Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,836cataloged exploits

32,133CVEs with public exploitation

1,932lab-tested

All Exploit-DB 22,786Referência 19,967GitHub PoC 13,264VulnCheck XDB 8,156Nuclei 4,201Metasploit 3,462✓ verified onlyrecent popular risk

19,967 exploits

Referência

CVE-2016-4226

CVE-2016-4226—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows

35RISK

Referência

CVE-2016-6255

CVE-2016-6255—

Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a P

28RISK

Referência

CVE-2020-3161

CVE-2020-3161CRITICALunder attack

Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability

100RISK

Referência

CVE-2015-3337

CVE-2015-3337—

Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, a

50RISK

Referência

CVE-2015-3337

CVE-2015-3337—

Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, a

50RISK

Referência

CVE-2017-6187

CVE-2017-6187—

Buffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers to execute arbitrary c

50RISK

Referência

CVE-2018-14716

CVE-2018-14716—

A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because reques

35RISK

Referência

eZip Wizard 3.0 - Local Stack Buffer Overflow (PoC) (SEH)

CVE-2009-1028—

Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .z

50RISK

Referência

CVE-2015-8411

CVE-2015-8411—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISK

Referência

CVE-2015-8413

CVE-2015-8413—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISK

Referência

CVE-2015-8410

CVE-2015-8410—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISK

Referência

CVE-2015-8412

CVE-2015-8412—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISK

Referência

CVE-2015-8048

CVE-2015-8048—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISK

Referência

CVE-2010-4321

CVE-2010-4321—

Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52 allows remote attackers to

50RISK

Referência

DVD X Player 4.1 Professional - '.PLF' File Buffer Overflow

CVE-2007-3068—

Stack-based buffer overflow in DVD X Player 4.1 Professional allows remote attackers to execute arbitrary code via a PLF

50RISK

Referência

CVE-2009-5109

CVE-2009-5109—

Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long e

50RISK

Referência

CVE-2009-5109

CVE-2009-5109—

Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long e

50RISK

Referência

CVE-2009-5109

CVE-2009-5109—

Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long e

50RISK

Referência

CVE-2009-5109

CVE-2009-5109—

Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long e

50RISK

Referência

CVE-2016-4231

CVE-2016-4231—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows

35RISK

Referência

CVE-2016-4227

CVE-2016-4227—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows

35RISK

Referência

CVE-2018-19458

CVE-2018-19458—

In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI UR

50RISK

Referência

CVE-2017-3241

CVE-2017-3241—

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versi

35RISK

Referência

Trend Micro OfficeScan - ObjRemoveCtrl ActiveX Control Buffer Overflow

CVE-2008-3364—

Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeS

35RISK

Referência

Now SMS/Mms Gateway 5.5 - Remote Buffer Overflow

CVE-2008-0871—

Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute ar

50RISK

Referência

CVE-2017-2992

CVE-2017-2992—

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 h

35RISK

Referência

CVE-2013-3143

CVE-2013-3143—

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (mem

35RISK

Referência

Tatsu 3.3.11 - Unauthenticated RCE

CVE-2021-25094—

Tatsu < 3.3.12 - Unauthenticated RCE

60RISK

Referência

CVE-2013-3143

CVE-2013-3143—

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (mem

35RISK

Referência

CVE-2019-0235

CVE-2019-0235—

Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks.

35RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.