Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,445cataloged exploits
34,432CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,497GitHub PoC 13,627VulnCheck XDB 8,198Nuclei 4,217Metasploit 3,463✓ verified onlyrecentpopularrisk
8,198 exploits
VulnCheck XDB
local
CVE-2023-21768HIGH02 Oct 2023
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
68RISK
open ↗
VulnCheck XDB
local
CVE-2023-44976LOW01 Oct 2023
Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and possibly have unspecified
28RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-36845CRITICALunder attack01 Oct 2023
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-29357CRITICALunder attackransomware30 Sep 2023
Microsoft SharePoint Server Elevation of Privilege Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-34621CRITICAL30 Sep 2023
ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation
75RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-42793CRITICALunder attackransomware29 Sep 2023
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-24499—29 Sep 2023
Workreap theme < 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution
50RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-36845CRITICALunder attack29 Sep 2023
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-43261HIGH28 Sep 2023
An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensiti
68RISK
open ↗
VulnCheck XDB
client-side
CVE-2023-36884HIGHunder attackransomware28 Sep 2023
Windows Search Remote Code Execution Vulnerability
93RISK
open ↗
VulnCheck XDB
infoleak
CVE-2022-1386—28 Sep 2023
Fusion Builder < 3.6.2 - Unauthenticated SSRF
60RISK
open ↗
VulnCheck XDB
client-side
CVE-2023-4762HIGHunder attack27 Sep 2023
Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a
83RISK
open ↗
VulnCheck XDB
client-side
CVE-2023-43770MEDIUMunder attack27 Sep 2023
Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with craft
75RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-36845CRITICALunder attack27 Sep 2023
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-36845CRITICALunder attack26 Sep 2023
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISK
open ↗
VulnCheck XDB
local
CVE-2022-21894MEDIUM26 Sep 2023
Secure Boot Security Feature Bypass Vulnerability
33RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-29357CRITICALunder attackransomware26 Sep 2023
Microsoft SharePoint Server Elevation of Privilege Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-2523HIGH25 Sep 2023
Weaver E-Office unrestricted upload
53RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-20887CRITICALunder attack25 Sep 2023
Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-36845CRITICALunder attack24 Sep 2023
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISK
open ↗
VulnCheck XDB
local
CVE-2023-29360HIGHunder attack24 Sep 2023
Microsoft Streaming Service Elevation of Privilege Vulnerability
76RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-36846MEDIUMunder attack24 Sep 2023
Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
85RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-36844MEDIUMunder attack24 Sep 2023
Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-36847MEDIUMunder attack24 Sep 2023
Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
85RISK
open ↗
VulnCheck XDB
infoleak
CVE-2018-9995—24 Sep 2023
TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-34753HIGH22 Sep 2023
A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exist
78RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-42889—22 Sep 2023
Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults
60RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-39361CRITICAL21 Sep 2023
Unauthenticated SQL Injection in graph_view.php in Cacti
85RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-27163MEDIUM21 Sep 2023
request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baske
48RISK
open ↗
VulnCheck XDB
denial-of-service
CVE-2023-38831HIGHunder attackransomware21 Sep 2023
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISK
open ↗
← previouspage 150 / 274next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.