Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
79,230cataloged exploits
36,424CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,465Referência 23,022GitHub PoC 15,031VulnCheck XDB 8,860Nuclei 4,361Metasploit 3,491✓ verified onlyrecentpopularrisk
24,695 exploits
Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management 10.2.0 - Remote Execution (Metasploit)
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration M
60RISK
open ↗Exploit-DB✓ VexDay Proof
Apple iOS 4.0.2 - Networking Packet Filter Rules Privilege Escalation
Networking in Apple iOS before 4.2 accesses an invalid pointer during the processing of packet filter rules, which allow
23RISK
open ↗Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management 10.2.0 - Remote Execution (Metasploit)
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration M
28RISK
open ↗Exploit-DB✓ VexDay Proof
Apache Tomcat 7.0.4 - 'sort' / 'orderBy' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 an
35RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component Jimtawl 1.0.2 - Local File Inclusion
Directory traversal vulnerability in the Jimtawl (com_jimtawl) component 1.0.2 Joomla! allows remote attackers to read a
38RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Task Scheduler Privilege Escalation
The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7
43RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Task Scheduler Privilege Escalation
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vec
23RISK
open ↗Exploit-DB✓ VexDay Proof
WebKit - Insufficient Entropy Random Number Generator (2)
The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and befo
23RISK
open ↗Exploit-DB✓ VexDay Proof
MP3-Nator - Local Buffer Overflow (SEH) (DEP Bypass)
Stack-based buffer overflow in Mp3-Nator 2.0 allows remote attackers to execute arbitrary code via (1) a long string in
28RISK
open ↗Exploit-DB✓ VexDay Proof
WebKit - Insufficient Entropy Random Number Generator (1)
The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and befo
23RISK
open ↗Exploit-DB✓ VexDay Proof
Eclipse 3.6.1 - Help Server 'help/advanced/content.jsp' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclips
23RISK
open ↗Exploit-DB✓ VexDay Proof
Eclipse 3.6.1 - Help Server 'help/index.jsp' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclips
23RISK
open ↗Exploit-DB✓ VexDay Proof
Web Wiz NewsPad Express Edition 1.03 - Database File Disclosure
Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote at
23RISK
open ↗Exploit-DB✓ VexDay Proof
Google Android 2.0/2.1 - Use-After-Free Remote Code Execution on Webkit
WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not p
35RISK
open ↗Exploit-DB✓ VexDay Proof
Chameleon Social Networking Software - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in forum_new_topic.php in Chameleon Social Networking allow remote a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Network Associates PGP KeyServer 7 - LDAP Buffer Overflow (Metasploit)
Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute a
50RISK
open ↗Exploit-DB✓ VexDay Proof
CitectSCADA/CitectFacilities ODBC - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows rem
60RISK
open ↗Exploit-DB✓ VexDay Proof
MOXA Device Manager Tool 2.1 - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MD
43RISK
open ↗Exploit-DB✓ VexDay Proof
Camtron CMNC-200 IP Camera - Authentication Bypass
The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera
23RISK
open ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Event Registration 5.32 - SQL Injection
SQL injection vulnerability in the Event Registration plugin 5.32 and earlier for WordPress allows remote attackers to e
23RISK
open ↗Exploit-DB✓ VexDay Proof
DBSite - SQL Injection
SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the
23RISK
open ↗Exploit-DB✓ VexDay Proof
Pre Online Tests Generator Pro - SQL Injection
SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers t
23RISK
open ↗Exploit-DB✓ VexDay Proof
Webmatic - 'index.php' SQL Injection
SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p
23RISK
open ↗Exploit-DB✓ VexDay Proof
Camtron CMNC-200 IP Camera - Undocumented Default Accounts
The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1
23RISK
open ↗Exploit-DB✓ VexDay Proof
Camtron CMNC-200 IP Camera - Directory Traversal
Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera an
43RISK
open ↗Exploit-DB✓ VexDay Proof
Camtron CMNC-200 IP Camera - Denial of Service
The web server on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-00
23RISK
open ↗Exploit-DB✓ VexDay Proof
OneOrZero AIms 2.6.0 Members Edition - Multiple Vulnerabilities
Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users
23RISK
open ↗Exploit-DB✓ VexDay Proof
Camtron CMNC-200 IP Camera - ActiveX Buffer Overflow
Stack-based buffer overflow in a certain ActiveX control for the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200
23RISK
open ↗Exploit-DB✓ VexDay Proof
OneOrZero AIms 2.6.0 Members Edition - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition allo
23RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component JSupport 1.5.6 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote attack
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.