Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,886cataloged exploits
32,153CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 19,978GitHub PoC 13,282VulnCheck XDB 8,176Nuclei 4,202Metasploit 3,462✓ verified onlyrecentpopularrisk
19,978 exploits
Referência
CVE-2013-7137
CVE-2013-7137—
The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and
28RISK
open ↗
Referência
Sony Network Camera SNC-P5 1.0 - ActiveX viewer Heap Overflow (PoC)
CVE-2007-3488—
Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5
28RISK
open ↗
Referência
XnView 1.93.6 - '.taac' Local Buffer Overflow
CVE-2008-2427—
Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD a
28RISK
open ↗
Referência
CVE-2017-14016
CVE-2017-14016—
A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The applicati
43RISK
open ↗
Referência
iManage CMS 4.0.12 - 'absolute_path' Remote File Inclusion
CVE-2006-3771—
Multiple PHP remote file inclusion vulnerabilities in component.php in iManage CMS 4.0.12 and earlier allow remote attac
28RISK
open ↗
Referência
CVE-2018-15442
CVE-2018-15442HIGH
Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability
61RISK
open ↗
Referência
CVE-2018-15442
CVE-2018-15442HIGH
Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability
61RISK
open ↗
Referência
CVE-2014-0787
CVE-2014-0787—
WellinTech KingSCADA Stack-based Buffer Overflow
53RISK
open ↗
Referência
CVE-2010-1658
CVE-2010-1658—
Directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboard) component 1.3 for Joomla! allows remo
43RISK
open ↗
Referência
CVE-2010-1658
CVE-2010-1658—
Directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboard) component 1.3 for Joomla! allows remo
43RISK
open ↗
Referência
CVE-2017-12785
CVE-2017-12785—
The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on Novi
28RISK
open ↗
Referência
CVE-2020-28351
CVE-2020-28351—
The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a r
43RISK
open ↗
Referência
RiteCMS 2.2.1 - Authenticated Remote Code Execution
CVE-2020-23934—
An issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system commands by uploading a php
28RISK
open ↗
Referência
CVE-2017-14097
CVE-2017-14097—
An improper access control vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below coul
28RISK
open ↗
Referência
CVE-2019-9491
CVE-2019-9491—
Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to
28RISK
open ↗
Referência
CVE-2017-0060
CVE-2017-0060—
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; W
28RISK
open ↗
Referência
CVE-2020-0986
CVE-2020-0986HIGHunder attack
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka '
76RISK
open ↗
Referência
CVE-2018-11311
CVE-2018-11311—
A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' in mySCADA myPRO 7 allows remote attack
28RISK
open ↗
Referência
CVE-2022-31125
CVE-2022-31125CRITICAL
Authentication Bypass in Roxy-wi
53RISK
open ↗
Referência
CVE-2020-23935
CVE-2020-23935—
Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'# && Password: (
28RISK
open ↗
Referência
Joomla! Component Flash Tree Gallery 1.0 - Remote File Inclusion
CVE-2008-6482—
PHP remote file inclusion vulnerability in admin.treeg.php in the Flash Tree Gallery (com_treeg) component 1.0 for Jooml
28RISK
open ↗
Referência
PHPBB2 MODificat 0.2.0 - 'functions.php' Remote File Inclusion
CVE-2007-0656—
PHP remote file inclusion vulnerability in includes/functions.php in phpBB2-MODificat 0.2.0 and earlier allows remote at
28RISK
open ↗
Referência
CVE-2020-8639
CVE-2020-8639—
An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute ar
28RISK
open ↗
Referência
CVE-2018-1042
CVE-2018-1042—
Moodle 3.x has Server Side Request Forgery in the filepicker.
28RISK
open ↗
Referência
CVE-2025-2775
CVE-2025-2775CRITICALunder attack
SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection
100RISK
open ↗
Referência
F-Prot AntiVirus 4.6.6 - CHM Heap Overflow (PoC)
CVE-2006-6293—
Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to exec
28RISK
open ↗
Referência
CVE-2019-0571
CVE-2019-0571—
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,
28RISK
open ↗
Referência
CVE-2011-0518
CVE-2011-0518—
Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, allo
43RISK
open ↗
Referência
CVE-2012-3575
CVE-2012-3575—
Unrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress allows remote attacke
28RISK
open ↗
Referência
CVE-2010-2128
CVE-2010-2128—
Directory traversal vulnerability in the JE Quotation Form (com_jequoteform) component 1.0b1 for Joomla! allows remote a
43RISK
open ↗
← previouspage 120 / 666next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.