Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,231cataloged exploits
35,420CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,266GitHub PoC 14,131VulnCheck XDB 8,635Nuclei 4,274Metasploit 3,474✓ verified onlyrecentpopularrisk
22,233 exploits
Referência
CVE-2014-1903
CVE-2014-1903—
admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12
50RISK
open ↗
Referência
CVE-2016-8655
CVE-2016-8655—
Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau
43RISK
open ↗
Referência
CVE-2016-8655
CVE-2016-8655—
Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau
43RISK
open ↗
Referência
CVE-2016-8655
CVE-2016-8655—
Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau
43RISK
open ↗
Referência
CVE-2009-2883
CVE-2009-2883—
SQL injection vulnerability in admin/login.php in SaphpLesson 4.0, when magic_quotes_gpc is disabled, allows remote atta
23RISK
open ↗
Referência
CVE-2011-1761
CVE-2011-1761—
Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions in src/load_abc.cpp in l
28RISK
open ↗
Referência
CVE-2017-6320
CVE-2017-6320—
A remote command injection vulnerability exists in the Barracuda Load Balancer product line (confirmed on v5.4.0.004 (20
28RISK
open ↗
Referência
CVE-2017-17867
CVE-2017-17867—
Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying th
28RISK
open ↗
Referência
CVE-2017-7397
CVE-2017-7397—
BackBox Linux 4.6 allows remote attackers to cause a denial of service (ksoftirqd CPU consumption) via a flood of packet
28RISK
open ↗
Referência
CVE-2019-6208
CVE-2019-6208—
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Moja
23RISK
open ↗
Referência
CVE-2015-2097
CVE-2015-2097—
Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary c
28RISK
open ↗
Referência
CVE-2009-2891
CVE-2009-2891—
SQL injection vulnerability in list.php in PHP Scripts Now Riddles allows remote attackers to execute arbitrary SQL comm
23RISK
open ↗
Referência
CVE-2021-27973
CVE-2021-27973—
SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages.
28RISK
open ↗
Referência
CVE-2013-6221
CVE-2013-6221—
Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoP
60RISK
open ↗
Referência
CVE-2018-12053
CVE-2018-12053—
Arbitrary File Deletion exists in PHP Scripts Mall Schools Alert Management Script via the img parameter in delete_img.p
28RISK
open ↗
Referência
CVE-2010-2310
CVE-2010-2310—
SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request.
28RISK
open ↗
Referência
CVE-2009-2254
CVE-2009-2254—
Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/sqlpatch.php, which allows
28RISK
open ↗
Referência
CVE-2009-4816
CVE-2009-4816—
Directory traversal vulnerability in api/download_checker.php in MegaLab The Uploader 2.0 allows remote attackers to rea
23RISK
open ↗
Referência
CVE-2018-10123
CVE-2018-10123—
p910nd on Inteno IOPSYS 2.0 through 4.2.0 allows remote attackers to read, or append data to, arbitrary files via reques
28RISK
open ↗
Referência
CVE-2015-5452
CVE-2015-5452—
SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitr
23RISK
open ↗
Referência
CVE-2014-8656
CVE-2014-8656—
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH have a d
28RISK
open ↗
Referência
CVE-2014-8656
CVE-2014-8656—
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH have a d
28RISK
open ↗
Referência
CVE-2010-4259
CVE-2010-4259—
Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application cras
28RISK
open ↗
Referência
CVE-2018-9302
CVE-2018-9302—
SSRF (Server Side Request Forgery) in /assets/lib/fuc.js.php in Cockpit 0.4.4 through 0.5.5 allows remote attackers to r
23RISK
open ↗
Referência
CVE-2014-1907
CVE-2014-1907—
Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for Wor
28RISK
open ↗
Referência
CVE-2015-6567
CVE-2015-6567—
Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/
28RISK
open ↗
Referência
CVE-2015-6567
CVE-2015-6567—
Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/
28RISK
open ↗
Referência
CVE-2017-3006
CVE-2017-3006—
Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions durin
28RISK
open ↗
Referência
CVE-2013-6234
CVE-2013-6234—
Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users
23RISK
open ↗
Referência
CVE-2018-6228
CVE-2018-6228—
A SQL injection vulnerability in a Trend Micro Email Encryption Gateway 5.5 policy script could allow an attacker to exe
28RISK
open ↗
← previouspage 433 / 742next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.