Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,957cataloged exploits
32,195CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 20,003GitHub PoC 13,307VulnCheck XDB 8,182Nuclei 4,217Metasploit 3,462✓ verified onlyrecentpopularrisk
20,003 exploits
Referência
CVE-2013-1601
CVE-2013-1601—
An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processin
28RISK
open ↗
Referência
CVE-2015-2844
CVE-2015-2844—
The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1420434000 allows remote attackers to execute arb
28RISK
open ↗
Referência
CVE-2015-2844
CVE-2015-2844—
The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1420434000 allows remote attackers to execute arb
28RISK
open ↗
Referência
CVE-2011-2577
CVE-2011-2577—
Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, wh
28RISK
open ↗
Referência
CVE-2017-14095
CVE-2017-14095—
A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to pe
28RISK
open ↗
Referência
Digital Data Communications - 'RtspVaPgCtrl' Class Remote Buffer Overflow
CVE-2008-0380—
Buffer overflow in the Digital Data Communications RtspVaPgCtrl ActiveX control (RtspVapgDecoder.dll 1.1.0.29) allows re
28RISK
open ↗
Referência
Simplog 0.9.2 - 's' Remote Command Execution
CVE-2006-1776—
PHP remote file inclusion vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote atta
28RISK
open ↗
Referência
CVE-2014-1767
CVE-2014-1767—
Double free vulnerability in the Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Wind
28RISK
open ↗
Referência
CVE-2014-1767
CVE-2014-1767—
Double free vulnerability in the Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Wind
28RISK
open ↗
Referência
CVE-2014-9611
CVE-2014-9611—
Netsweeper before 4.0.5 allows remote attackers to bypass authentication and create arbitrary accounts and policies via
28RISK
open ↗
Referência
CVE-2014-9611
CVE-2014-9611—
Netsweeper before 4.0.5 allows remote attackers to bypass authentication and create arbitrary accounts and policies via
28RISK
open ↗
Referência
CVE-2017-0086
CVE-2017-0086—
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers
35RISK
open ↗
Referência
CVE-2016-1757
CVE-2016-1757—
Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code
28RISK
open ↗
Referência
CVE-2018-7284
CVE-2018-7284—
A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Ce
35RISK
open ↗
Referência
CVE-2016-1757
CVE-2016-1757—
Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code
28RISK
open ↗
Referência
CVE-2020-36847
CVE-2020-36847CRITICAL
Simple File List < 4.2.3 - Remote Code Execution
68RISK
open ↗
Referência
CVE-2019-16667
CVE-2019-16667—
diag_command.php in pfSense 2.4.4-p3 allows CSRF via the txtCommand or txtRecallBuffer field, as demonstrated by executi
35RISK
open ↗
Referência
CVE-2021-42840
CVE-2021-42840—
SuiteCRM before 7.11.19 allows remote code execution via the system settings Log File Name setting. In certain circumsta
50RISK
open ↗
Referência
CVE-2022-24124
CVE-2022-24124—
The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as d
50RISK
open ↗
Referência
CVE-2013-6881
CVE-2013-6881—
CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to execute arbitrary commands vi
28RISK
open ↗
Referência
CVE-2013-6881
CVE-2013-6881—
CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to execute arbitrary commands vi
28RISK
open ↗
Referência
CVE-2017-6995
CVE-2017-6995—
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO
23RISK
open ↗
Referência
CVE-2017-6996
CVE-2017-6996—
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO
23RISK
open ↗
Referência
CVE-2017-6998
CVE-2017-6998—
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO
23RISK
open ↗
Referência
CVE-2008-0506
CVE-2008-0506—
include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing
50RISK
open ↗
Referência
Adult Script 1.6 - Unauthorized Administrative Access
CVE-2007-6414—
admin/administrator.php in Adult Script 1.6 and earlier sends a redirect to the web browser but does not exit, which all
23RISK
open ↗
Referência
CVE-2009-3312
CVE-2009-3312—
PHP remote file inclusion vulnerability in php/init.poll.php in phpPollScript 1.3 and earlier, when register_globals is
23RISK
open ↗
Referência
CVE-2019-8923
CVE-2019-8923—
XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discont
23RISK
open ↗
Referência
CVE-2020-13152
CVE-2020-13152—
A remote user can create a specially crafted M3U file, media playlist file that when loaded by the target user, will tri
23RISK
open ↗
Referência
CVE-2018-5319
CVE-2018-5319—
RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request.
28RISK
open ↗
← previouspage 136 / 667next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.