Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,526cataloged exploits
34,478CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,534GitHub PoC 13,654VulnCheck XDB 8,213Nuclei 4,218Metasploit 3,464✓ verified onlyrecentpopularrisk
8,213 exploits
VulnCheck XDB
initial-access
CVE-2023-35885CRITICAL08 Jun 2023
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.
85RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-42013CRITICALunder attackransomware08 Jun 2023
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-23488CRITICAL07 Jun 2023
The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerabilit
85RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-22965CRITICALunder attack07 Jun 2023
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-25157CRITICAL06 Jun 2023
Unfiltered SQL Injection Vulnerabilities in Geoserver
85RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-2732CRITICAL06 Jun 2023
MStore API <= 3.9.2 - Authentication Bypass
75RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-22911—05 Jun 2023
A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenti
60RISK
open ↗
VulnCheck XDB
infoleak
CVE-2021-4191MEDIUM05 Jun 2023
An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Priv
70RISK
open ↗
VulnCheck XDB
client-side
CVE-2021-40444HIGHunder attackransomware05 Jun 2023
Microsoft MSHTML Remote Code Execution Vulnerability
100RISK
open ↗
VulnCheck XDB
local
CVE-2021-31956HIGHunder attack05 Jun 2023
Windows NTFS Elevation of Privilege Vulnerability
76RISK
open ↗
VulnCheck XDB
initial-access
CVE-2017-9248CRITICALunder attack05 Jun 2023
Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-46169CRITICALunder attack05 Jun 2023
Unauthenticated Command Injection
100RISK
open ↗
VulnCheck XDB
local
CVE-2023-32784HIGH04 Jun 2023
In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a work
41RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-41773HIGHunder attackransomware03 Jun 2023
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-22965CRITICALunder attack03 Jun 2023
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-42013CRITICALunder attackransomware03 Jun 2023
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-0441—02 Jun 2023
MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation
60RISK
open ↗
VulnCheck XDB
infoleak
CVE-2021-33690CRITICAL01 Jun 2023
Server-Side Request Forgery (SSRF) vulnerability has been detected in the SAP NetWeaver Development Infrastructure Compo
75RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-33246CRITICALunder attack01 Jun 2023
Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-22965CRITICALunder attack31 May 2023
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-33246CRITICALunder attack30 May 2023
Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2021-1675HIGHunder attackransomware30 May 2023
Windows Print Spooler Remote Code Execution Vulnerability
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-26134CRITICALunder attackransomware30 May 2023
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISK
open ↗
VulnCheck XDB
denial-of-service
CVE-2020-0796CRITICALunder attackransomware29 May 2023
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-32243CRITICAL29 May 2023
WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation
85RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-21839HIGHunder attack29 May 2023
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-28432HIGHunder attack27 May 2023
Minio Information Disclosure in Cluster Deployment
100RISK
open ↗
VulnCheck XDB
local
CVE-2019-2215HIGHunder attack27 May 2023
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
98RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-22947CRITICALunder attack26 May 2023
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-22963CRITICALunder attack25 May 2023
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po
100RISK
open ↗
← previouspage 162 / 274next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.