Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,863cataloged exploits
32,152CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 19,978GitHub PoC 13,279VulnCheck XDB 8,156Nuclei 4,202Metasploit 3,462✓ verified onlyrecentpopularrisk
19,967 exploits
Referência
CVE-2017-12786
CVE-2017-12786—
Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW40
28RISK
open ↗
Referência
CVE-2015-0936
CVE-2015-0936—
Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remot
60RISK
open ↗
Referência
CVE-2017-11151
CVE-2017-11151—
A vulnerability in synotheme_upload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers
28RISK
open ↗
Referência
CVE-2015-0936
CVE-2015-0936—
Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remot
60RISK
open ↗
Referência
CVE-2017-2930
CVE-2017-2930—
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability due to a concurre
28RISK
open ↗
Referência
CVE-2017-2930
CVE-2017-2930—
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability due to a concurre
28RISK
open ↗
Referência
CVE-2017-2930
CVE-2017-2930—
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability due to a concurre
28RISK
open ↗
Referência
CVE-2020-20277
CVE-2020-20277—
There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server ver
28RISK
open ↗
Referência
CVE-2022-23046
CVE-2022-23046—
PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a su
28RISK
open ↗
Referência
CVE-2012-0896
CVE-2012-0896—
Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remo
43RISK
open ↗
Referência
CVE-2012-0896
CVE-2012-0896—
Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remo
43RISK
open ↗
Referência
Aztek Forum 4.00 - Cross-Site Scripting / SQL Injection
CVE-2006-1112—
Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, which
23RISK
open ↗
Referência
CVE-2019-0572
CVE-2019-0572—
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,
28RISK
open ↗
Referência
CVE-2013-3568
CVE-2013-3568—
Cross-site request forgery (CSRF) vulnerability in Cisco Linksys WRT110 allows remote attackers to hijack the authentica
43RISK
open ↗
Referência
CVE-2017-11906
CVE-2017-11906—
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Se
28RISK
open ↗
Referência
CVE-2014-5006
CVE-2014-5006—
Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers
28RISK
open ↗
Referência
CVE-2009-4223
CVE-2009-4223—
PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows remote attackers to execut
50RISK
open ↗
Referência
CVE-2019-15949
CVE-2019-15949HIGHunder attack
Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios
100RISK
open ↗
Referência
CVE-2019-15949
CVE-2019-15949HIGHunder attack
Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios
100RISK
open ↗
Referência
CVE-2016-3216
CVE-2016-3216—
GDI32.dll in the Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, W
28RISK
open ↗
Referência
Microsoft Office 2003 - '.PPT' Local Buffer Overflow (PoC)
CVE-2006-5296—
PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record
28RISK
open ↗
Referência
Microsoft Word 2007 - Multiple Vulnerabilities
CVE-2007-1910—
Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service (application cr
28RISK
open ↗
Referência
CVE-2022-31854
CVE-2022-31854—
Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin
50RISK
open ↗
Referência
CVE-2020-35948
CVE-2020-35948CRITICAL
An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated atta
53RISK
open ↗
Referência
CVE-2012-5863
CVE-2012-5863—
Sinapsi eSolar OS Command Injection
53RISK
open ↗
Referência
CVE-2018-19864
CVE-2018-19864—
NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a
28RISK
open ↗
Referência
CVE-2022-3038
CVE-2022-3038HIGHunder attack
Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially explo
76RISK
open ↗
Referência
CVE-2017-3061
CVE-2017-3061—
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser
28RISK
open ↗
Referência
CVE-2017-3076
CVE-2017-3076—
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC
28RISK
open ↗
Referência
CVE-2018-11652
CVE-2018-11652—
CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the S
28RISK
open ↗
← previouspage 98 / 666next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.