Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,508cataloged exploits
40,258CVEs with public exploitation
24,696lab-tested
AllReferência 26,095Exploit-DB 24,488GitHub PoC 17,831VulnCheck XDB 10,015Nuclei 4,547Metasploit 3,532✓ verified onlyrecentpopularrisk
24,696 exploits
Exploit-DB✓ VexDay Proof
SAP AG SAPgui EAI WebViewer3D - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Leve
50RISK
open ↗Exploit-DB✓ VexDay Proof
GOM Player - ActiveX Control Buffer Overflow (Metasploit)
Buffer overflow in the GomManager (GomWeb Control) ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Playe
60RISK
open ↗Exploit-DB✓ VexDay Proof
SHTTPD 1.34 (Windows x86) - URI-Encoded POST Request Overflow (Metasploit)
Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary cod
50RISK
open ↗Exploit-DB✓ VexDay Proof
D-Link TFTP 1.0 - 'Filename' Remote Buffer Overflow (Metasploit)
Buffer overflow in D-Link TFTP Server 1.0 allows remote attackers to cause a denial of service (crash) via a long (1) GE
50RISK
open ↗Exploit-DB✓ VexDay Proof
Oracle Secure Backup - NDMP_CONNECT_CLIENT_AUTH Buffer Overflow (Metasploit)
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers
50RISK
open ↗Exploit-DB✓ VexDay Proof
GoodTech Telnet Server 5.0.6 - Remote Buffer Overflow (Metasploit)
Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions befor
50RISK
open ↗Exploit-DB✓ VexDay Proof
Sentinel LM - UDP Buffer Overflow (Metasploit)
Buffer overflow in the Sentinel LM (Lservnt) service in the Sentinel License Manager 7.2.0.2 allows remote attackers to
60RISK
open ↗Exploit-DB✓ VexDay Proof
Symantec BackupExec Calendar Control - Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the schedul
50RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Services - 'nwwks.dll' (MS06-066) (Metasploit)
Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 al
60RISK
open ↗Exploit-DB✓ VexDay Proof
Novell NetMail 3.52d - IMAP STATUS Buffer Overflow (Metasploit)
Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code
50RISK
open ↗Exploit-DB✓ VexDay Proof
Yahoo! Messenger - 'YVerInfo.dll' ActiveX Control Buffer Overflow (Metasploit)
Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo!
50RISK
open ↗Exploit-DB✓ VexDay Proof
Norton AntiSpam 2004 - SymSpamHelper ActiveX Control Buffer Overflow (Metasploit)
Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Nor
50RISK
open ↗Exploit-DB✓ VexDay Proof
Oracle Document Capture 10g - ActiveX Control Buffer Overflow (Metasploit)
Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used
50RISK
open ↗Exploit-DB✓ VexDay Proof
Novell iPrint Client - ActiveX Control Date/Time Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow
50RISK
open ↗Exploit-DB✓ VexDay Proof
Juniper SSL-VPN IVE - 'JuniperSetupDLL.dll' ActiveX Control Buffer Overflow (Metasploit)
Buffer overflow in JuniperSetupDLL.dll, loaded from JuniperSetup.ocx by the Juniper SSL-VPN Client when accessing a Juni
50RISK
open ↗Exploit-DB✓ VexDay Proof
Orbit Downloader - Connecting Log Creation Buffer Overflow (Metasploit)
Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote
50RISK
open ↗Exploit-DB✓ VexDay Proof
freeSSHd 1.0.9 - Key Exchange Algorithm String Buffer Overflow (Metasploit)
Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other produc
60RISK
open ↗Exploit-DB✓ VexDay Proof
freeFTPd 1.0.10 - Key Exchange Algorithm String Buffer Overflow (Metasploit)
Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other produc
60RISK
open ↗Exploit-DB✓ VexDay Proof
Ask.com Toolbar - 'askBar.dll' ActiveX Control Buffer Overflow (Metasploit)
Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Media
50RISK
open ↗Exploit-DB✓ VexDay Proof
RKD Software BarCode ActiveX Control 'BarCodeAx.dll' 4.9 - Remote Stack Buffer Overflow (Metasploit)
Stack-based buffer overflow in the BeginPrint method in a certain ActiveX control in RKD Software (barcodetools.com) Bar
50RISK
open ↗Exploit-DB✓ VexDay Proof
mIRC - IRC URL Buffer Overflow (Metasploit)
Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.
50RISK
open ↗Exploit-DB✓ VexDay Proof
FutureSoft TFTP Server 2000 - Transfer-Mode Overflow (Metasploit)
Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to exe
50RISK
open ↗Exploit-DB✓ VexDay Proof
Symantec Remote Management - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitr
60RISK
open ↗Exploit-DB✓ VexDay Proof
3Com TFTP Service (3CTftpSvc) - 'Mode' Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a d
60RISK
open ↗Exploit-DB✓ VexDay Proof
SoftiaCom wMailServer 1.0 - Remote Buffer Overflow (Metasploit)
SoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to cause a denial of service (application crash) via a large T
50RISK
open ↗Exploit-DB✓ VexDay Proof
PSOProxy 0.91 - Stack Buffer Overflow (Metasploit)
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod
50RISK
open ↗Exploit-DB✓ VexDay Proof
Medal of Honor Allied Assault - getinfo Stack Buffer Overflow (Metasploit)
Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spe
50RISK
open ↗Exploit-DB✓ VexDay Proof
Knox Arkeia Backup Client Type 77 (Windows x86) - Remote Overflow (Metasploit)
Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a l
50RISK
open ↗Exploit-DB✓ VexDay Proof
YahooPOPs (YPOPS) 0.6 - Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denial
60RISK
open ↗Exploit-DB✓ VexDay Proof
Logitech VideoCall - ActiveX Control Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in ActiveX controls (1) VibeC in (a) vibecontrol.dll, (2) CallManager and (3) View
50RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.