Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,526cataloged exploits
34,478CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,534GitHub PoC 13,654VulnCheck XDB 8,213Nuclei 4,218Metasploit 3,464✓ verified onlyrecentpopularrisk
8,213 exploits
VulnCheck XDB
initial-access
CVE-2023-27350CRITICALunder attackransomware22 Apr 2023
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-1609CRITICAL22 Apr 2023
The School Management < 9.9.7 - Unauthenticated RCE via REST api
75RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-27350CRITICALunder attackransomware21 Apr 2023
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-1454MEDIUM21 Apr 2023
jeecg-boot qurestSql sql injection
60RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-27350CRITICALunder attackransomware21 Apr 2023
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-17453—20 Apr 2023
WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter.
43RISK
open ↗
VulnCheck XDB
local
CVE-2023-21768HIGH20 Apr 2023
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
68RISK
open ↗
VulnCheck XDB
local
CVE-2023-0386HIGHunder attack20 Apr 2023
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa
86RISK
open ↗
VulnCheck XDB
infoleak
CVE-2021-41773HIGHunder attackransomware20 Apr 2023
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISK
open ↗
VulnCheck XDB
denial-of-service
CVE-2020-3992CRITICALunder attackransomware19 Apr 2023
OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2021-31589—19 Apr 2023
A cross-site scripting (XSS) vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base Sof
43RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-42889—18 Apr 2023
Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-22963CRITICALunder attack17 Apr 2023
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2023-21716CRITICAL16 Apr 2023
Microsoft Word Remote Code Execution Vulnerability
70RISK
open ↗
VulnCheck XDB
denial-of-service
CVE-2021-44228CRITICALunder attackransomware15 Apr 2023
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-19518—15 Apr 2023
University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh c
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-25135CRITICAL15 Apr 2023
vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP reques
68RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-21839HIGHunder attack15 Apr 2023
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-46169CRITICALunder attack13 Apr 2023
Unauthenticated Command Injection
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-1454MEDIUM13 Apr 2023
jeecg-boot qurestSql sql injection
60RISK
open ↗
VulnCheck XDB
infoleak
CVE-2021-35250HIGH13 Apr 2023
Directory Transversal Vulnerability in Serv-U 15.3
61RISK
open ↗
VulnCheck XDB
local
CVE-2022-38181HIGHunder attack13 Apr 2023
The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishan
76RISK
open ↗
VulnCheck XDB
local
CVE-2022-38181HIGHunder attack13 Apr 2023
The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishan
76RISK
open ↗
VulnCheck XDB
infoleak
CVE-2023-28432HIGHunder attack13 Apr 2023
Minio Information Disclosure in Cluster Deployment
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-41800HIGH12 Apr 2023
Appliance mode iControl REST vulnerability
68RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-1388CRITICALunder attackransomware12 Apr 2023
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2023-1454MEDIUM11 Apr 2023
jeecg-boot qurestSql sql injection
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-46169CRITICALunder attack11 Apr 2023
Unauthenticated Command Injection
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALunder attack11 Apr 2023
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2022-22963CRITICALunder attack10 Apr 2023
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po
100RISK
open ↗
← previouspage 166 / 274next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.