Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
19,067 exploits
Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'LoginAttempts.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - '/implementation/Management/configuration.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'image.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'Language.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'UrlType.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'Country.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'IssuePublish.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
HP Tru64 5.0.1 - DOP Command Privilege Escalation
Unspecified vulnerability in dop in HP Tru64 UNIX 5.1B-4, 5.1B-3, and 5.1A PK6 allows local users to gain privileges via
23RISK
open ↗Exploit-DB✓ VexDay Proof
SmartCode VNC Manager 3.6 - 'scvncctrl.dll' Denial of Service
Heap-based buffer overflow in the ConnectAsyncEx function in VNC Viewer ActiveX control (scvncctrl.dll) in the SmartCode
23RISK
open ↗Exploit-DB✓ VexDay Proof
Advanced Guestbook 2.4.2 - 'picture.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in picture.php in Advanced Guestbook 2.4.2 allows remote attackers to inject ar
23RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe RoboHelp - Frameset-7.HTML Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote attackers to inject arbitra
28RISK
open ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'Section.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'Publication.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'SubscriptionSection.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - '/implementation/Management/db_connect.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
IncrediMail IMMenuShellExt - ActiveX Control Buffer Overflow
Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail IMMenuShellExt ActiveX control (ImShExt.d
35RISK
open ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'SubscriptionDefaultTime.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'ArticleTopic.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'Event.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'topic.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'ArticleType.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
OTRS 2.0.4 - index.pl Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.pl in Open Ticket Request System (OTRS) 2.0.x allows remote attackers
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHP PEAR 1.5.3 - INSTALL-AS Attribute Arbitrary File Overwrite
Directory traversal vulnerability in the installer in PEAR 1.0 through 1.5.3 allows user-assisted remote attackers to ov
23RISK
open ↗Exploit-DB✓ VexDay Proof
Trend Micro ServerProtect 5.58 - 'SpntSvc.exe' Remote Stack Buffer Overflow
Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote
60RISK
open ↗Exploit-DB✓ VexDay Proof
ELinks Relative 0.10.6/011.1 - Path Arbitrary Code Execution
Untrusted search path vulnerability in the add_filename_to_string function in intl/gettext/loadmsgcat.c for Elinks 0.11.
23RISK
open ↗Exploit-DB✓ VexDay Proof
SunShop Shopping Cart 4.0 - 'index.php' Multiple SQL Injections
SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to execute
23RISK
open ↗Exploit-DB✓ VexDay Proof
SunShop Shopping Cart 4.0 - 'index.php?l' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attacke
23RISK
open ↗Exploit-DB✓ VexDay Proof
Versalsoft HTTP File Uploader - ActiveX 6.36 AddFile Remote Denial of Service
Buffer overflow in the AddFile function in VersalSoft HTTP File Upload ActiveX control (UFileUploaderD.dll) allows remot
23RISK
open ↗Exploit-DB✓ VexDay Proof
FipsCMS 2.1 - 'pid' SQL Injection
SQL injection vulnerability in index.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via th
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft SharePoint Server 3.0 - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003
35RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.