVE-2018-5701—
In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerabi
28RISK
open ↗
Referência
CVE-2018-5701
CVE-2018-5701—
In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerabi
28RISK
open ↗
Referência
CVE-2012-3576
CVE-2012-3576—
Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows re
28RISK
open ↗
Referência
CVE-2020-25787
CVE-2020-25787—
An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. It does not validate all URLs before requesting
28RISK
open ↗
Referência
CVE-2018-8229
CVE-2018-8229—
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
45RISK
open ↗
Referência
OpenSIS 8.0 'modname' - Directory Traversal
CVE-2021-40651—
OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vulnerability in Modules.php (modname parameter), wh
43RISK
open ↗
Referência
CVE-2018-8897
CVE-2018-8897—
A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) wa
43RISK
open ↗
Referência
CVE-2018-8897
CVE-2018-8897—
A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) wa
43RISK
open ↗
Referência
CVE-2015-2433
CVE-2015-2433—
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi
43RISK
open ↗
Referência
Mambo 4.6.4 - 'Output.php' Remote File Inclusion
CVE-2008-2905—
PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and e
43RISK
open ↗
Referência
ClamAV 0.91.2 - libclamav MEW PE Buffer Overflow
CVE-2007-6335—
Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW
28RISK
open ↗
Referência
CVE-2019-11469
CVE-2019-11469—
Zoho ManageEngine Applications Manager 12 through 14 allows FaultTemplateOptions.jsp resourceid SQL injection. Subsequen
28RISK
open ↗
Referência
CVE-2019-11469
CVE-2019-11469—
Zoho ManageEngine Applications Manager 12 through 14 allows FaultTemplateOptions.jsp resourceid SQL injection. Subsequen
28RISK
open ↗
Referência
ManageEngine Applications Manager 14.0 - Authentication Bypass / Remote Command Execution (Metasploit)
CVE-2019-11469—
Zoho ManageEngine Applications Manager 12 through 14 allows FaultTemplateOptions.jsp resourceid SQL injection. Subsequen
28RISK
open ↗
Referência
CVE-2019-7670
CVE-2019-7670—
Prima Systems FlexAir, Versions 2.3.38 and prior. The application incorrectly neutralizes special elements that could mo
28RISK
open ↗
Referência
CVE-2018-1000888
CVE-2018-1000888—
PEAR Archive_Tar version 1.4.3 and earlier contains a CWE-502, CWE-915 vulnerability in the Archive_Tar class. There are
28RISK
open ↗
Referência
CVE-2013-4117
CVE-2013-4117—
Cross-site scripting (XSS) vulnerability in includes/CatGridPost.php in the Category Grid View Gallery plugin 2.3.1 for
43RISK
open ↗
Referência
CVE-2010-0157
CVE-2010-0157—
Directory traversal vulnerability in the Bible Study (com_biblestudy) component 6.1 for Joomla! allows remote attackers
43RISK
open ↗
Referência
CVE-2018-15142
CVE-2018-15142—
Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authent
28RISK
open ↗
Referência
CVE-2019-3921
CVE-2019-3921—
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via
28RISK
open ↗
Referência
CVE-2015-5130
CVE-2015-5130—
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu
35RISK
open ↗
Referência
CVE-2023-30803
CVE-2023-30803CRITICAL
Sangfor Next-Gen Application Firewall Authentication Bypass
53RISK
open ↗
Referência
Psi Jabber Client (Windows / Linux) - Remote Denial of Service
CVE-2008-6393—
PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitr
28RISK
open ↗
Referência
CVE-2018-15137
CVE-2018-15137—
CeLa Link CLR-M20 devices allow unauthorized users to upload any file (e.g., asp, aspx, cfm, html, jhtml, jsp, or shtml)
28RISK
open ↗
Referência
CVE-2017-2988
CVE-2017-2988—
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing g
28RISK
open ↗
Referência
CVE-2022-4120
CVE-2022-4120CRITICAL
Stop Spammers Security < 2022.6 - Unauthenticated PHP Object Injection
53RISK
open ↗
← previouspage 112 / 666next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.