Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
79,305cataloged exploits
36,465CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,466Referência 23,051GitHub PoC 15,051VulnCheck XDB 8,883Nuclei 4,361Metasploit 3,493✓ verified onlyrecentpopularrisk
24,695 exploits
Exploit-DB✓ VexDay Proof
Cornerstone CMS - SQL Injection
SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
GAMSoft TelSrv 1.5 - 'Username' Remote Buffer Overflow (Metasploit)
GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.
50RISK
open ↗Exploit-DB✓ VexDay Proof
Veritas Backup Exec Name Service - Remote Overflow (Metasploit)
Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9
60RISK
open ↗Exploit-DB✓ VexDay Proof
Job Search Engine Script - SQL Injection
SQL injection vulnerability in show_search_result.php in 2daybiz Job Search Engine Script allows remote attackers to exe
23RISK
open ↗Exploit-DB✓ VexDay Proof
Boat Classifieds - SQL Injection
SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrar
23RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component Picasa2Gallery 1.2.8 - Local File Inclusion
Directory traversal vulnerability in the Picasa2Gallery (com_picasa2gallery) component 1.2.8 and earlier for Joomla! all
38RISK
open ↗Exploit-DB✓ VexDay Proof
Mercury/32 Mail SMTPD - AUTH CRAM-MD5 Buffer Overflow (Metasploit)
Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, all
50RISK
open ↗Exploit-DB✓ VexDay Proof
Solaris TelnetD - 'TTYPROMPT' Remote Buffer Overflow (2) (Metasploit)
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary comman
60RISK
open ↗Exploit-DB✓ VexDay Proof
Netcat 1.10 - NT Stack Buffer Overflow (Metasploit)
Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attack
50RISK
open ↗Exploit-DB✓ VexDay Proof
Sun Solaris Telnet - Remote Authentication Bypass (Metasploit)
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterpr
60RISK
open ↗Exploit-DB✓ VexDay Proof
WinComLPD 3.0.2 - Remote Buffer Overflow (Metasploit)
Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earl
50RISK
open ↗Exploit-DB✓ VexDay Proof
HP OpenView - Operations OVTrace Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 f
50RISK
open ↗Exploit-DB✓ VexDay Proof
CA BrightStor Universal Agent - Remote Overflow (Metasploit)
Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticate
50RISK
open ↗Exploit-DB✓ VexDay Proof
BolinTech DreamFTP Server 1.02 - Format String (Metasploit)
Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string
50RISK
open ↗Exploit-DB✓ VexDay Proof
SafeNet SoftRemote - IKE Service Buffer Overflow (Metasploit)
Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers
60RISK
open ↗Exploit-DB✓ VexDay Proof
Solaris Sadmind - Command Execution (Metasploit)
The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attack
60RISK
open ↗Exploit-DB✓ VexDay Proof
Sybase EAServer 5.2 - Remote Stack Buffer Overflow (Metasploit)
Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to e
60RISK
open ↗Exploit-DB✓ VexDay Proof
K-Search - SQL Injection / Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in K-Search allows remote attackers to inject arbitrary web script
23RISK
open ↗Exploit-DB✓ VexDay Proof
Mercury/32 Mail Server < 4.01b - LOGIN Buffer Overflow (Metasploit)
Stack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier allows remote attackers
50RISK
open ↗Exploit-DB✓ VexDay Proof
Texas Imperial Software WFTPD 3.23 - SIZE Overflow (Metasploit)
Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands.
50RISK
open ↗Exploit-DB✓ VexDay Proof
Boat Classifieds - SQL Injection
SQL injection vulnerability in detail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL
23RISK
open ↗Exploit-DB✓ VexDay Proof
Subtitle Translation Wizard 3.0.0 - Overflow (SEH) (PoC)
Stack-based buffer overflow in st-wizard.exe in Subtitle Translation Wizard 3.0 allows user-assisted remote attackers to
23RISK
open ↗Exploit-DB✓ VexDay Proof
Asus Dpcproxy - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 an
60RISK
open ↗Exploit-DB✓ VexDay Proof
Novell Groupwise Messenger Client - Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow rem
50RISK
open ↗Exploit-DB✓ VexDay Proof
Video Community portal - SQL Injection / Cross-Site Scripting
SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to execute
23RISK
open ↗Exploit-DB✓ VexDay Proof
Jamroom 4.0.2/4.1.x - 'forum.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to inject arbitrar
23RISK
open ↗Exploit-DB✓ VexDay Proof
G.CMS Generator - SQL Injection
SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang pa
23RISK
open ↗Exploit-DB✓ VexDay Proof
Samba 2.2.8 (OSX/PPC) - 'trans2open' Remote Overflow (Metasploit)
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x vers
60RISK
open ↗Exploit-DB✓ VexDay Proof
Samba 2.2.8 (Solaris SPARC) - 'trans2open' Remote Overflow (Metasploit)
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x vers
60RISK
open ↗Exploit-DB✓ VexDay Proof
IBM Websphere ILOG JRules 6.7 - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in content/internalError.jsp in IBM WebSphere ILOG JRules 6.7 allow
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.