Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,772cataloged exploits
35,760CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,523GitHub PoC 14,289VulnCheck XDB 8,710Nuclei 4,319Metasploit 3,476✓ verified onlyrecentpopularrisk
22,523 exploits
Referência
CVE-2017-15221
CVE-2017-15221—
ASX to MP3 converter 3.1.3.7.2010.11.05 has a buffer overflow via a crafted M3U file, a related issue to CVE-2009-1324.
23RISK
open ↗
Referência
CVE-2017-15221
CVE-2017-15221—
ASX to MP3 converter 3.1.3.7.2010.11.05 has a buffer overflow via a crafted M3U file, a related issue to CVE-2009-1324.
23RISK
open ↗
Referência✓ VexDay Proof
MetaForum 0.513 Beta - Arbitrary File Upload
CVE-2007-1552—webappsphp
Unrestricted file upload vulnerability in usercp.php in MetaForum 0.513 Beta restricts file types based on the MIME type
23RISK
open ↗
Referência✓ VexDay Proof
Yahoo! Music Jukebox 2.2 - 'AddImage()' ActiveX Remote Buffer Overflow (PoC)
CVE-2008-0623—doswindows
Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows
23RISK
open ↗
Referência
CVE-2011-1249
CVE-2011-1249—
The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vis
23RISK
open ↗
Referência✓ VexDay Proof
CMS MAXSITE 1.10 - 'category' SQL Injection
CVE-2008-2487—webappsphp
SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL co
23RISK
open ↗
Referência
CVE-2024-0566
CVE-2024-0566HIGH
Smart Manager < 8.28.0 - Admin+ SQL Injection
41RISK
open ↗
Referência
CVE-2013-5961
CVE-2013-5961—
Unrestricted file upload vulnerability in lazyseo.php in the Lazy SEO plugin 1.1.9 for WordPress allows remote attackers
23RISK
open ↗
Referência
CVE-2013-5961
CVE-2013-5961—
Unrestricted file upload vulnerability in lazyseo.php in the Lazy SEO plugin 1.1.9 for WordPress allows remote attackers
23RISK
open ↗
Referência
CVE-2013-4949
CVE-2013-4949—
Unrestricted file upload vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary PHP code b
23RISK
open ↗
Referência
CVE-2013-4949
CVE-2013-4949—
Unrestricted file upload vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary PHP code b
23RISK
open ↗
Referência
CVE-2009-3364
CVE-2009-3364—
Stack-based buffer overflow in FTPShell Client 4.1 RC2 allows remote FTP servers to execute arbitrary code via a long re
23RISK
open ↗
Referência
CVE-2016-0007
CVE-2016-0007—
The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,
23RISK
open ↗
Referência
CVE-2016-0007
CVE-2016-0007—
The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,
23RISK
open ↗
Referência
CVE-2011-2641
CVE-2011-2641—
Opera 11.11 allows remote attackers to cause a denial of service (application crash) by setting the FACE attribute of a
23RISK
open ↗
Referência
CVE-2022-39290
CVE-2022-39290HIGH
CSRF key bypass using HTTP methods in zoneminder
41RISK
open ↗
Referência
CVE-2009-3598
CVE-2009-3598—
Cross-site scripting (XSS) vulnerability in survey_result.php in eCardMAX FormXP 2007 allows remote attackers to inject
23RISK
open ↗
Referência✓ VexDay Proof
Hex Workshop 5.1.4 - Color Mapping File Local Buffer Overflow (PoC)
CVE-2008-5756—doswindows
Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service an
23RISK
open ↗
Referência✓ VexDay Proof
iPhotoAlbum 1.1 - 'header.php' Remote File Inclusion
CVE-2005-2246—webappsphp
Multiple PHP remote file inclusion vulnerabilities in iPhotoAlbum 1.1 allow remote attackers to execute arbitrary code v
23RISK
open ↗
Referência
CVE-2010-1069
CVE-2010-1069—
SQL injection vulnerability in games/game.php in ProArcadeScript allows remote attackers to execute arbitrary SQL comman
23RISK
open ↗
Referência
CVE-2021-20991
CVE-2021-20991CRITICAL
Fibaro Home Center Authenticated remote command execution
48RISK
open ↗
Referência
CVE-2021-24610
CVE-2021-24610—
TranslatePress < 2.0.9 - Authenticated Stored Cross-Site Scripting
23RISK
open ↗
Referência
CVE-2015-1059
CVE-2015-1059—
Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute
23RISK
open ↗
Referência
CVE-2019-6213
CVE-2019-6213—
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3,
23RISK
open ↗
Referência
CVE-2016-7626
CVE-2016-7626—
An issue was discovered in certain Apple products. iOS before 10.2 is affected. tvOS before 10.1 is affected. watchOS be
23RISK
open ↗
Referência
CVE-2017-4915
CVE-2017-4915—
VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration fil
38RISK
open ↗
Referência✓ VexDay Proof
e107 - 'include()' Remote File Upload
CVE-2004-2262—webappsphp
ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to
28RISK
open ↗
Referência
CVE-2017-17970
CVE-2017-17970—
Multiple SQL injection vulnerabilities in Muviko 1.1 allow remote attackers to execute arbitrary SQL commands via the (1
23RISK
open ↗
Referência
CVE-2017-17970
CVE-2017-17970—
Multiple SQL injection vulnerabilities in Muviko 1.1 allow remote attackers to execute arbitrary SQL commands via the (1
23RISK
open ↗
Referência
CVE-2013-5573
CVE-2013-5573—
Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inj
23RISK
open ↗
← previouspage 579 / 751next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.