Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,652cataloged exploits

34,545CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,581GitHub PoC 13,708VulnCheck XDB 8,225Nuclei 4,228Metasploit 3,467✓ verified onlyrecent popular risk

21,554 exploits

Referência

CVE-2014-6436

CVE-2014-6436—

Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to

35RISK

Referência

CVE-2017-0121

CVE-2017-0121—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server

35RISK

Referência

CVE-2012-0266

CVE-2012-0266—

Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitr

50RISK

Referência

CVE-2025-34112

CVE-2025-34112CRITICAL

Riverbed SteelCentral NetProfiler / NetExpress 10.8.7 RCE

63RISK

Referência✓ VexDay Proof

Microsoft Office - MSODataSourceControl COM-object Buffer Overflow (PoC)

CVE-2007-3282—doswindows

Buffer overflow in the Microsoft Office MSODataSourceControl ActiveX object allows remote attackers to cause a denial of

35RISK

Referência✓ VexDay Proof

iziContents rc6 - Local/Remote File Inclusion

CVE-2007-5054—webappsphp

Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute ar

35RISK

Referência✓ VexDay Proof

PHP wcms XT 0.0.7 - Multiple Remote File Inclusions

CVE-2007-5185—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpWCMS XT 0.0.7 BETA and earlier allow remote attackers to execut

35RISK

Referência

CVE-2009-3808

CVE-2009-3808—

MixSense DJ Studio 1.0.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute

23RISK

Referência

CVE-2009-3835

CVE-2009-3835—

SQL injection vulnerability in the JShop (com_jshop) component for Joomla! allows remote attackers to execute arbitrary

23RISK

Referência

CVE-2017-0088

CVE-2017-0088—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

35RISK

Referência

CVE-2016-10074

CVE-2016-10074—

The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass

35RISK

Referência

CVE-2019-0841

CVE-2019-0841HIGHunder attackransomware

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

98RISK

Referência

CVE-2019-0841

CVE-2019-0841HIGHunder attackransomware

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

98RISK

Referência

CVE-2019-0841

CVE-2019-0841HIGHunder attackransomware

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

98RISK

Referência

CVE-2019-0841

CVE-2019-0841HIGHunder attackransomware

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

98RISK

Referência

CVE-2019-0841

CVE-2019-0841HIGHunder attackransomware

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

98RISK

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.10 - Multiple Vulnerabilities

CVE-2008-0382—webappsphp

Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via

35RISK

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.10 - Remote Code Execution

CVE-2008-0382—webappsphp

Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via

35RISK

Referência

CVE-2016-0063

CVE-2016-0063—

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service

35RISK

Referência

CVE-2015-4455

CVE-2015-4455—

Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin

50RISK

Referência

CVE-2010-3407

CVE-2010-3407—

Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server i

50RISK

Referência

CVE-2016-2389

CVE-2016-2389—

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMI

50RISK

Referência

CVE-2016-2389

CVE-2016-2389—

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMI

50RISK

Referência

CVE-2009-2261

CVE-2009-2261—

PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .z

50RISK

Referência✓ VexDay Proof

Scout Portal Toolkit 1.4.0 - 'ParentId' SQL Injection

CVE-2005-4195—webappsphp

Multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to execute

23RISK

Referência

CVE-2021-3317

CVE-2021-3317—

KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on the original value of

35RISK

Referência

CVE-2011-0966

CVE-2011-0966—

Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Serv

35RISK

Referência✓ VexDay Proof

Creative Software AutoUpdate Engine - ActiveX Stack Overflow

CVE-2008-0955—remotewindows

Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote atta

50RISK

Referência✓ VexDay Proof

VideoLAN VLC Media Player < 0.9.6 - '.rt' Local Stack Buffer Overflow

CVE-2008-5036—localwindows

Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execu

50RISK

Referência

CVE-2016-0122

CVE-2016-0122—

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Compa

35RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.