Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,107cataloged exploits
34,679CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,692GitHub PoC 13,812VulnCheck XDB 8,460Nuclei 4,233Metasploit 3,467✓ verified onlyrecentpopularrisk
8,460 exploits
VulnCheck XDB
client-side
CVE-2018-4878HIGHunder attackransomware17 Oct 2018
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to
93RISK
open ↗
VulnCheck XDB
remote-with-credentials
CVE-2018-16509—15 Oct 2018
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handlin
60RISK
open ↗
VulnCheck XDB
infoleak
CVE-2018-14847CRITICALunder attack13 Oct 2018
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated
100RISK
open ↗
VulnCheck XDB
local
CVE-2018-14634HIGHunder attack08 Oct 2018
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with a
76RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-2893—07 Oct 2018
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-2894—07 Oct 2018
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Su
50RISK
open ↗
VulnCheck XDB
initial-access
CVE-2016-1555CRITICALunder attack06 Oct 2018
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-14847CRITICALunder attack02 Oct 2018
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-7600CRITICALunder attackransomware02 Oct 2018
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RISK
open ↗
VulnCheck XDB
local
CVE-2014-3153HIGHunder attack27 Sep 2018
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two diff
98RISK
open ↗
VulnCheck XDB
initial-access
CVE-2017-8046—26 Sep 2018
Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions pri
60RISK
open ↗
VulnCheck XDB
infoleak
CVE-2018-9995—23 Sep 2018
TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L
60RISK
open ↗
VulnCheck XDB
info-leak
CVE-2017-6079—22 Sep 2018
The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-def
35RISK
open ↗
VulnCheck XDB
local
CVE-2016-7255HIGHunder attack13 Sep 2018
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,
93RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-6961HIGHunder attack12 Sep 2018
VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web U
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-14847CRITICALunder attack11 Sep 2018
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-2628CRITICALunder attack04 Sep 2018
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2017-1000486CRITICALunder attack03 Sep 2018
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-11776HIGHunder attack29 Aug 2018
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-11776HIGHunder attack28 Aug 2018
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-11776HIGHunder attack28 Aug 2018
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2017-9554—28 Aug 2018
An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allo
60RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-11776HIGHunder attack27 Aug 2018
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-11776HIGHunder attack25 Aug 2018
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-11776HIGHunder attack25 Aug 2018
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-11776HIGHunder attack25 Aug 2018
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN
100RISK
open ↗
VulnCheck XDB
client-side
CVE-2018-8414HIGHunder attack24 Aug 2018
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows
93RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-11776HIGHunder attack24 Aug 2018
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-11776HIGHunder attack24 Aug 2018
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2018-11776HIGHunder attack23 Aug 2018
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN
100RISK
open ↗
← previouspage 268 / 282next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.