Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,107cataloged exploits
34,679CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,692GitHub PoC 13,812VulnCheck XDB 8,460Nuclei 4,233Metasploit 3,467✓ verified onlyrecentpopularrisk
21,692 exploits
Referência
CVE-2017-14083
CVE-2017-14083—
A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to d
23RISK
open ↗
Referência
CVE-2022-31062
CVE-2022-31062MEDIUM
Unauthenticated Local File Inclusion
33RISK
open ↗
Referência
CVE-2019-6218
CVE-2019-6218—
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave
23RISK
open ↗
Referência
CVE-2009-4168
CVE-2009-4168—
Cross-site scripting (XSS) vulnerability in Roy Tanck tagcloud.swf, as used in the WP-Cumulus plugin before 1.23 for Wor
23RISK
open ↗
Referência
CVE-2016-1848
CVE-2016-1848—
QuickTime in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (m
23RISK
open ↗
Referência
CVE-2010-1062
CVE-2010-1062—
Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when magi
23RISK
open ↗
Referência
CVE-2010-1066
CVE-2010-1066—
AR Web Content Manager (AWCM) 2.1 stores sensitive information under the web root with insufficient access control, whic
23RISK
open ↗
Referência
Online Doctor Appointment System 1.0 - 'Multiple' Stored XSS
CVE-2021-25791—webappsphp
Multiple stored cross site scripting (XSS) vulnerabilities in the "Update Profile" module of Online Doctor Appointment S
23RISK
open ↗
Referência
CVE-2010-1069
CVE-2010-1069—
SQL injection vulnerability in games/game.php in ProArcadeScript allows remote attackers to execute arbitrary SQL comman
23RISK
open ↗
Referência
CVE-2021-20991
CVE-2021-20991CRITICAL
Fibaro Home Center Authenticated remote command execution
48RISK
open ↗
Referência
CVE-2021-24610
CVE-2021-24610—
TranslatePress < 2.0.9 - Authenticated Stored Cross-Site Scripting
23RISK
open ↗
Referência
CVE-2015-1059
CVE-2015-1059—
Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute
23RISK
open ↗
Referência
CVE-2015-1059
CVE-2015-1059—
Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute
23RISK
open ↗
Referência
CVE-2019-6213
CVE-2019-6213—
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3,
23RISK
open ↗
Referência
CVE-2016-7626
CVE-2016-7626—
An issue was discovered in certain Apple products. iOS before 10.2 is affected. tvOS before 10.1 is affected. watchOS be
23RISK
open ↗
Referência
CVE-2017-4915
CVE-2017-4915—
VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration fil
38RISK
open ↗
Referência
CVE-2014-1854
CVE-2014-1854—
SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3.9.5 and AdRotate Free p
23RISK
open ↗
Referência
CVE-2017-17970
CVE-2017-17970—
Multiple SQL injection vulnerabilities in Muviko 1.1 allow remote attackers to execute arbitrary SQL commands via the (1
23RISK
open ↗
Referência
CVE-2017-17970
CVE-2017-17970—
Multiple SQL injection vulnerabilities in Muviko 1.1 allow remote attackers to execute arbitrary SQL commands via the (1
23RISK
open ↗
Referência
CVE-2013-5573
CVE-2013-5573—
Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inj
23RISK
open ↗
Referência
CVE-2009-3599
CVE-2009-3599—
Cross-site scripting (XSS) vulnerability in single_winner1.php in HUBScript 1.0 allows remote attackers to inject arbitr
23RISK
open ↗
Referência✓ VexDay Proof
JBC Explorer 7.20 RC 1 - Remote Code Execution
CVE-2007-5914—webappsphp
Direct static code injection vulnerability in dirsys/modules/config/post.php in JBC Explorer 7.20 RC1 and earlier allows
23RISK
open ↗
Referência✓ VexDay Proof
Apple Mac OSX 10.5.0 (Leopard) - vpnd Remote Denial of Service (PoC)
CVE-2007-6276—dososx
The accept_connections function in the virtual private network daemon (vpnd) in Apple Mac OS X 10.5 before 10.5.4 allows
23RISK
open ↗
Referência✓ VexDay Proof
vxFtpSrv 2.0.3 - 'CWD' Remote Buffer Overflow (PoC)
CVE-2008-4452—doswindows
Buffer overflow in Cambridge Computer Corporation vxFtpSrv 2.0.3 allows remote attackers to cause a denial of service (c
23RISK
open ↗
Referência✓ VexDay Proof
verlihub 0.9.8d-RC2 - Remote Command Execution
CVE-2008-5705—remotelinux
The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlie
23RISK
open ↗
Referência
CVE-2010-1069
CVE-2010-1069—
SQL injection vulnerability in games/game.php in ProArcadeScript allows remote attackers to execute arbitrary SQL comman
23RISK
open ↗
Referência
CVE-2015-1561
CVE-2015-1561—
The escape_command function in include/Administration/corePerformance/getStats.php in Centreon (formerly Merethis Centre
23RISK
open ↗
Referência
CVE-2015-2678
CVE-2015-2678—
Multiple cross-site scripting (XSS) vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to inject
23RISK
open ↗
Referência
CVE-2015-2678
CVE-2015-2678—
Multiple cross-site scripting (XSS) vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to inject
23RISK
open ↗
Referência
CVE-2019-14339
CVE-2019-14339—
The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly res
23RISK
open ↗
← previouspage 305 / 724next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.