Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,445cataloged exploits
34,432CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,497GitHub PoC 13,627VulnCheck XDB 8,198Nuclei 4,217Metasploit 3,463✓ verified onlyrecentpopularrisk
8,198 exploits
VulnCheck XDB
local
CVE-2016-5195HIGHunder attack29 Dec 2023
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-51467—29 Dec 2023
Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability
60RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-51467—29 Dec 2023
Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability
60RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-27163MEDIUM29 Dec 2023
request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baske
48RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-51467—29 Dec 2023
Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-25194HIGH28 Dec 2023
Apache Kafka Connect API: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration using Kafka Connect
78RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-22986CRITICALunder attackransomware28 Dec 2023
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-27163MEDIUM28 Dec 2023
request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baske
48RISK
open ↗
VulnCheck XDB
local
CVE-2022-0847HIGHunder attack28 Dec 2023
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISK
open ↗
VulnCheck XDB
local
CVE-2023-36025HIGHunder attack28 Dec 2023
Windows SmartScreen Security Feature Bypass Vulnerability
93RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2023-24955HIGHunder attackransomware28 Dec 2023
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2019-11447—28 Dec 2023
An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce
35RISK
open ↗
VulnCheck XDB
local
CVE-2021-3156HIGHunder attack27 Dec 2023
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-43177—27 Dec 2023
CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-6553CRITICAL27 Dec 2023
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
85RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2021-4045CRITICAL26 Dec 2023
TP-LINK Tapo C200 remote code execution vulnerability
70RISK
open ↗
VulnCheck XDB
client-side
CVE-2023-38831HIGHunder attackransomware26 Dec 2023
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2018-20250HIGHunder attackransomware26 Dec 2023
In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-26360HIGHunder attack26 Dec 2023
Adobe ColdFusion Improper Access Control Arbitrary code execution
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-41892CRITICAL26 Dec 2023
Craft CMS Remote Code Execution vulnerability
85RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-32305—26 Dec 2023
WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search paramet
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-27524HIGHunder attack25 Dec 2023
Apache Superset: Session validation vulnerability when using provided default SECRET_KEY
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-23752MEDIUMunder attack24 Dec 2023
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-46604CRITICALunder attackransomware23 Dec 2023
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
100RISK
open ↗
VulnCheck XDB
local
CVE-2023-4911HIGHunder attack23 Dec 2023
Glibc: buffer overflow in ld.so leading to privilege escalation
100RISK
open ↗
VulnCheck XDB
local
CVE-2023-0386HIGHunder attack23 Dec 2023
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa
86RISK
open ↗
VulnCheck XDB
initial-access
CVE-2016-4437CRITICALunder attack22 Dec 2023
Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2021-43798HIGHunder attack21 Dec 2023
Grafana path traversal
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2009-3103—20 Dec 2023
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window
60RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-27163MEDIUM20 Dec 2023
request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baske
48RISK
open ↗
← previouspage 141 / 274next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.