Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,449cataloged exploits
35,552CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,367GitHub PoC 14,225VulnCheck XDB 8,649Nuclei 4,283Metasploit 3,474✓ verified onlyrecentpopularrisk
22,367 exploits
Referência
CVE-2011-4453
CVE-2011-4453—
The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitra
50RISK
open ↗
Referência
CVE-2009-2442
CVE-2009-2442—
Cross-site scripting (XSS) vulnerability in public/index.php in Linea21 1.2.1 allows remote attackers to inject arbitrar
23RISK
open ↗
Referência
CVE-2014-9118
CVE-2014-9118—
The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary comm
35RISK
open ↗
Referência
CVE-2014-9118
CVE-2014-9118—
The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary comm
35RISK
open ↗
Referência
CVE-2018-0840
CVE-2018-0840—
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server
35RISK
open ↗
Referência
CVE-2015-7007
CVE-2015-7007—
Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement f
50RISK
open ↗
Referência
CVE-2015-7007
CVE-2015-7007—
Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement f
50RISK
open ↗
Referência
CVE-2017-17932
CVE-2017-17932—
A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow
50RISK
open ↗
Referência
CVE-2017-17932
CVE-2017-17932—
A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow
50RISK
open ↗
Referência
CVE-2017-17932
CVE-2017-17932—
A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow
50RISK
open ↗
Referência
CVE-2013-0742
CVE-2013-0742—
Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial
35RISK
open ↗
Referência
CVE-2010-2343
CVE-2010-2343—
Stack-based buffer overflow in D.R. Software Audio Converter 8.1, 2007, and 8.05 allows remote attackers to execute arbi
50RISK
open ↗
Referência
CVE-2018-17379
CVE-2018-17379—
SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filter_order_Dir or filter_order paramete
23RISK
open ↗
Referência
CVE-2018-17379
CVE-2018-17379—
SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filter_order_Dir or filter_order paramete
23RISK
open ↗
Referência✓ VexDay Proof
SimpCMS - 'keyword' SQL Injection
CVE-2007-4953—webappsphp
SQL injection vulnerability in index.php in SimpCMS allows remote attackers to execute arbitrary SQL commands via the ke
23RISK
open ↗
Referência
CVE-2023-24078
CVE-2023-24078HIGH
Real Time Logic FuguHub v8.1 and earlier was discovered to contain a remote code execution (RCE) vulnerability via the c
53RISK
open ↗
Referência
CVE-2008-3922
CVE-2008-3922—
awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences
50RISK
open ↗
Referência
CVE-2019-9760
CVE-2019-9760—
FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-cont
50RISK
open ↗
Referência
CVE-2016-7434
CVE-2016-7434—
The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a craf
35RISK
open ↗
Referência
CVE-2021-41381
CVE-2021-41381—
Payara Micro Community 5.2021.6 and below allows Directory Traversal.
50RISK
open ↗
Referência
CVE-2021-41381
CVE-2021-41381—
Payara Micro Community 5.2021.6 and below allows Directory Traversal.
50RISK
open ↗
Referência✓ VexDay Proof
Mini-stream Ripper 3.0.1.1 - '.asx' 'HREF' Local Buffer Overflow
CVE-2009-1641—localwindows
Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via
50RISK
open ↗
Referência
CVE-2019-11447
CVE-2019-11447—
An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce
35RISK
open ↗
Referência
CVE-2019-11447
CVE-2019-11447—
An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce
35RISK
open ↗
Referência✓ VexDay Proof
KwsPHP 1.0 Member_Space Module - SQL Injection
CVE-2007-4956—webappsphp
Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) th
23RISK
open ↗
Referência✓ VexDay Proof
KwsPHP 1.0 stats Module - SQL Injection
CVE-2007-4956—webappsphp
Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) th
23RISK
open ↗
Referência
CVE-2009-2484
CVE-2009-2484—
Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.
50RISK
open ↗
Referência
CVE-2020-1054
CVE-2020-1054HIGHunder attack
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o
98RISK
open ↗
Referência
CVE-2009-3430
CVE-2009-3430—
SQL injection vulnerability in login.php in Allomani Mobile 2.5 allows remote attackers to execute arbitrary SQL command
23RISK
open ↗
Referência
CVE-2017-13772
CVE-2017-13772—
Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated
35RISK
open ↗
← previouspage 515 / 746next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.