Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
76,496cataloged exploits
34,964CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,899GitHub PoC 13,937VulnCheck XDB 8,510Nuclei 4,239Metasploit 3,468✓ verified onlyrecentpopularrisk
24,443 exploits
Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'Snmp.exe' CGI Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote att
60RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Exchange Server 2000 - XEXCH50 Heap Overflow (MS03-046) (Metasploit)
The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service
60RISK
open ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'ovalarm.exe' CGI Buffer Overflow (Metasploit)
Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remo
50RISK
open ↗Exploit-DB✓ VexDay Proof
SafeNet SoftRemote - GROUPNAME Buffer Overflow (Metasploit)
Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions bef
38RISK
open ↗Exploit-DB✓ VexDay Proof
IBM Access Support - ActiveX Control Buffer Overflow (Metasploit)
Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as dist
50RISK
open ↗Exploit-DB✓ VexDay Proof
Electronic Arts SnoopyCtrl - ActiveX Control Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote attac
50RISK
open ↗Exploit-DB✓ VexDay Proof
feedDemon 3.1.0.12 - Local Stack Buffer Overflow (Metasploit)
Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbi
50RISK
open ↗Exploit-DB✓ VexDay Proof
VUPlayer - '.m3u' Local Buffer Overflow (Metasploit)
Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long st
50RISK
open ↗Exploit-DB✓ VexDay Proof
IBM Lotus Domino Web Server - Accept-Language Stack Buffer Overflow (Metasploit)
Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows
50RISK
open ↗Exploit-DB✓ VexDay Proof
Xlink FTP Server - Remote Buffer Overflow (Metasploit)
Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute arbitrary code via unspecified
50RISK
open ↗Exploit-DB✓ VexDay Proof
Xlink FTP Client - Remote Buffer Overflow (Metasploit)
Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute arbitrary code via unspecified
50RISK
open ↗Exploit-DB✓ VexDay Proof
Opera historysearch - Cross-Site Scripting (Metasploit)
Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary w
50RISK
open ↗Exploit-DB✓ VexDay Proof
Persits XUpload - ActiveX MakeHttpRequest Directory Traversal (Metasploit)
Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows rem
50RISK
open ↗Exploit-DB✓ VexDay Proof
AIX Calendar Manager Service Daemon (rpc.cmsd) Opcode 21 - Buffer Overflow (Metasploit)
Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through
50RISK
open ↗Exploit-DB✓ VexDay Proof
CA AntiVirus Engine - CAB Buffer Overflow (Metasploit)
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associ
50RISK
open ↗Exploit-DB✓ VexDay Proof
WeBid 0.85P1 - Multiple Input Validation Vulnerabilities
Cross-site scripting (XSS) vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers to inject arbitrary we
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHPShop 2.1 EE - 'name_new' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in register.html in PHPShop 2.1 EE and earlier allows remote attackers to injec
23RISK
open ↗Exploit-DB
IBM OmniFind Crawler - Denial of Service
IBM OmniFind Enterprise Edition 8.x and 9.x performs web crawls with an unlimited recursion depth, which allows remote w
23RISK
open ↗Exploit-DB✓ VexDay Proof
Novell Groupwise Internet Agent - IMAP 'LIST LSUB' Remote Code Execution
Multiple stack-based buffer overflows in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWis
23RISK
open ↗Exploit-DB✓ VexDay Proof
IBM OmniFind - 'command' Cross-Site Scripting
The administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x does not restrict use of a session ID (aka SI
23RISK
open ↗Exploit-DB
IBM OmniFind - Local Privilege Escalation
esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges by specifying an arbitr
23RISK
open ↗Exploit-DB✓ VexDay Proof
Oracle MySQL < 5.1.49 - 'WITH ROLLUP' Denial of Service
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2)
28RISK
open ↗Exploit-DB✓ VexDay Proof
Novell Groupwise Internet Agent - IMAP 'LIST' Remote Code Execution
Double free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.0
28RISK
open ↗Exploit-DB
IBM OmniFind - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in ESAdmin/security.do in the administrator interface in IBM OmniFind En
23RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component JQuarks4s 1.0.0 - Blind SQL Injection
SQL injection vulnerability in the submitSurvey function in controller.php in JQuarks4s (com_jquarks4s) component 1.0.0
23RISK
open ↗Exploit-DB
IBM OmniFind - Local Privilege Escalation
Untrusted search path vulnerability in estaskwrapper in IBM OmniFind Enterprise Edition before 9.1 allows local users to
23RISK
open ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - 'net/core/filter.c' Local Information Disclosure
The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain mem
23RISK
open ↗Exploit-DB
IBM OmniFind - Buffer Overflow
Stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function in /opt/IBM/es/lib/libffq.crypt
28RISK
open ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Vodpod Video Gallery 3.1.5 - 'vodpod_gallery_thumbs.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in vodpod-video-gallery/vodpod_gallery_thumbs.php in the Vodpod Video Gallery P
23RISK
open ↗Exploit-DB✓ VexDay Proof
pfSense - 'interfaces.php?if' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in pfSense 2 beta 4 allow remote attackers to inject arbitrary web s
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.