Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,836cataloged exploits

32,133CVEs with public exploitation

1,932lab-tested

All Exploit-DB 22,786Referência 19,967GitHub PoC 13,264VulnCheck XDB 8,156Nuclei 4,201Metasploit 3,462✓ verified onlyrecent popular risk

19,967 exploits

Referência

CVE-2017-7588

CVE-2017-7588—

On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a

35RISK

open ↗

Referência

CVE-2010-5299

CVE-2010-5299—

Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl f

50RISK

open ↗

Referência

CVE-2010-5299

CVE-2010-5299—

Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl f

50RISK

open ↗

Referência

CVE-2010-5299

CVE-2010-5299—

Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl f

50RISK

open ↗

Referência

CVE-2018-17552

CVE-2018-17552—

SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigat

60RISK

open ↗

Referência

CVE-2011-4885

CVE-2011-4885—

PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions pre

60RISK

open ↗

Referência

CVE-2010-5299

CVE-2010-5299—

Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl f

50RISK

open ↗

Referência

CVE-2015-6131

CVE-2015-6131—

Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers t

35RISK

open ↗

Referência

CVE-2013-3111

CVE-2013-3111—

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service

35RISK

open ↗

Referência

CVE-2013-3111

CVE-2013-3111—

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service

35RISK

open ↗

Referência

CVE-2022-48194

CVE-2022-48194HIGH

TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a De

53RISK

open ↗

Referência

CVE-2015-0050

CVE-2015-0050—

Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memo

35RISK

open ↗

Referência

CVE-2017-16885

CVE-2017-16885—

Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices (intended for obtaining informati

35RISK

open ↗

Referência

CVE-2012-2925

CVE-2012-2925—

SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL co

23RISK

open ↗

Referência

CVE-2010-4091

CVE-2010-4091—

The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows

28RISK

open ↗

Referência

Groupwise 7.0 - 'mailto: scheme' Buffer Overflow (PoC)

CVE-2008-2069—

Buffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or execute arbitrary code via

35RISK

open ↗

Referência

CVE-2017-5375

CVE-2017-5375—

JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. T

35RISK

open ↗

Referência

CVE-2017-5375

CVE-2017-5375—

JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. T

35RISK

open ↗

Referência

CVE-2017-5375

CVE-2017-5375—

JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. T

35RISK

open ↗

Referência

CVE-2020-29607

CVE-2020-29607—

A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access

35RISK

open ↗

Referência

CVE-2013-1306

CVE-2013-1306—

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a cr

35RISK

open ↗

Referência

CVE-2013-1306

CVE-2013-1306—

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a cr

35RISK

open ↗

Referência

CVE-2015-3124

CVE-2015-3124—

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows

35RISK

open ↗

Referência

CVE-2016-0801

CVE-2016-0801—

The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01

35RISK

open ↗

Referência

CVE-2016-4655

CVE-2016-4655MEDIUMunder attack

The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.

90RISK

open ↗

Referência

CVE-2020-8195

CVE-2020-8195MEDIUMunder attack

Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.1

75RISK

open ↗

Referência

BaoFeng - ActiveX 'OnBeforeVideoDownload()' Remote Buffer Overflow

CVE-2009-1612—

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote

50RISK

open ↗

Referência

CVE-2019-15813

CVE-2019-15813—

Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arb

35RISK

open ↗

Referência

Sentrifugo 3.2 - File Upload Restriction Bypass

CVE-2019-15813—

Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arb

35RISK

open ↗

Referência

CVE-2016-4228

CVE-2016-4228—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows

35RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.