Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,666cataloged exploits

32,032CVEs with public exploitation

1,932lab-tested

All Exploit-DB 22,786Referência 19,896GitHub PoC 13,204VulnCheck XDB 8,127Nuclei 4,191Metasploit 3,462✓ verified onlyrecent popular risk

19,896 exploits

Referência

CVE-2015-8430

CVE-2015-8430—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISK

Referência

CVE-2015-8424

CVE-2015-8424—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISK

Referência

CVE-2015-8434

CVE-2015-8434—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISK

Referência

CVE-2015-8431

CVE-2015-8431—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISK

Referência

CVE-2015-8427

CVE-2015-8427—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISK

Referência

CVE-2015-8429

CVE-2015-8429—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISK

Referência

CVE-2015-8423

CVE-2015-8423—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISK

Referência

CVE-2015-8425

CVE-2015-8425—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISK

Referência

CVE-2015-8421

CVE-2015-8421—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISK

Referência

CVE-2015-8428

CVE-2015-8428—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISK

Referência

CVE-2015-8422

CVE-2015-8422—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISK

Referência

phpBB Plus 1.53 - 'phpbb_root_path' Remote File Inclusion

CVE-2007-5009—

PHP remote file inclusion vulnerability in language/lang_german/lang_main_album.php in phpBB Plus 1.53, and 1.53a before

35RISK

Referência

CVE-2020-12029

CVE-2020-12029CRITICAL

Rockwell Automation FactoryTalk View SE

75RISK

Referência

CVE-2018-11510

CVE-2018-11510—

The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/

35RISK

Referência

CVE-2018-11510

CVE-2018-11510—

The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/

35RISK

Referência

μTorrent (uTorrent) 1.6 build 474 - 'announce' Key Remote Heap Overflow

CVE-2007-0927—

Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a c

35RISK

Referência

CVE-2009-2777

CVE-2009-2777—

SQL injection vulnerability in visitor/view.php in GarageSales Script allows remote attackers to execute arbitrary SQL c

23RISK

Referência

CVE-2012-1775

CVE-2012-1775—

Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code

50RISK

Referência

Titan FTP Server 6.26 build 630 - Remote Denial of Service

CVE-2008-6082—

Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service (CPU consumption) via the SITE WHO

50RISK

Referência

CVE-2017-11155

CVE-2017-11155—

An information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remot

35RISK

Referência

CVE-2022-29298

CVE-2022-29298—

SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.

50RISK

Referência

CVE-2013-1892

CVE-2013-1892—

MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMo

50RISK

Referência

CVE-2013-1892

CVE-2013-1892—

MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMo

50RISK

Referência

CVE-2016-3301

CVE-2016-3301—

The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1;

35RISK

Referência

CVE-2015-5539

CVE-2015-5539—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu

35RISK

Referência

CVE-2015-5540

CVE-2015-5540—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu

35RISK

Referência

CVE-2020-10882

CVE-2020-10882HIGH

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Arch

68RISK

Referência

AimStats 3.2 - 'process.php?update' Remote Code Execution

CVE-2007-2167—

Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into confi

35RISK

Referência

CVE-2018-6317

CVE-2018-6317—

The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated format strin

50RISK

Referência

CVE-2015-1587

CVE-2015-1587—

Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earl

50RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.