Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,008cataloged exploits

34,638CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,662GitHub PoC 13,743VulnCheck XDB 8,460Nuclei 4,233Metasploit 3,467✓ verified onlyrecent popular risk

8,460 exploits

VulnCheck XDB

initial-access

CVE-2017-3506HIGHunder attack15 Jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

100RISK

VulnCheck XDB

client-side

CVE-2020-0601HIGHunder attack15 Jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISK

VulnCheck XDB

remote-with-credentials

CVE-2019-2618—15 Jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

35RISK

VulnCheck XDB

initial-access

CVE-2017-10271HIGHunder attackransomware15 Jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte

100RISK

VulnCheck XDB

initial-access

CVE-2020-2555CRITICALunder attack15 Jan 2020

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Su

100RISK

VulnCheck XDB

initial-access

CVE-2018-2894—15 Jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Su

50RISK

VulnCheck XDB

initial-access

CVE-2019-2725HIGHunder attackransomware15 Jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

100RISK

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALunder attack15 Jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISK

VulnCheck XDB

initial-access

CVE-2018-2893—15 Jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

60RISK

VulnCheck XDB

remote-with-credentials

CVE-2019-19781CRITICALunder attackransomware13 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

VulnCheck XDB

infoleak

CVE-2019-19781CRITICALunder attackransomware13 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

VulnCheck XDB

initial-access

CVE-2019-19781CRITICALunder attackransomware13 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

VulnCheck XDB

infoleak

CVE-2019-19781CRITICALunder attackransomware12 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

VulnCheck XDB

initial-access

CVE-2019-19781CRITICALunder attackransomware12 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

VulnCheck XDB

initial-access

CVE-2019-19781CRITICALunder attackransomware11 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

VulnCheck XDB

initial-access

CVE-2019-19781CRITICALunder attackransomware11 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

VulnCheck XDB

infoleak

CVE-2019-19781CRITICALunder attackransomware11 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

VulnCheck XDB

infoleak

CVE-2019-19781CRITICALunder attackransomware11 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

VulnCheck XDB

initial-access

CVE-2019-19781CRITICALunder attackransomware11 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

VulnCheck XDB

initial-access

CVE-2019-19781CRITICALunder attackransomware11 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

VulnCheck XDB

infoleak

CVE-2019-19781CRITICALunder attackransomware11 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

VulnCheck XDB

initial-access

CVE-2019-19781CRITICALunder attackransomware10 Jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

VulnCheck XDB

remote-with-credentials

CVE-2019-2729CRITICAL09 Jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

85RISK

VulnCheck XDB

initial-access

CVE-2019-2725HIGHunder attackransomware08 Jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

100RISK

VulnCheck XDB

local

CVE-2019-1215HIGHunder attackransomware06 Jan 2020

An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Win

76RISK

VulnCheck XDB

initial-access

CVE-2014-6271CRITICALunder attack06 Jan 2020

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISK

VulnCheck XDB

initial-access

CVE-2019-10758CRITICALunder attack05 Jan 2020

mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse

100RISK

VulnCheck XDB

client-side

CVE-2017-11882HIGHunder attackransomware02 Jan 2020

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi

100RISK

VulnCheck XDB

client-side

CVE-2017-8759HIGHunder attack02 Jan 2020

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely vi

93RISK

VulnCheck XDB

initial-access

CVE-2019-16278CRITICALunder attack01 Jan 2020

Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote co

100RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.