Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,886cataloged exploits

32,153CVEs with public exploitation

1,932lab-tested

All Exploit-DB 22,786Referência 19,978GitHub PoC 13,282VulnCheck XDB 8,176Nuclei 4,202Metasploit 3,462✓ verified onlyrecent popular risk

19,967 exploits

Referência

CVE-2019-5893

CVE-2019-5893—

Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter.

28RISK

open ↗

Referência

CVE-2017-2885

CVE-2017-2885CRITICAL

An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP requ

53RISK

open ↗

Referência

CVE-2016-3645

CVE-2016-3645—

Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); S

28RISK

open ↗

Referência

CVE-2017-12787

CVE-2017-12787—

A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through N

28RISK

open ↗

Referência

Microsoft Windows Explorer - '.GIF' Image Denial of Service

CVE-2007-3958—

Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service via a certa

28RISK

open ↗

Referência

CVE-2015-7652

CVE-2015-7652—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and

28RISK

open ↗

Referência

CVE-2018-12584

CVE-2018-12584—

The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows rem

28RISK

open ↗

Referência

CVE-2018-12584

CVE-2018-12584—

The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows rem

28RISK

open ↗

Referência

CVE-2012-5611

CVE-2012-5611—

Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53

28RISK

open ↗

Referência

CVE-2010-3714

CVE-2010-3714—

The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before

43RISK

open ↗

Referência

CVE-2016-0040

CVE-2016-0040HIGHunder attack

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to g

91RISK

open ↗

Referência

CVE-2010-5300

CVE-2010-5300—

Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service (crash

28RISK

open ↗

Referência

CVE-2020-10884

CVE-2020-10884HIGH

This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer

61RISK

open ↗

Referência

CVE-2019-13360

CVE-2019-13360—

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login pro

28RISK

open ↗

Referência

CVE-2015-7563

CVE-2015-7563—

Cross-site request forgery (CSRF) vulnerability in TeamPass 2.1.24 and earlier allows remote attackers to hijack the aut

23RISK

open ↗

Referência

CVE-2019-13577

CVE-2019-13577—

SnmpAdm.exe in MAPLE WBT SNMP Administrator v2.0.195.15 has an Unauthenticated Remote Buffer Overflow via a long string

28RISK

open ↗

Referência

Joomla! Component OnlineFlashQuiz 1.0.2 - Remote File Inclusion

CVE-2008-1682—

PHP remote file inclusion vulnerability in quiz/common/db_config.inc.php in the Online FlashQuiz (com_onlineflashquiz) 1

28RISK

open ↗

Referência

Dragoon 0.1 - 'root' Remote File Inclusion

CVE-2008-1773—

PHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote attackers to execute arb

28RISK

open ↗

Referência

PhpBlock a8.4 - 'PATH_TO_CODE' Remote File Inclusion

CVE-2008-1776—

PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock A8.4 allows remote att

28RISK

open ↗

Referência

VMware - COM API ActiveX Remote Buffer Overflow (PoC)

CVE-2008-3892—

Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x before 5.5.8 build 108000, VMwar

28RISK

open ↗

Referência

Surgemail 39e-1 - (Authenticated) IMAP Remote Buffer Overflow (Denial of Service) (PoC)

CVE-2008-7182—

Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote au

28RISK

open ↗

Referência

CVE-2017-15367

CVE-2017-15367—

Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access

28RISK

open ↗

Referência

Joomla! Component Recly!Competitions 1.0.0 - Multiple Remote File Inclusions

CVE-2008-5790—

Multiple PHP remote file inclusion vulnerabilities in the Recly!Competitions (com_competitions) component 1.0 for Joomla

28RISK

open ↗

Referência

CVE-2021-46418

CVE-2021-46418—

An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts.

43RISK

open ↗

Referência

CVE-2018-4934

CVE-2018-4934—

Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read vulnerability. Successful expl

28RISK

open ↗

Referência

CVE-2008-2789

CVE-2008-2789—

SQL injection vulnerability in pages/index.php in BASIC-CMS allows remote attackers to execute arbitrary SQL commands vi

43RISK

open ↗

Referência

Basic-CMS - SQL Injection

CVE-2008-2789—

SQL injection vulnerability in pages/index.php in BASIC-CMS allows remote attackers to execute arbitrary SQL commands vi

43RISK

open ↗

Referência

CVE-2011-1938

CVE-2011-1938—

Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might all

28RISK

open ↗

Referência

CVE-2017-17640

CVE-2017-17640—

Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country pa

23RISK

open ↗

Referência

CVE-2021-40381

CVE-2021-40381—

An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. index_MJpeg.cgi allows

28RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.