Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
75,589cataloged exploits
34,508CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,554GitHub PoC 13,689VulnCheck XDB 8,216Nuclei 4,223Metasploit 3,464✓ verified onlyrecentpopularrisk
24,443 exploits
Exploit-DB✓ VexDay Proof
Ability Mail Server 2013 3.1.1 - Web UI Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Code-Crafters Ability Mail Server 3.1.1 allows remote attackers to inject ar
23RISK
open ↗Exploit-DB✓ VexDay Proof
WordPress Core 2.0.11 - '/wp-admin/options-discussion.php' Script Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in the retrospam component in wp-admin/options-discussion.php in WordPre
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - 'ndproxy.sys' Local Privilege Escalation (Metasploit)
NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges
98RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Reader ToolButton - Use-After-Free (Metasploit)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitr
100RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Kernel - 'win32k.sys' Integer Overflow (MS13-101)
Integer overflow in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista
23RISK
open ↗Exploit-DB
InstantCMS 1.10.3 - Blind SQL Injection
SQL injection vulnerability in InstantSoft InstantCMS 1.10.3 and earlier allows remote attackers to execute arbitrary SQ
23RISK
open ↗Exploit-DB
Ditto Forensic FieldStation 2013Oct15a - Multiple Vulnerabilities
Cross-site request forgery (CSRF) vulnerability in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allow
23RISK
open ↗Exploit-DB
PHP - 'openssl_x509_parse()' Memory Corruption
The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.
35RISK
open ↗Exploit-DB
Ditto Forensic FieldStation 2013Oct15a - Multiple Vulnerabilities
The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default "ditto" username and
28RISK
open ↗Exploit-DB✓ VexDay Proof
Nvidia (nvsvc) Display Driver Service - Local Privilege Escalation (Metasploit)
The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does not
38RISK
open ↗Exploit-DB
Wallpaper Script 3.5.0082 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitr
23RISK
open ↗Exploit-DB
UPC Ireland Cisco EPC 2425 Router / Horizon Box - WPA-PSK Handshake Information
The UPC Ireland Cisco EPC 2425 router (aka Horizon Box) does not have a sufficiently large number of possible WPA-PSK pa
23RISK
open ↗Exploit-DB✓ VexDay Proof
C2C Forward Auction Creator 2.0 - '/auction/asp/list.asp?pa' SQL Injection
Multiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers to execute arbitrary SQ
23RISK
open ↗Exploit-DB✓ VexDay Proof
C2C Forward Auction Creator - '/auction/casp/Admin.asp' SQL Injection (Admin Authentication Bypass)
Multiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers to execute arbitrary SQ
23RISK
open ↗Exploit-DB
Linux Kernel 2.6.10 < 2.6.31.5 - 'pipe.c' Local Privilege Escalation
Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of servi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Icinga - cgi/config.c process_cgivars Function Off-by-One Read Remote Denial of Service
Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10
35RISK
open ↗Exploit-DB
Cisco EPC3925 - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in goform/Quick_setup on Cisco EPC3925 devices allows remote attackers t
23RISK
open ↗Exploit-DB✓ VexDay Proof
Gitlab 6.0 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in GitLab 6.0 and other versions before 6.5.0 allows remote attackers to inject
23RISK
open ↗Exploit-DB✓ VexDay Proof
iScripts AutoHoster - 'tmpid' Local File Inclusion
Multiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to read arbitr
23RISK
open ↗Exploit-DB✓ VexDay Proof
iScripts AutoHoster - 'invno' SQL Injection
Multiple SQL injection vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to execute arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
iScripts AutoHoster - 'additionalsettings.php' SQL Injection
Multiple SQL injection vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to execute arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
iScripts AutoHoster - 'id' Local File Inclusion
Multiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to read arbitr
23RISK
open ↗Exploit-DB✓ VexDay Proof
iScripts AutoHoster - 'checktransferstatus.php' SQL Injection
Multiple SQL injection vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to execute arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
iScripts AutoHoster - 'main_smtp.php' Traversal
Multiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to read arbitr
23RISK
open ↗Exploit-DB✓ VexDay Proof
iScripts AutoHoster - 'checktransferstatusbck.php' SQL Injection
Multiple SQL injection vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to execute arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
iScripts AutoHoster - 'fname' Local File Inclusion
Multiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to read arbitr
23RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component Projoom NovaSFH 3.0.2 - 'upload.php' Arbitrary File Upload
views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla! allows remote attac
23RISK
open ↗Exploit-DB✓ VexDay Proof
Dynamic Biz Website Builder 'QuickWeb' 1.0 - '/login.asp' Multiple Field SQL Injections / Authentication Bypass
Multiple SQL injection vulnerabilities in Dynamic Biz Website Builder (QuickWeb) allow remote attackers to execute arbit
23RISK
open ↗Exploit-DB✓ VexDay Proof
Dynamic Biz Website Builder (QuickWeb) 1.0 - '/apps/news-events/newdetail.asp?id' SQL Injection
Multiple SQL injection vulnerabilities in Dynamic Biz Website Builder (QuickWeb) allow remote attackers to execute arbit
23RISK
open ↗Exploit-DB✓ VexDay Proof
Nagios XI - 'tfPassword' SQL Injection
SQL injection vulnerability in functions/prepend_adm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allo
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.