Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,508cataloged exploits
40,258CVEs with public exploitation
24,696lab-tested
AllReferência 26,095Exploit-DB 24,488GitHub PoC 17,831VulnCheck XDB 10,015Nuclei 4,547Metasploit 3,532✓ verified onlyrecentpopularrisk
19,067 exploits
Exploit-DB✓ VexDay Proof
TABS MailCarrier 2.51 - SMTP EHLO Overflow (Metasploit)
Buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long (1) EHLO and possibly (
50RISK
open ↗Exploit-DB✓ VexDay Proof
CA BrightStor Agent for Microsoft SQL - Remote Overflow (Metasploit)
Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Ser
50RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft SQL Server - Hello Overflow (MS02-056) (Metasploit)
Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 al
60RISK
open ↗Exploit-DB✓ VexDay Proof
Trend Micro ServerProtect 5.58 - Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance F
60RISK
open ↗Exploit-DB✓ VexDay Proof
ec21 clone 3.0 - 'id' SQL Injection
SQL injection vulnerability in offers_buy.php in EC21 Clone 3.0 allows remote attackers to execute arbitrary SQL command
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0 - '.htr' Path Overflow (MS02-018) (Metasploit)
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .
60RISK
open ↗Exploit-DB✓ VexDay Proof
Computer Associates ARCserve - REPORTREMOTEEXECUTECML Buffer Overflow (Metasploit)
Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve
60RISK
open ↗Exploit-DB✓ VexDay Proof
Trend Micro ServerProtect 5.58 - 'EarthAgent.exe' Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote
60RISK
open ↗Exploit-DB✓ VexDay Proof
Solaris dtspcd - Remote Heap Overflow (Metasploit)
Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remo
60RISK
open ↗Exploit-DB✓ VexDay Proof
ProSysInfo TFTP server TFTPDWIN 0.4.2 - 'Filename' Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers to
50RISK
open ↗Exploit-DB✓ VexDay Proof
Computer Associates - Alert Notification Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.
50RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft OWC Spreadsheet - HTMLURL Buffer Overflow (MS09-043) (Metasploit)
Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3,
50RISK
open ↗Exploit-DB✓ VexDay Proof
Timbuktu 8.6.6 - PlughNTCommand Named Pipe Buffer Overflow (Metasploit)
Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code
50RISK
open ↗Exploit-DB✓ VexDay Proof
BaoFeng Storm - 'mps.dll' ActiveX OnBeforeVideoDownload Buffer Overflow (Metasploit)
Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote
50RISK
open ↗Exploit-DB✓ VexDay Proof
CA BrightStor Discovery Service - TCP Overflow (Metasploit)
Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execu
60RISK
open ↗Exploit-DB✓ VexDay Proof
Barracuda - IMG.pl Remote Command Execution (Metasploit)
img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary comman
50RISK
open ↗Exploit-DB✓ VexDay Proof
SpamAssassin spamd - Remote Command Execution (Metasploit)
SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute a
60RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe - 'Collab.getIcon()' Local Buffer Overflow (Metasploit) (1)
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows r
100RISK
open ↗Exploit-DB✓ VexDay Proof
PAJAX - Remote Command Execution (Metasploit)
Eval injection vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to execute
50RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft SQL Server - Resolution Overflow (MS02-039) (Metasploit)
Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSD
60RISK
open ↗Exploit-DB✓ VexDay Proof
Cyrus IMAPD - pop3d popsubfolders USER Buffer Overflow (Metasploit)
Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders option is enabled, allow
50RISK
open ↗Exploit-DB✓ VexDay Proof
UltraISO - '.cue' File Parsing Buffer Overflow (Metasploit)
Stack-based buffer overflow in UltraISO 8.6.2.2011 and earlier allows user-assisted remote attackers to execute arbitrar
50RISK
open ↗Exploit-DB✓ VexDay Proof
WinZip FileView - 'WZFILEVIEW.FileViewCtrl.61' ActiveX Buffer Overflow (Metasploit)
The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before buil
50RISK
open ↗Exploit-DB✓ VexDay Proof
HT-MP3Player 1.0 - '.HT3' File Parsing Buffer Overflow (Metasploit)
Stack-based buffer overflow in HT-MP3Player 1.0 allows remote attackers to execute arbitrary code via a long string in a
50RISK
open ↗Exploit-DB✓ VexDay Proof
JobPost - SQL Injection
SQL injection vulnerability in type.asp in JobPost 1.0 allows remote attackers to execute arbitrary SQL commands via the
23RISK
open ↗Exploit-DB✓ VexDay Proof
FileCOPA FTP Server (Pre 18 Jul Version) - 'LIST' Remote Buffer Overflow (Metasploit)
Buffer overflow in FileCOPA FTP Server before 1.01 released on 18th July 2006, allows remote authenticated attackers to
50RISK
open ↗Exploit-DB✓ VexDay Proof
SHOUTcast DNAS/Win32 1.9.4 - File Request Format String Overflow (Metasploit)
Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash)
60RISK
open ↗Exploit-DB✓ VexDay Proof
Roxio CinePlayer - ActiveX Control Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute
50RISK
open ↗Exploit-DB✓ VexDay Proof
AutoDealer 1.0/2.0 - MSSQL Injection
SQL injection vulnerability in detail.asp in ASP SiteWare autoDealer 2.0 and earlier allows remote attackers to execute
23RISK
open ↗Exploit-DB✓ VexDay Proof
Icecast 2.0.1 (Windows x86) - Header Overwrite (Metasploit)
Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with
60RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.