Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
24,696 exploits
Exploit-DB✓ VexDay Proof
Microsoft Windows XP/Vista - Animated Cursor '.ani' Remote Overflow
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attack
60RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Animated Cursor '.ani' Remote (eeye patch Bypass)
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attack
60RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Animated Cursor '.ani' Remote (eeye patch Bypass)
Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code
50RISK
open ↗Exploit-DB✓ VexDay Proof
WinMail Server 4.4 build 1124 - 'WebMail' Remote Add Super User
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows rem
23RISK
open ↗Exploit-DB✓ VexDay Proof
Symantec (Multiple Products) - 'SPBBCDrv' Driver Local Denial of Service
SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before b
23RISK
open ↗Exploit-DB✓ VexDay Proof
IPSwitch IMail Server 8.20 - IMAPD Remote Buffer Overflow
Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), a
35RISK
open ↗Exploit-DB✓ VexDay Proof
PHP-Fusion 6.1.5 Mod Calendar_Panel - 'Show_Event.php' SQL Injection
SQL injection vulnerability in show_event.php in the Expanded Calendar (calendar_panel) 2.00 module for PHP-Fusion allow
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Animated Cursor '.ani' Local Stack Overflow
Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code
50RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Animated Cursor '.ani' Local Stack Overflow
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attack
60RISK
open ↗Exploit-DB✓ VexDay Proof
PHP 5.1.6 - 'Msg_Receive()' Memory Allocation Integer Overflow
Integer overflow in the msg_receive function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1, on FreeBSD and possibly other
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHP 5.1.6 - 'Imap_Mail_Compose()' Remote Buffer Overflow
Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers
28RISK
open ↗Exploit-DB✓ VexDay Proof
IBM Lotus Domino Server 6.5 - Remote Overflow
Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.6
35RISK
open ↗Exploit-DB✓ VexDay Proof
JC URLShrink 1.3.1 - Remote Code Execution
JCcorp URLshrink 1.3.1 allows remote attackers to execute arbitrary PHP code via the email address field in an HTML link
23RISK
open ↗Exploit-DB✓ VexDay Proof
Snort 2.6.1 (Linux) - DCE/RPC Preprocessor Remote Buffer Overflow
Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire I
60RISK
open ↗Exploit-DB✓ VexDay Proof
dproxy-nexgen (Linux x86) - Remote Buffer Overflow
Stack-based buffer overflow in the dns_decode_reverse_name function in dns_decode.c in dproxy-nexgen allows remote attac
28RISK
open ↗Exploit-DB✓ VexDay Proof
Drake CMS 0.3.7 - '404.php' Local File Inclusion
Directory traversal vulnerability in 404.php in Drake CMS allows remote attackers to include and execute arbitrary local
23RISK
open ↗Exploit-DB✓ VexDay Proof
CA BrightStor Backup 11.5.2.0 - 'Mediasvr.exe' Remote Code
The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute
28RISK
open ↗Exploit-DB✓ VexDay Proof
IBM Lotus Domino Server 6.5 - 'Username' Remote Denial of Service
Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.6
35RISK
open ↗Exploit-DB✓ VexDay Proof
PHP 5.2.1 - 'Session.Save_Path()' TMPDIR open_basedir Restriction Bypass
PHP 4 before 4.4.5 and PHP 5 before 5.2.1, when using an empty session save path (session.save_path), uses the TMPDIR de
23RISK
open ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.20 with DCCP Support - Memory Disclosure (2)
Integer signedness error in the DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.
23RISK
open ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.20 with DCCP Support - Memory Disclosure (2)
The DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later does not verify
23RISK
open ↗Exploit-DB✓ VexDay Proof
XOOPS module Articles 1.03 - 'index.php?cat_id' SQL Injection
SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to ex
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHP 4.4.5/4.4.6 - 'session_decode()' Double-Free (PoC)
Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbit
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHP 4.4.4 - 'Zip_Entry_Read()' Integer Overflow
Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code
28RISK
open ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.20 with DCCP Support - Memory Disclosure (1)
Integer signedness error in the DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.
23RISK
open ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.20 with DCCP Support - Memory Disclosure (1)
The DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later does not verify
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - Recordset Double-Free Memory (MS07-009)
Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating
28RISK
open ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - IPv6_SockGlue.c Null Pointer Dereference Denial of Service
The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and possibly other versions,
23RISK
open ↗Exploit-DB✓ VexDay Proof
Easy File Sharing FTP Server 2.0 (Windows 2000 SP4) - 'PASS' Remote Overflow
Stack-based buffer overflow in EFS Software Easy File Sharing FTP Server 2.0 allows remote attackers to execute arbitrar
50RISK
open ↗Exploit-DB✓ VexDay Proof
Mephisto Blog 0.7.3 - Search Function Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Mephisto 0.7.3 allows remote attackers to inject arbitrary web script or HTM
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.