Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,412cataloged exploits
40,212CVEs with public exploitation
24,696lab-tested
AllReferência 26,070Exploit-DB 24,488GitHub PoC 17,762VulnCheck XDB 10,014Nuclei 4,547Metasploit 3,531✓ verified onlyrecentpopularrisk
24,696 exploits
Exploit-DB✓ VexDay Proof
Microsoft IIS - ISAPI 'w3who.dll' Query String Overflow (Metasploit)
Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possib
60RISK
open ↗Exploit-DB✓ VexDay Proof
Sijio Community Software - SQL Injection / Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Sijio Community Software allows remote authenticated users to inject arbitra
23RISK
open ↗Exploit-DB✓ VexDay Proof
MailEnable - Authorisation Header Buffer Overflow (Metasploit)
Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote at
60RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component ArtForms 2.1b7.2 rc2 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! al
23RISK
open ↗Exploit-DB✓ VexDay Proof
Sijio Community Software - SQL Injection / Persistent Cross-Site Scripting
SQL injection vulnerability in gallery/index.php in Sijio Community Software allows remote attackers to execute arbitrar
23RISK
open ↗Exploit-DB✓ VexDay Proof
Alt-N SecurityGateway 1.0.1 - 'Username' Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers t
60RISK
open ↗Exploit-DB✓ VexDay Proof
Sijio Community Software - SQL Injection / Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Sijio Community Software allow remote authenticated users to inje
23RISK
open ↗Exploit-DB✓ VexDay Proof
IBM Bladecenter Management - Multiple Web Application Vulnerabilities
Directory traversal vulnerability in private/file_management.php on the IBM BladeCenter with Advanced Management Module
23RISK
open ↗Exploit-DB✓ VexDay Proof
IBM Bladecenter Management - Multiple Web Application Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities on the IBM BladeCenter with Advanced Management Module (AMM) firmwar
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX EvoCam Web Server (Snow Leopard) - ROP Remote Overflow
Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary cod
50RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component AutarTimonial 1.0.8 - SQL Injection
SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attackers
23RISK
open ↗Exploit-DB✓ VexDay Proof
IBM Bladecenter Management - Multiple Web Application Vulnerabilities
The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before
23RISK
open ↗Exploit-DB✓ VexDay Proof
Lyrics 3.0 - Engine SQL Injection
SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
BS Business Directory - 'articlesdetails.php' SQL Injection
SQL injection vulnerability in articlesdetails.php in BrotherScripts (BS) Business Directory allows remote attackers to
23RISK
open ↗Exploit-DB✓ VexDay Proof
Orbis CMS 1.0.2 - 'editor-body.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin/editors/text/editor-body.php in Orbis CMS 1.0.2 allows remote attacker
23RISK
open ↗Exploit-DB✓ VexDay Proof
NewsOffice 2.0.18 - 'news_show.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in news_show.php in Newanz NewsOffice 2.0.18 allows remote attackers to inject
23RISK
open ↗Exploit-DB✓ VexDay Proof
Bs Recipes_Website Script - SQL Injection / Authentication Bypass
SQL injection vulnerability in recipedetail.php in BrotherScripts Recipe Website allows remote attackers to execute arbi
23RISK
open ↗Exploit-DB✓ VexDay Proof
WikiWebHelp 0.28 - SQL Injection
SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary S
23RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component Canteen 1.0 - Local File Inclusion
SQL injection vulnerability in menu.php in the Canteen (com_canteen) component 1.0 for Joomla! allows remote attackers t
43RISK
open ↗Exploit-DB✓ VexDay Proof
TCW PHP Album - Multiple Vulnerabilities
SQL injection vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to execute arbitrary SQL co
23RISK
open ↗Exploit-DB✓ VexDay Proof
Esoftpro Online Photo Pro 2 - Multiple Vulnerabilities
SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary S
23RISK
open ↗Exploit-DB✓ VexDay Proof
TCW PHP Album - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arbi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Firebird Relational Database - 'isc_attach_database()' Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RISK
open ↗Exploit-DB✓ VexDay Proof
Borland Interbase - 'SVC_attach()' Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RISK
open ↗Exploit-DB✓ VexDay Proof
TWiki - Search Function Arbitrary Command Execution (Metasploit)
The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in
50RISK
open ↗Exploit-DB✓ VexDay Proof
phpBB - 'viewtopic.php' Arbitrary Code Execution (Metasploit)
PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute
60RISK
open ↗Exploit-DB✓ VexDay Proof
Firebird Relational Database - 'SVC_attach()' Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RISK
open ↗Exploit-DB✓ VexDay Proof
Firebird Relational Database - 'isc_create_database()' Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RISK
open ↗Exploit-DB✓ VexDay Proof
Borland Interbase - 'isc_attach_database()' Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RISK
open ↗Exploit-DB✓ VexDay Proof
NCTAudioFile2 2.x - ActiveX Control 'SetFormatLikeSample()' Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple prod
50RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.