Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,445cataloged exploits
34,432CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,497GitHub PoC 13,627VulnCheck XDB 8,198Nuclei 4,217Metasploit 3,463✓ verified onlyrecentpopularrisk
8,198 exploits
VulnCheck XDB
infoleak
CVE-2023-23752MEDIUMunder attack20 Dec 2023
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-23752MEDIUMunder attack19 Dec 2023
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2023-4863HIGHunder attack19 Dec 2023
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to
93RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-11651CRITICALunder attack18 Dec 2023
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-12124—18 Dec 2023
A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.1
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-23752MEDIUMunder attack18 Dec 2023
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-49070—17 Dec 2023
Pre-auth RCE in Apache Ofbiz 18.12.09 due to XML-RPC still present
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-50164—17 Dec 2023
Apache Struts: File upload component had a directory traversal vulnerability
45RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-4966CRITICALunder attackransomware16 Dec 2023
Unauthenticated sensitive information disclosure
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-46604CRITICALunder attackransomware16 Dec 2023
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-50164—15 Dec 2023
Apache Struts: File upload component had a directory traversal vulnerability
45RISK
open ↗
VulnCheck XDB
initial-access
CVE-2017-1000486CRITICALunder attack15 Dec 2023
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
100RISK
open ↗
VulnCheck XDB
local
CVE-2016-5195HIGHunder attack15 Dec 2023
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-32315HIGHunder attack15 Dec 2023
Openfire administration console authentication bypass
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-49070—14 Dec 2023
Pre-auth RCE in Apache Ofbiz 18.12.09 due to XML-RPC still present
60RISK
open ↗
VulnCheck XDB
local
CVE-2023-2640HIGH13 Dec 2023
On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlay
61RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-23752MEDIUMunder attack13 Dec 2023
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-6553CRITICAL13 Dec 2023
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
85RISK
open ↗
VulnCheck XDB
local
CVE-2023-32629HIGH13 Dec 2023
Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks
56RISK
open ↗
VulnCheck XDB
initial-access
CVE-2019-15107CRITICALunder attackransomware12 Dec 2023
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2023-38831HIGHunder attackransomware12 Dec 2023
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISK
open ↗
VulnCheck XDB
local
CVE-2020-1472MEDIUMunder attackransomware12 Dec 2023
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2021-40438CRITICALunder attackransomware12 Dec 2023
mod_proxy SSRF
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-23752MEDIUMunder attack11 Dec 2023
[20230201] - Core - Improper access check in webservice endpoints
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-20198CRITICALunder attack11 Dec 2023
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS
100RISK
open ↗
VulnCheck XDB
denial-of-service
CVE-2023-44487HIGHunder attack11 Dec 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISK
open ↗
VulnCheck XDB
local
CVE-2021-3560HIGHunder attack11 Dec 2023
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-38646—10 Dec 2023
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISK
open ↗
VulnCheck XDB
client-side
CVE-2020-0674HIGHunder attack10 Dec 2023
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet
93RISK
open ↗
VulnCheck XDB
local
CVE-2023-4911HIGHunder attack10 Dec 2023
Glibc: buffer overflow in ld.so leading to privilege escalation
100RISK
open ↗
← previouspage 142 / 274next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.