Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,902cataloged exploits
34,597CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,624GitHub PoC 13,727VulnCheck XDB 8,410Nuclei 4,231Metasploit 3,467✓ verified onlyrecentpopularrisk
24,443 exploits
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3161—remotewindows10 Sep 2013
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (mem
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3153—remotewindows10 Sep 2013
Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3152—remotewindows10 Sep 2013
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory co
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3151—remotewindows10 Sep 2013
Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3150—remotewindows10 Sep 2013
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3149—remotewindows10 Sep 2013
Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memo
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3143—remotewindows10 Sep 2013
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (mem
35RISK
open ↗
Exploit-DB✓ VexDay Proof
HP SiteScope (Windows) - Remote Code Execution (Metasploit)
CVE-2013-2367—remotewindows10 Sep 2013
Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execu
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3163HIGHunder attackremotewindows10 Sep 2013
Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service
100RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-4015—remotewindows10 Sep 2013
Microsoft Internet Explorer 6 through 10 allows local users to bypass the elevation policy check in the (1) Protected Mo
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Sophos Web Protection Appliance - Multiple Vulnerabilities
CVE-2013-4984—webappslinux09 Sep 2013
The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1
38RISK
open ↗
Exploit-DB
Moodle 2.3.8/2.4.5 - Multiple Vulnerabilities
CVE-2013-4341—webappsphp09 Sep 2013
Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, an
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Sophos Web Protection Appliance - Multiple Vulnerabilities
CVE-2013-4983—webappslinux09 Sep 2013
The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Watchguard Server Center - Local Privilege Escalation
CVE-2013-5701—localwindows08 Sep 2013
Multiple untrusted search path vulnerabilities in (1) Watchguard Log Collector (wlcollector.exe) and (2) Watchguard WebB
23RISK
open ↗
Exploit-DB✓ VexDay Proof
IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) - Missing DLL (Metasploit)
CVE-2012-5381—localwindows06 Sep 2013
Untrusted search path vulnerability in the installation functionality in PHP 5.3.17, when installed in the top-level C:\
23RISK
open ↗
Exploit-DB✓ VexDay Proof
IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) - Missing DLL (Metasploit)
CVE-2012-5382—localwindows06 Sep 2013
Untrusted search path vulnerability in the installation functionality in Zend Server 5.6.0 SP4, when installed in the to
23RISK
open ↗
Exploit-DB✓ VexDay Proof
IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) - Missing DLL (Metasploit)
CVE-2012-5383—localwindows06 Sep 2013
Untrusted search path vulnerability in the installation functionality in Oracle MySQL 5.5.28, when installed in the top-
23RISK
open ↗
Exploit-DB✓ VexDay Proof
IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) - Missing DLL (Metasploit)
CVE-2012-5377—localwindows06 Sep 2013
Untrusted search path vulnerability in the installation functionality in ActivePerl 5.16.1.1601, when installed in the t
23RISK
open ↗
Exploit-DB✓ VexDay Proof
IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) - Missing DLL (Metasploit)
CVE-2012-5378—localwindows06 Sep 2013
Untrusted search path vulnerability in the installation functionality in ActiveTcl 8.5.12, when installed in the top-lev
23RISK
open ↗
Exploit-DB✓ VexDay Proof
IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) - Missing DLL (Metasploit)
CVE-2012-5379HIGHlocalwindows06 Sep 2013
Untrusted search path vulnerability in the installation functionality in ActivePython 3.2.2.3, when installed in the top
41RISK
open ↗
Exploit-DB✓ VexDay Proof
IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) - Missing DLL (Metasploit)
CVE-2012-5380MEDIUMlocalwindows06 Sep 2013
Untrusted search path vulnerability in the installation functionality in Ruby 1.9.3-p194, when installed in the top-leve
33RISK
open ↗
Exploit-DB✓ VexDay Proof
KingView 6.53 - 'KChartXY' ActiveX File Creation / Overwrite
CVE-2013-6128—localwindows04 Sep 2013
The KCHARTXYLib.KChartXY ActiveX control in KChartXY.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 doe
23RISK
open ↗
Exploit-DB
Apple Safari 6.0.1 for iOS 6.0 / Apple Mac OSX 10.7/8 - Heap Buffer Overflow
CVE-2012-3748—remoteios04 Sep 2013
Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote attackers to execute arbitrary
28RISK
open ↗
Exploit-DB✓ VexDay Proof
KingView 6.53 - 'SuperGrid' Insecure ActiveX Control
CVE-2013-6127—localwindows04 Sep 2013
The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CFlatMarkupPointer Use-After-Free (MS13-059) (Metasploit)
CVE-2013-3184—remotewindows04 Sep 2013
Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service
50RISK
open ↗
Exploit-DB✓ VexDay Proof
GOMPlayer 2.2.53.5169 - '.wav' Crash (PoC)
CVE-2013-5716—doswindows04 Sep 2013
Gretech GOM Media Player 2.2.53.5169 and possibly earlier allows remote attackers to cause a denial of service (applicat
23RISK
open ↗
Exploit-DB✓ VexDay Proof
HP LoadRunner - lrFileIOService ActiveX WriteFileString Remote Code Execution (Metasploit)
CVE-2013-4798—remotewindows04 Sep 2013
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown ve
50RISK
open ↗
Exploit-DB
Zoom Telephonics ADSL Modem/Router - Multiple Vulnerabilities
CVE-2013-5622—webappshardware03 Sep 2013
20RISK
open ↗
Exploit-DB
Oracle Java lookUpByteBI - Heap Buffer Overflow
CVE-2013-2470—doswindows03 Sep 2013
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 U
28RISK
open ↗
Exploit-DB
Zoom Telephonics ADSL Modem/Router - Multiple Vulnerabilities
CVE-2013-5630—webappshardware03 Sep 2013
20RISK
open ↗
← previouspage 247 / 815next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.