Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
79,305cataloged exploits
36,465CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,466Referência 23,051GitHub PoC 15,051VulnCheck XDB 8,883Nuclei 4,361Metasploit 3,493✓ verified onlyrecentpopularrisk
5,629 exploits
Referência✓ VexDay Proof
registroTL - 'main.php' Remote File Inclusion
PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code
23RISK
open ↗Referência✓ VexDay Proof
eboli - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in eboli allows remote attackers to execute arbitrary PHP code via
23RISK
open ↗Referência✓ VexDay Proof
Album Photo Sans Nom 1.6 - Remote Source Disclosure
Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary fi
23RISK
open ↗Referência✓ VexDay Proof
phpBB PlusXL 2.0_272 - 'constants.php' Remote File Inclusion
PHP remote file inclusion vulnerability in mods/iai/includes/constants.php in the PlusXL 20_272 and earlier phpBB module
23RISK
open ↗Referência✓ VexDay Proof
PHPht Topsites - 'common.php' Remote File Inclusion
PHP remote file inclusion vulnerability in common.php in Hinton Design phpht Topsites allows remote attackers to execute
23RISK
open ↗Referência✓ VexDay Proof
Open Meetings Filing Application - Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application (OMFA) allow remote
23RISK
open ↗Referência✓ VexDay Proof
EZ-Ticket 0.0.1 - 'common.php' Remote File Inclusion
PHP remote file inclusion vulnerability in common.php in EZ-Ticket 0.0.1 allows remote attackers to execute arbitrary PH
23RISK
open ↗Referência✓ VexDay Proof
PHP-Nuke 7.9 - 'Encyclopedia' SQL Injection
Incomplete blacklist vulnerability in mainfile.php in PHP-Nuke 7.9 and earlier allows remote attackers to conduct SQL in
23RISK
open ↗Referência✓ VexDay Proof
Fully Modded phpBB 2021.4.40 - Multiple File Inclusions
Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing, as modified in Fully Modded phpBB (phpbbfm) 202
23RISK
open ↗Referência✓ VexDay Proof
OTSCMS 2.1.3 - Multiple Remote File Inclusions
PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 2.0
23RISK
open ↗Referência✓ VexDay Proof
RevilloC MailServer 1.x - 'RCPT TO' Remote Denial of Service
Multiple heap-based buffer overflows in RevilloC MailServer 1.21 and earlier allow remote attackers to cause a denial of
23RISK
open ↗Referência✓ VexDay Proof
Imageview 5 - '/Cookie/index.php' Local/Remote File Inclusion
Directory traversal vulnerability in index.php in Imageview 5 allows remote attackers to read or execute arbitrary local
23RISK
open ↗Referência✓ VexDay Proof
HP-UX 11i - 'swask' Format String Privilege Escalation
Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to exec
23RISK
open ↗Referência✓ VexDay Proof
SourceForge 1.0.4 - 'database.php' Remote File Inclusion
PHP remote file inclusion vulnerability in include/database.php in SourceForge (aka alexandria) 1.0.4 allows remote atta
23RISK
open ↗Referência✓ VexDay Proof
MDweb 1.3 - 'chemin_appli' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in MDweb 1.3 and earlier (Mdweb132-postgres) allow remote attackers t
23RISK
open ↗Referência✓ VexDay Proof
ArticleBeach Script 2.0 - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in ArticleBeach Script 2.0 and earlier allows remote attackers to e
23RISK
open ↗Referência✓ VexDay Proof
GestArt Beta 1 - 'aide.php?aide' Remote File Inclusion
PHP remote file inclusion vulnerability in aide.php3 (aka aide.php) in GestArt beta 1, when register_globals is enabled,
23RISK
open ↗Referência✓ VexDay Proof
mp3SDS 3.0 - '/Core/core.inc.php' Remote File Inclusion
PHP remote file inclusion in Core/core.inc.php in MP3 Streaming DownSampler (mp3SDS) 3.0, when register_globals is enabl
23RISK
open ↗Referência✓ VexDay Proof
Microsoft Windows - NAT Helper Components 'ipnathlp.dll' Remote Denial of Service
Microsoft Windows NAT Helper Components (ipnathlp.dll) on Windows XP SP2, when Internet Connection Sharing is enabled, a
60RISK
open ↗Referência✓ VexDay Proof
ask_rave 0.9 PR - 'end.php?footfile' Remote File Inclusion
PHP remote file inclusion vulnerability in end.php in ask_rave 0.9 PR, and other versions before 0.9b, allows remote att
23RISK
open ↗Referência✓ VexDay Proof
Coppermine Photo Gallery 1.4.9 - SQL Injection
SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrary
23RISK
open ↗Referência✓ VexDay Proof
Electronic Engineering Tool (EE TOOL) 0.4.1 - Remote File Inclusion
PHP remote file inclusion vulnerability in ip.inc.php in Electronic Engineering Tool (EE Tool) 0.4-1 and earlier allows
23RISK
open ↗Referência✓ VexDay Proof
N/X WCMS 4.1 - 'nxheader.inc.php' Remote File Inclusion
PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional Edition Web Content Manageme
23RISK
open ↗Referência✓ VexDay Proof
Article System 0.6 - 'volume.php' Remote File Inclusion
PHP remote file inclusion vulnerability in volume.php in Article System 0.6 allows remote attackers to execute arbitrary
23RISK
open ↗Referência✓ VexDay Proof
Drake CMS < 0.2.3 ALPHA rev.916 - Remote File Inclusion
PHP remote file inclusion vulnerability in includes/xhtml.php in Drake CMS 0.2.2 alpha rev.846 and earlier allows remote
23RISK
open ↗Referência✓ VexDay Proof
phpDynaSite 3.2.2 - 'racine' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in phpDynaSite 3.2.2 and earlier allow remote attackers to execute ar
23RISK
open ↗Referência✓ VexDay Proof
Free File Hosting 1.1 - 'forgot_pass.php' File Inclusion
PHP remote file inclusion vulnerability in forgot_pass.php in Free File Hosting 1.1 and earlier allows remote attackers
23RISK
open ↗Referência✓ VexDay Proof
FreeWebShop.org script 2.2.2 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 and earlier allow remote attackers to execute a
23RISK
open ↗Referência✓ VexDay Proof
Creasito E-Commerce Content Manager - 'admin' Authentication Bypass
Creasito E-Commerce Content Manager 1.3.08 allows remote attackers to bypass authentication and perform privileged funct
23RISK
open ↗Referência✓ VexDay Proof
Omni-NFS Server 5.2 - 'nfsd.exe' Remote Stack Overflow (Metasploit)
Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code v
50RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.