Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,305cataloged exploits

36,465CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,466Referência 23,051GitHub PoC 15,051VulnCheck XDB 8,883Nuclei 4,361Metasploit 3,493✓ verified onlyrecent popular risk

79,305 exploits

Exploit-DB

FreeBSD 12.0 - 'fd' Local Privilege Escalation

CVE-2019-5596—localfreebsd10 Jul 2019

In FreeBSD 11.2-STABLE after r338618 and before r343786, 12.0-STABLE before r343781, and 12.0-RELEASE before 12.0-RELEAS

23RISK

Exploit-DB✓ VexDay Proof

Microsoft DirectWrite / AFDKO - Heap-Based Buffer Overflow in OpenType Font Handling in readStrings

CVE-2019-1122—doswindows10 Jul 2019

A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Rem

28RISK

Exploit-DB✓ VexDay Proof

Microsoft DirectWrite / AFDKO - Stack Corruption in OpenType Font Handling Due to Incorrect Handling of blendArray

CVE-2019-1119—doswindows10 Jul 2019

A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Rem

28RISK

Exploit-DB✓ VexDay Proof

Microsoft DirectWrite / AFDKO - Stack Corruption in OpenType Font Handling Due to Negative cubeStackDepth

CVE-2019-1118—doswindows10 Jul 2019

A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Rem

28RISK

Exploit-DB✓ VexDay Proof

Microsoft DirectWrite / AFDKO - Heap-Based Buffer Overflow in OpenType Font Handling in readFDSelect

CVE-2019-1120—doswindows10 Jul 2019

A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Rem

28RISK

Exploit-DB✓ VexDay Proof

Microsoft DirectWrite / AFDKO - Heap-Based Out-of-Bounds Read/Write in OpenType Font Handling Due to Unbounded iFD

CVE-2019-1121—doswindows10 Jul 2019

A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Rem

28RISK

Exploit-DB✓ VexDay Proof

Microsoft DirectWrite / AFDKO - Stack Corruption in OpenType Font Handling due to Out-of-Bounds cubeStackDepth

CVE-2019-1117—doswindows10 Jul 2019

A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Rem

28RISK

Metasploit600

D-Link Central WiFi Manager CWM(100) RCE

CVE-2019-13372—09 Jul 2019

/web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote atta

40RISK

Exploit-DB

WordPress Plugin Like Button 1.6.0 - Authentication Bypass

CVE-2019-13344—webappsphp08 Jul 2019

An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthent

35RISK

GitHub PoC★ 14

thepwnrip/leHACK-Analysis-of-CVE-2018-8453

CVE-2018-8453HIGHunder attackransomware08 Jul 2019

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

100RISK

Exploit-DB

Apache mod_ssl < 2.8.7 OpenSSL - 'OpenFuckV2.c' Remote Buffer Overflow (2)

CVE-2002-0082—remoteunix07 Jul 2019

The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly

28RISK

Metasploit300

D-Link Central WiFiManager SQL injection

CVE-2019-13373—06 Jul 2019

An issue was discovered in the D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6. Input does not get validate

30RISK

Metasploit0

Docker-Credential-Wincred.exe Privilege Escalation

CVE-2019-15752HIGHunder attack05 Jul 2019

Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-c

98RISK

GitHub PoC★ 4

PHP-CGI-REMOTE_CVE-2012-1823, UnrealIRCd, MySQL, PostgreSQL and SSH bruteforce, VSFTPD2.3.4, samba CVE-2007-2447, JAVA RMI Server, distcc daemon, misconfigured NFS files, etc.

CVE-2007-2447—05 Jul 2019

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RISK

GitHub PoC★ 4

PHP-CGI-REMOTE_CVE-2012-1823, UnrealIRCd, MySQL, PostgreSQL and SSH bruteforce, VSFTPD2.3.4, samba CVE-2007-2447, JAVA RMI Server, distcc daemon, misconfigured NFS files, etc.

CVE-2012-1823CRITICALunder attack05 Jul 2019

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not

100RISK

VulnCheck XDB

client-side

CVE-2018-9995—05 Jul 2019

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISK

Exploit-DB

Microsoft Exchange 2003 - base64-MIME Remote Code Execution

CVE-2007-0213—remotewindows05 Jul 2019

Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, wh

35RISK

Metasploit600

Linux Polkit pkexec helper PTRACE_TRACEME local root exploit

CVE-2019-13272HIGHunder attack04 Jul 2019

In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce

98RISK

GitHub PoC★ 12

ze0r/CVE-2019-0708-exp

CVE-2019-0708CRITICALunder attackransomware04 Jul 2019

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RISK

Exploit-DB✓ VexDay Proof

Serv-U FTP Server - prepareinstallation Privilege Escalation (Metasploit)

CVE-2019-12181—locallinux03 Jul 2019

A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.

50RISK

Exploit-DB✓ VexDay Proof

Apache Tomcat - CGIServlet enableCmdLineArguments Remote Code Execution (Metasploit)

CVE-2019-0232—remotewindows03 Jul 2019

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0

60RISK

Exploit-DB

Symantec DLP 15.5 MP1 - Cross-Site Scripting

CVE-2019-9701—webappsmultiple03 Jul 2019

DLP 15.5 MP1 and all prior versions may be susceptible to a cross-site scripting (XSS) vulnerability, a type of issue th

23RISK

Exploit-DB

Centreon 19.04 - Remote Code Execution

CVE-2019-13024—webappsphp02 Jul 2019

Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows the attacker to execute arbitra

35RISK

Exploit-DB✓ VexDay Proof

Mac OS X TimeMachine - 'tmdiagnose' Command Injection Privilege Escalation (Metasploit)

CVE-2019-8513—localmacos02 Jul 2019

This issue was addressed with improved checks. This issue is fixed in macOS Mojave 10.14.4. A local user may be able to

38RISK

GitHub PoC

https://github.com/Yt1g3r/CVE-2019-3396_EXP.git

CVE-2019-3396CRITICALunder attackransomware01 Jul 2019

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers

100RISK

Exploit-DB

SAP Crystal Reports - Information Disclosure

CVE-2019-0285—webappsmultiple01 Jul 2019

The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive databas

23RISK

GitHub PoC★ 3

TrungNguyen1909/CVE-2019-6225-macOS

CVE-2019-6225—30 Jun 2019

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.

28RISK

GitHub PoC

Proof of concept code for breaking out of docker via runC

CVE-2019-5736—30 Jun 2019

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISK

Exploit-DB✓ VexDay Proof

LibreNMS 1.46 - 'addhost' Remote Code Execution

CVE-2018-20434—webappsphp28 Jun 2019

LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to htm

60RISK

GitHub PoC★ 9

CVE-2019-10149 privilege escalation

CVE-2019-10149CRITICALunder attack27 Jun 2019

A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message(

100RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.