Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,623cataloged exploits

39,951CVEs with public exploitation

24,696lab-tested

All Referência 25,887Exploit-DB 24,488GitHub PoC 17,330VulnCheck XDB 9,877Nuclei 4,513Metasploit 3,528✓ verified onlyrecent popular risk

3,528 exploits

Metasploit500

Medal of Honor Allied Assault getinfo Stack Buffer Overflow

CVE-2004-0735—17 Jul 2004

Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spe

50RISK

open ↗

Metasploit200

WebSTAR FTP Server USER Overflow

CVE-2004-0695—13 Jul 2004

Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbit

50RISK

open ↗

Metasploit300

3Com SuperStack Switch Denial of Service

CVE-2004-2691—24 Jun 2004

Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers t

30RISK

open ↗

Metasploit400

Unreal Tournament 2004 "secure" Overflow (Win32)

CVE-2004-0608—18 Jun 2004

The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier,

60RISK

open ↗

Metasploit400

Unreal Tournament 2004 "secure" Overflow (Linux)

CVE-2004-0608—18 Jun 2004

The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier,

60RISK

open ↗

Metasploit500

Squid NTLM Authenticate Overflow

CVE-2004-0541—08 Jun 2004

Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when comp

60RISK

open ↗

Metasploit200

Subversion Date Svnserve

CVE-2004-0397—19 May 2004

Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attacker

60RISK

open ↗

Metasploit200

AppleFileServer LoginExt PathName Overflow

CVE-2004-0430—03 May 2004

Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitr

50RISK

open ↗

Metasploit200

MS04-011 Microsoft Private Communications Transport Overflow

CVE-2003-0719—13 Apr 2004

Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as u

60RISK

open ↗

Metasploit400

MS04-011 Microsoft LSASS Service DsRolerUpgradeDownlevelServer Overflow

CVE-2003-0533—13 Apr 2004

Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority

60RISK

open ↗

Metasploit300

Norton AntiSpam 2004 SymSpamHelper ActiveX Control Buffer Overflow

CVE-2004-0363—19 Mar 2004

Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Nor

50RISK

open ↗

Metasploit500

ISS PAM.dll ICQ Parser Buffer Overflow

CVE-2004-0362—18 Mar 2004

Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, a

60RISK

open ↗

Metasploit300

IBM DB2 db2rcmd.exe Command Execution Vulnerability

CVE-2004-0795—04 Mar 2004

DB2 8.1 remote command server (DB2RCMD.EXE) executes the db2rcmdc.exe program as the db2admin administrator, which allow

18RISK

open ↗

Metasploit400

BolinTech Dream FTP Server 1.02 Format String

CVE-2004-2074—03 Mar 2004

Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string

50RISK

open ↗

Metasploit300

Dell OpenManage POST Request Heap Overflow (win32)

CVE-2004-0331—26 Feb 2004

Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service (cra

23RISK

open ↗

Metasploit400

Serv-U FTPD MDTM Overflow

CVE-2004-0330—26 Feb 2004

Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time

60RISK

open ↗

Metasploit500

Proxy-Pro Professional GateKeeper 4.7 GET Request Overflow

CVE-2004-0326—23 Feb 2004

Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET

50RISK

open ↗

Metasploit200

PSO Proxy v0.91 Stack Buffer Overflow

CVE-2004-0313—20 Feb 2004

Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod

50RISK

open ↗

Metasploit200

IMail LDAP Service Buffer Overflow

CVE-2004-0297—17 Feb 2004

Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Serve

50RISK

open ↗

Metasploit100

MS04-007 Microsoft ASN.1 Library Bitstring Heap Overflow

CVE-2003-0818—10 Feb 2004

Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microso

60RISK

open ↗

Metasploit500

MDaemon WorldClient form2raw.cgi Stack Buffer Overflow

CVE-2003-1200—29 Dec 2003

Stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon 6.5.2 through 6.8.5 allows remote attackers to execute arbi

50RISK

open ↗

Metasploit400

MS03-051 Microsoft IIS ISAPI FrontPage fp30reg.dll Chunked Overflow

CVE-2003-0822—11 Nov 2003

Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002

60RISK

open ↗

Metasploit400

MS03-049 Microsoft Workstation Service NetAddAlternateComputerName Overflow

CVE-2003-0812—11 Nov 2003

Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers t

60RISK

open ↗

Metasploit400

NIPrint LPD Request Overflow

CVE-2003-1141—05 Nov 2003

Buffer overflow in NIPrint 4.10 allows remote attackers to execute arbitrary code via a long string to TCP port 515.

50RISK

open ↗

Metasploit200

IA WebMail 3.x Buffer Overflow

CVE-2003-1192—03 Nov 2003

Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute arbitrary code via a long GET

50RISK

open ↗

Metasploit400

MS03-046 Exchange 2000 XEXCH50 Heap Overflow

CVE-2003-0714—15 Oct 2003

The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service

60RISK

open ↗

Metasploit300

mIRC IRC URL Buffer Overflow

CVE-2003-1336—13 Oct 2003

Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.

50RISK

open ↗

Metasploit300

Sendmail SMTP Address prescan Memory Corruption

CVE-2003-0694—17 Sep 2003

The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, a

30RISK

open ↗

Metasploit600

Solaris sadmind Command Execution

CVE-2003-0722—13 Sep 2003

The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attack

60RISK

open ↗

Metasploit500

Oracle 9i XDB HTTP PASS Overflow (win32)

CVE-2003-0727—18 Aug 2003

Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to

50RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.