Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,449cataloged exploits
35,552CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,367GitHub PoC 14,225VulnCheck XDB 8,649Nuclei 4,283Metasploit 3,474✓ verified onlyrecentpopularrisk
22,367 exploits
Referência
CVE-2017-11281
CVE-2017-11281—
Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploita
35RISK
open ↗
Referência
CVE-2017-11281
CVE-2017-11281—
Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploita
35RISK
open ↗
Referência
CVE-2015-2995
CVE-2015-2995—
The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote at
50RISK
open ↗
Referência
CVE-2010-1342
CVE-2010-1342—
Multiple PHP remote file inclusion vulnerabilities in Direct News 4.10.2, when register_globals is enabled, allow remote
23RISK
open ↗
Referência
CVE-2017-5375
CVE-2017-5375—
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. T
35RISK
open ↗
Referência
CVE-2020-29607
CVE-2020-29607—
A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access
35RISK
open ↗
Referência
CVE-2013-1306
CVE-2013-1306—
Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a cr
35RISK
open ↗
Referência
CVE-2015-3124
CVE-2015-3124—
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows
35RISK
open ↗
Referência
CVE-2020-14871
CVE-2020-14871CRITICALunder attack
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported ve
100RISK
open ↗
Referência
CVE-2016-0801
CVE-2016-0801—
The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01
35RISK
open ↗
Referência
CVE-2020-14871
CVE-2020-14871CRITICALunder attack
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported ve
100RISK
open ↗
Referência
CVE-2020-8195
CVE-2020-8195MEDIUMunder attack
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.1
75RISK
open ↗
Referência
CVE-2019-15813
CVE-2019-15813—
Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arb
35RISK
open ↗
Referência
CVE-2009-4469
CVE-2009-4469—
Multiple cross-site scripting (XSS) vulnerabilities in pagenumber.inc.php in phpPowerCards 2.0 allow remote attackers to
23RISK
open ↗
Referência
Sentrifugo 3.2 - File Upload Restriction Bypass
CVE-2019-15813—webappsphp
Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arb
35RISK
open ↗
Referência
CVE-2016-4229
CVE-2016-4229—
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows
35RISK
open ↗
Referência
CVE-2016-4229
CVE-2016-4229—
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows
35RISK
open ↗
Referência
CVE-2018-15534
CVE-2018-15534—
Geutebrueck re_porter 16 before 7.8.974.20 has a possibility of unauthenticated access to sensitive information includin
35RISK
open ↗
Referência
CVE-2018-15534
CVE-2018-15534—
Geutebrueck re_porter 16 before 7.8.974.20 has a possibility of unauthenticated access to sensitive information includin
35RISK
open ↗
Referência
CVE-2012-1153
CVE-2012-1153—
Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote
50RISK
open ↗
Referência
CVE-2013-6935
CVE-2013-6935—
Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a
50RISK
open ↗
Referência
CVE-2015-2458
CVE-2015-2458—
ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,
35RISK
open ↗
Referência
CVE-2015-2459
CVE-2015-2459—
ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,
35RISK
open ↗
Referência
CVE-2024-6039
CVE-2024-6039MEDIUM
Feng Office Workspaces sql injection
33RISK
open ↗
Referência
CVE-2023-36874
CVE-2023-36874HIGHunder attack
Windows Error Reporting Service Elevation of Privilege Vulnerability
98RISK
open ↗
Referência
CVE-2019-9792
CVE-2019-9792—
The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during
28RISK
open ↗
Referência
CVE-2018-9995
CVE-2018-9995—
TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L
60RISK
open ↗
Referência
CVE-2012-3137
CVE-2012-3137—
The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 all
35RISK
open ↗
Referência
CVE-2019-9041
CVE-2019-9041—
An issue was discovered in ZZZCMS zzzphp V1.6.1. In the inc/zzz_template.php file, the parserIfLabel() function's filter
50RISK
open ↗
Referência
CVE-2014-1683
CVE-2014-1683—
The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248
50RISK
open ↗
← previouspage 524 / 746next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.