Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,957cataloged exploits
32,195CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 20,003GitHub PoC 13,307VulnCheck XDB 8,182Nuclei 4,217Metasploit 3,462✓ verified onlyrecentpopularrisk
20,003 exploits
Referência
CVE-2022-23409
CVE-2022-23409—
The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in
28RISK
open ↗
Referência
CVE-2019-11415
CVE-2019-11415—
An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. A malformed login request allows remote attackers to cause
28RISK
open ↗
Referência
CVE-2019-11415
CVE-2019-11415—
An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. A malformed login request allows remote attackers to cause
28RISK
open ↗
Referência
ModSecurity < 2.5.9 - Remote Denial of Service
CVE-2009-1902—
The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of service (crash) via a m
28RISK
open ↗
Referência
CVE-2019-9581
CVE-2019-9581—
phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitra
28RISK
open ↗
Referência
Booked Scheduler 2.7.5 - Remote Command Execution (Metasploit)
CVE-2019-9581—
phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitra
28RISK
open ↗
Referência
CVE-2018-10285
CVE-2018-10285—
The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms. Since the app does not use any
28RISK
open ↗
Referência
CVE-2018-0986
CVE-2018-0986—
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a speci
35RISK
open ↗
Referência
CVE-2011-0614
CVE-2011-0614—
Buffer overflow in Adobe Audition 3.0.1 and earlier allows remote attackers to cause a denial of service (memory corrupt
28RISK
open ↗
Referência
CVE-2019-6442
CVE-2019-6442—
An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can write one byte out of bounds in ntpd via a
28RISK
open ↗
Referência
CVE-2010-2918
CVE-2010-2918—
PHP remote file inclusion vulnerability in core/include/myMailer.class.php in the Visites (com_joomla-visites) component
43RISK
open ↗
Referência
CVE-2010-2918
CVE-2010-2918—
PHP remote file inclusion vulnerability in core/include/myMailer.class.php in the Visites (com_joomla-visites) component
43RISK
open ↗
Referência
CVE-2010-4254
CVE-2010-4254—
Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic
28RISK
open ↗
Referência
CVE-2020-11027
CVE-2020-11027MEDIUM
Password reset links invalidation issue in WordPress
38RISK
open ↗
Referência
CVE-2010-1312
CVE-2010-1312—
Directory traversal vulnerability in the iJoomla News Portal (com_news_portal) component 1.5.x for Joomla! allows remote
43RISK
open ↗
Referência
CVE-2010-1312
CVE-2010-1312—
Directory traversal vulnerability in the iJoomla News Portal (com_news_portal) component 1.5.x for Joomla! allows remote
43RISK
open ↗
Referência
CVE-2010-1340
CVE-2010-1340—
Directory traversal vulnerability in jresearch.php in the J!Research (com_jresearch) component for Joomla! allows remote
43RISK
open ↗
Referência
CVE-2010-1858
CVE-2010-1858—
Directory traversal vulnerability in the SMEStorage (com_smestorage) component before 1.1 for Joomla! allows remote atta
43RISK
open ↗
Referência
CVE-2010-1858
CVE-2010-1858—
Directory traversal vulnerability in the SMEStorage (com_smestorage) component before 1.1 for Joomla! allows remote atta
43RISK
open ↗
Referência
CVE-2010-1534
CVE-2010-1534—
Directory traversal vulnerability in the Shoutbox Pro (com_shoutbox) component for Joomla! allows remote attackers to re
43RISK
open ↗
Referência
CVE-2018-0709
CVE-2018-0709—
Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow auth
28RISK
open ↗
Referência
CVE-2018-0709
CVE-2018-0709—
Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow auth
28RISK
open ↗
Referência
CVE-2018-1000001
CVE-2018-1000001—
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before th
43RISK
open ↗
Referência
CVE-2018-1000001
CVE-2018-1000001—
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before th
43RISK
open ↗
Referência
CVE-2019-7391
CVE-2019-7391—
ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/login-page.cgi CSRF.
28RISK
open ↗
Referência
CVE-2019-7391
CVE-2019-7391—
ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/login-page.cgi CSRF.
28RISK
open ↗
Referência
CVE-2010-1352
CVE-2010-1352—
Directory traversal vulnerability in the JOOFORGE Jutebox (com_jukebox) component 1.0 and 1.7 for Joomla! allows remote
43RISK
open ↗
Referência
CVE-2010-1352
CVE-2010-1352—
Directory traversal vulnerability in the JOOFORGE Jutebox (com_jukebox) component 1.0 and 1.7 for Joomla! allows remote
43RISK
open ↗
Referência
CVE-2010-1491
CVE-2010-1491—
Directory traversal vulnerability in the MMS Blog (com_mmsblog) component 2.3.0 for Joomla! allows remote attackers to r
43RISK
open ↗
Referência
CVE-2010-1491
CVE-2010-1491—
Directory traversal vulnerability in the MMS Blog (com_mmsblog) component 2.3.0 for Joomla! allows remote attackers to r
43RISK
open ↗
← previouspage 133 / 667next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.