Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,866cataloged exploits
35,812CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,458Referência 22,573GitHub PoC 14,316VulnCheck XDB 8,722Nuclei 4,320Metasploit 3,477✓ verified onlyrecentpopularrisk
22,549 exploits
Referência
CVE-2014-3740
CVE-2014-3740—
Cross-site scripting (XSS) vulnerability in SpiceWorks before 7.2.00195 allows remote authenticated users to inject arbi
23RISK
open ↗
Referência
CVE-2016-7185
CVE-2016-7185—
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,
23RISK
open ↗
Referência
CVE-2011-2963
CVE-2011-2963—
TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, whi
23RISK
open ↗
Referência
CVE-2014-4306
CVE-2014-4306—
Directory traversal vulnerability in logs-x.php in WebTitan before 4.04 allows remote attackers to read arbitrary files
23RISK
open ↗
Referência
CVE-2013-1807
CVE-2013-1807—
PHP-Fusion before 7.02.06 stores backup files with predictable filenames in an unrestricted directory under the web docu
23RISK
open ↗
Referência✓ VexDay Proof
EnjoySAP ActiveX rfcguisink.rfcguisink.1 - Remote Heap Overflow (PoC)
CVE-2007-3606—doswindows
Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI, on systems using ASCI
23RISK
open ↗
Referência
CVE-2018-18955
CVE-2018-18955—
In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalat
38RISK
open ↗
Referência
CVE-2011-5002
CVE-2011-5002—
Multiple stack-based buffer overflows in Final Draft 8 before 8.02 allow remote attackers to execute arbitrary code via
23RISK
open ↗
Referência
CVE-2010-4776
CVE-2010-4776—
SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers t
23RISK
open ↗
Referência
CVE-2010-4776
CVE-2010-4776—
SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers t
23RISK
open ↗
Referência✓ VexDay Proof
jspwiki 2.4.104/2.5.139 - Multiple Vulnerabilities
CVE-2008-1231—webappsjsp
Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to include and exec
23RISK
open ↗
Referência✓ VexDay Proof
AuraCMS 2.x - '/user.php' Security Code Bypass / Arbitrary Add Administrator
CVE-2008-1715—webappsphp
SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when magic_quotes_gpc is disabled, allows
23RISK
open ↗
Referência
CVE-2010-3456
CVE-2010-3456—
Directory traversal vulnerability in download.php in EnergyScripts (ES) Simple Download 1.0 allows remote attackers to r
23RISK
open ↗
Referência
CVE-2019-7265
CVE-2019-7265—
Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).
28RISK
open ↗
Referência
CVE-2010-3456
CVE-2010-3456—
Directory traversal vulnerability in download.php in EnergyScripts (ES) Simple Download 1.0 allows remote attackers to r
23RISK
open ↗
Referência
CVE-2025-41244
CVE-2025-41244HIGHunder attack
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
71RISK
open ↗
Referência
CVE-2021-27519
CVE-2021-27519—
A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "
38RISK
open ↗
Referência
CVE-2016-6512
CVE-2016-6512—
epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function, whi
23RISK
open ↗
Referência
CVE-2010-0373
CVE-2010-0373—
SQL injection vulnerability in the libros (com_libros) component for Joomla! allows remote attackers to execute arbitrar
23RISK
open ↗
Referência
CVE-2010-4769
CVE-2010-4769—
Directory traversal vulnerability in the Jimtawl (com_jimtawl) component 1.0.2 Joomla! allows remote attackers to read a
38RISK
open ↗
Referência✓ VexDay Proof
acronis pxe server 2.0.0.1076 - Directory Traversal / Null Pointer
CVE-2008-1411—remotewindows
The PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to cause a denial of s
23RISK
open ↗
Referência✓ VexDay Proof
PHP Classifieds Script - Remote Database Disclosure
CVE-2008-7080—webappsphp
Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which
23RISK
open ↗
Referência✓ VexDay Proof
BuzzyWall 1.3.1 - 'id' Remote File Disclosure
CVE-2008-4759—webappsphp
Directory traversal vulnerability in download.php in BuzzyWall 1.3.1 allows remote attackers to read arbitrary local fil
23RISK
open ↗
Referência
CVE-2010-4783
CVE-2010-4783—
Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18, when ma
23RISK
open ↗
Referência
CVE-2010-4797
CVE-2010-4797—
Multiple SQL injection vulnerabilities in the log-in form in Truworth Flex Timesheet allow remote attackers to execute a
23RISK
open ↗
Referência
CVE-2017-15920
CVE-2017-15920—
In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer
23RISK
open ↗
Referência
CVE-2017-15920
CVE-2017-15920—
In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer
23RISK
open ↗
Referência
CVE-2013-2225
CVE-2013-2225—
inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _pr
23RISK
open ↗
Referência
CVE-2014-4874
CVE-2014-4874—
BMC Track-It! 11.3.0.355 allows remote authenticated users to read arbitrary files by visiting the TrackItWeb/Attachment
23RISK
open ↗
Referência
CVE-2020-7384
CVE-2020-7384HIGH
Client-Side Command Injection in Rapid7 Metasploit
68RISK
open ↗
← previouspage 619 / 752next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.