Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,620cataloged exploits
35,647CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,429GitHub PoC 14,270VulnCheck XDB 8,693Nuclei 4,299Metasploit 3,474✓ verified onlyrecentpopularrisk
22,429 exploits
Referência
CVE-2013-3502
CVE-2013-3502—
monarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to ex
50RISK
open ↗
Referência
CVE-2019-1253
CVE-2019-1253HIGHunder attackransomware
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To e
76RISK
open ↗
Referência
CVE-2010-1957
CVE-2010-1957—
Directory traversal vulnerability in the Love Factory (com_lovefactory) component 1.3.4 for Joomla! allows remote attack
43RISK
open ↗
Referência
CVE-2019-12276
CVE-2019-12276—
A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows
50RISK
open ↗
Referência✓ VexDay Proof
MailBee WebMail Pro 4.1 - Remote File Disclosure
CVE-2008-0333—webappsasp
Directory traversal vulnerability in download_view_attachment.aspx in AfterLogic MailBee WebMail Pro 4.1 for ASP.NET all
28RISK
open ↗
Referência✓ VexDay Proof
Apple QuickTime 7.5.5 / iTunes 8.0 - Remote Off-by-One Crash
CVE-2008-4116—dosmultiple
Buffer overflow in Apple QuickTime 7.5.5 and iTunes 8.0 allows remote attackers to cause a denial of service (browser cr
28RISK
open ↗
Referência
CVE-2009-2790
CVE-2009-2790—
SQL injection vulnerability in cat_products.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQ
23RISK
open ↗
Referência
CVE-2020-24365
CVE-2020-24365—
An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic n
28RISK
open ↗
Referência
CVE-2010-1056
CVE-2010-1056—
Directory traversal vulnerability in the RokDownloads (com_rokdownloads) component before 1.0.1 for Joomla! allows remot
43RISK
open ↗
Referência
CVE-2010-1056
CVE-2010-1056—
Directory traversal vulnerability in the RokDownloads (com_rokdownloads) component before 1.0.1 for Joomla! allows remot
43RISK
open ↗
Referência
CVE-2018-11492
CVE-2018-11492—
ASUS HG100 devices allow denial of service via an IPv4 packet flood.
28RISK
open ↗
Referência
CVE-2018-11492
CVE-2018-11492—
ASUS HG100 devices allow denial of service via an IPv4 packet flood.
28RISK
open ↗
Referência
CVE-2017-8472
CVE-2017-8472—
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 allow an authenticated attacker to
23RISK
open ↗
Referência
CVE-2016-5725
CVE-2016-5725—
Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allow
28RISK
open ↗
Referência
CVE-2010-5286
CVE-2010-5286—
Directory traversal vulnerability in Jstore (com_jstore) component for Joomla! allows remote attackers to read arbitrary
43RISK
open ↗
Referência
CVE-2013-5977
CVE-2013-5977—
Cross-site request forgery (CSRF) vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordP
23RISK
open ↗
Referência
CVE-2022-2651
CVE-2022-2651CRITICAL
Authentication Bypass by Primary Weakness in bookwyrm-social/bookwyrm
53RISK
open ↗
Referência
CVE-2016-2210
CVE-2016-2210—
Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec
28RISK
open ↗
Referência
CVE-2017-2370
CVE-2017-2370—
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS
28RISK
open ↗
Referência
TylerTech Eagle 2018.3.11 - Remote Code Execution
CVE-2019-16112—webappsjava
TylerTech Eagle 2018.3.11 deserializes untrusted user input, resulting in remote code execution via a crafted Java objec
28RISK
open ↗
Referência✓ VexDay Proof
BXCP 0.2.9.9 - 'tid' SQL Injection
CVE-2006-0821—webappsphp
SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via the
23RISK
open ↗
Referência✓ VexDay Proof
Online Media Technologies 'AVSMJPEGFILE.DLL 1.1' - Remote Buffer Overflow (PoC)
CVE-2007-6327—doswindows
Buffer overflow in a certain ActiveX control in Online Media Technologies AVSMJPEGFILE.DLL 1.1.1.102 allows remote attac
28RISK
open ↗
Referência✓ VexDay Proof
Black Ice Software Annotation Plugin - 'BiAnno.ocx' Remote Buffer Overflow
CVE-2008-2745—remotewindows
Stack-based buffer overflow in BiAnno ActiveX Control (BiAnno.ocx) in Black Ice Software Annotation Plugin 10.95 allows
28RISK
open ↗
Referência
CVE-2014-4927
CVE-2014-4927—
Buffer overflow in ACME micro_httpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 router
28RISK
open ↗
Referência
CVE-2014-4927
CVE-2014-4927—
Buffer overflow in ACME micro_httpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 router
28RISK
open ↗
Referência
CVE-2018-6460
CVE-2018-6460—
Hotspot Shield runs a webserver with a static IP address 127.0.0.1 and port 895. The web server uses JSONP and hosts sen
28RISK
open ↗
Referência
CVE-2015-2196
CVE-2015-2196—
SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQ
43RISK
open ↗
Referência
CVE-2017-2619
CVE-2017-2619—
Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access
28RISK
open ↗
Referência
CVE-2018-11511
CVE-2018-11511—
The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL injection vulnerability
43RISK
open ↗
Referência
CVE-2016-3861
CVE-2016-3861—
LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016
23RISK
open ↗
← previouspage 547 / 748next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.