Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,508cataloged exploits
40,258CVEs with public exploitation
24,696lab-tested
AllReferência 26,095Exploit-DB 24,488GitHub PoC 17,831VulnCheck XDB 10,015Nuclei 4,547Metasploit 3,532✓ verified onlyrecentpopularrisk
19,067 exploits
Exploit-DB✓ VexDay Proof
RKD Software BarCode ActiveX Control 'BarCodeAx.dll' 4.9 - Remote Stack Buffer Overflow (Metasploit)
Stack-based buffer overflow in the BeginPrint method in a certain ActiveX control in RKD Software (barcodetools.com) Bar
50RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Whale Intelligent Application Gateway - ActiveX Control Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft
50RISK
open ↗Exploit-DB✓ VexDay Proof
Logitech VideoCall - ActiveX Control Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in ActiveX controls (1) VibeC in (a) vibecontrol.dll, (2) CallManager and (3) View
50RISK
open ↗Exploit-DB✓ VexDay Proof
DATAC RealWin SCADA Server - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in RealFlex Technologies Ltd. RealWin Server 2.0, as distributed by DATAC, allows remote att
50RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft RRAS Service - Remote Overflow (MS06-025) (Metasploit)
Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Serve
60RISK
open ↗Exploit-DB✓ VexDay Proof
XMPlay 3.3.0.4 - '.ASX' Filename Buffer Overflow (Metasploit)
Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via
50RISK
open ↗Exploit-DB✓ VexDay Proof
Novell NetMail 3.52d - NMAP STOR Buffer Overflow (Metasploit)
Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by ap
50RISK
open ↗Exploit-DB✓ VexDay Proof
MySQL yaSSL (Windows) - SSL Hello Message Buffer Overflow (Metasploit)
Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attacke
60RISK
open ↗Exploit-DB✓ VexDay Proof
Novell NetWare - LSASS CIFS.NLM Driver Stack Buffer Overflow (Metasploit)
Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a den
50RISK
open ↗Exploit-DB✓ VexDay Proof
IBM Lotus Domino Sametime - 'STMux.exe' Remote Stack Buffer Overflow (Metasploit)
Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1
60RISK
open ↗Exploit-DB✓ VexDay Proof
BigAnt Server 2.2 - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt Messenger 2.2 allows r
60RISK
open ↗Exploit-DB✓ VexDay Proof
HP LoadRunner 9.0 - ActiveX AddFolder Buffer Overflow (Metasploit)
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions befo
50RISK
open ↗Exploit-DB✓ VexDay Proof
IBM Tivoli Storage Manager Express CAD Service - Remote Buffer Overflow (Metasploit) (1)
Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (T
50RISK
open ↗Exploit-DB✓ VexDay Proof
PSOProxy 0.91 - Stack Buffer Overflow (Metasploit)
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod
50RISK
open ↗Exploit-DB✓ VexDay Proof
Kazaa Altnet Download Manager - ActiveX Control Buffer Overflow (Metasploit)
Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in (1) K
43RISK
open ↗Exploit-DB✓ VexDay Proof
Medal of Honor Allied Assault - getinfo Stack Buffer Overflow (Metasploit)
Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spe
50RISK
open ↗Exploit-DB✓ VexDay Proof
Mercury/32 Mail Server 4.01a - IMAP RENAME Buffer Overflow (Metasploit)
Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of
60RISK
open ↗Exploit-DB✓ VexDay Proof
MiniShare 1.4.1 - Remote Buffer Overflow (Metasploit)
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET req
60RISK
open ↗Exploit-DB✓ VexDay Proof
Symantec Altiris Deployment Solution - ActiveX Control Buffer Overflow (Metasploit)
Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilitie
50RISK
open ↗Exploit-DB✓ VexDay Proof
Apple QuickTime 7.3 - RTSP Response Header Buffer Overflow (Metasploit)
Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac
50RISK
open ↗Exploit-DB✓ VexDay Proof
Alibaba Clone 3.0 (Special) - SQL Injection
SQL injection vulnerability in offers_buy.php in Alibaba Clone 3.0 allows remote attackers to execute arbitrary SQL comm
23RISK
open ↗Exploit-DB✓ VexDay Proof
Knox Arkeia Backup Client Type 77 (OSX) - Remote Overflow (Metasploit)
Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a l
50RISK
open ↗Exploit-DB✓ VexDay Proof
Novell iPrint Client - ActiveX Control Date/Time Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow
50RISK
open ↗Exploit-DB✓ VexDay Proof
Oracle Secure Backup - NDMP_CONNECT_CLIENT_AUTH Buffer Overflow (Metasploit)
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers
50RISK
open ↗Exploit-DB✓ VexDay Proof
LANDesk Management Suite 8.7 - Alert Service Buffer Overflow (Metasploit)
Stack-based buffer overflow in the Alert Service (aolnsrvr.exe) in LANDesk Management Suite 8.7 allows remote attackers
60RISK
open ↗Exploit-DB✓ VexDay Proof
TrackerCam - PHP Argument Buffer Overflow (Metasploit)
Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possibl
50RISK
open ↗Exploit-DB✓ VexDay Proof
Apple iTunes 4.7 - Playlist Buffer Overflow (Metasploit)
Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2)
50RISK
open ↗Exploit-DB✓ VexDay Proof
SHTTPD 1.34 (Windows x86) - URI-Encoded POST Request Overflow (Metasploit)
Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary cod
50RISK
open ↗Exploit-DB✓ VexDay Proof
Symantec Norton Internet Security 2004 - ActiveX Control Buffer Overflow (Metasploit)
Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Sec
50RISK
open ↗Exploit-DB✓ VexDay Proof
Oracle Document Capture 10g - ActiveX Control Buffer Overflow (Metasploit)
Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used
50RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.