Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
80,557cataloged exploits
37,313CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,478Referência 23,776GitHub PoC 15,367VulnCheck XDB 9,019Nuclei 4,415Metasploit 3,502✓ verified onlyrecentpopularrisk
19,066 exploits
Exploit-DB✓ VexDay Proof
Netrek 2.12.0 - 'pmessage2()' Remote Limited Format String
Format string vulnerability in the new_warning function in ntserv/warning.c for Netrek Vanilla Server 2.12.0, when EVENT
23RISK
open ↗Exploit-DB✓ VexDay Proof
WordPress Core 2.1.1 - '/wp-includes/theme.php?iz' Arbitrary Command Execution
WordPress 2.1.1, as downloaded from some official distribution sites during February and March 2007, contains an externa
28RISK
open ↗Exploit-DB✓ VexDay Proof
Built2go News Manager 1.0 Blog - 'rating.php?nid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in built2go News Manager Blog 1.0 allow remote attackers to inject a
23RISK
open ↗Exploit-DB✓ VexDay Proof
aWebNews 1.1 - 'listing.php?path_to_news' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in aWeb Labs aWebNews 1.5 allow remote attackers to execute arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHP 4/5 - Executor Deep Recursion Remote Denial of Service
PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executing a recursive funct
23RISK
open ↗Exploit-DB✓ VexDay Proof
Built2go News Manager 1.0 Blog - 'news.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in built2go News Manager Blog 1.0 allow remote attackers to inject a
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHP 3/4/5 - ZendEngine Variable Destruction Remote Denial of Service
The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (sta
28RISK
open ↗Exploit-DB✓ VexDay Proof
PHP 4 - Userland ZVAL Reference Counter Overflow (PoC)
Integer overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent attackers to execute arbitra
53RISK
open ↗Exploit-DB✓ VexDay Proof
PHP < 4.5.0 - Unserialize Overflow (Metasploit)
Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long
50RISK
open ↗Exploit-DB✓ VexDay Proof
tcpdump - Print-bgp.C Remote Integer Underflow
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arb
70RISK
open ↗Exploit-DB✓ VexDay Proof
Snort 2.6.1 - DCE/RPC Preprocessor Remote Buffer Overflow
Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire I
60RISK
open ↗Exploit-DB✓ VexDay Proof
Madwifi 0.9.2.1 - WPA/RSN IE Remote Kernel Buffer Overflow
Stack-based buffer overflow in net80211/ieee80211_wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execut
28RISK
open ↗Exploit-DB✓ VexDay Proof
Comodo Firewall Pro 2.4.x - Local Protection Mechanism Bypass
Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass driver
23RISK
open ↗Exploit-DB✓ VexDay Proof
phpMyFAQ 1.6.7 - SQL Injection / Command Execution
SQL injection vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apache 1.3.34/1.3.33 (Ubuntu / Debian) - CGI TTY Privilege Escalation
The Debian GNU/Linux 033_-F_NO_SETSID patch for the Apache HTTP Server 1.3.34-4 does not properly disassociate httpd fro
23RISK
open ↗Exploit-DB✓ VexDay Proof
McAfee VirusScan for Mac (Virex) 7.7 - Local Privilege Escalation
VShieldCheck in McAfee VirusScan for Mac (Virex) before 7.7 patch 1 allow local users to change permissions of arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
HyperBook Guestbook 1.3 - GBConfiguration.DAT Hashed Password Information Disclosure
Thomas R. Pasawicz HyperBook Guestbook 1.30 stores sensitive information under the web root with insufficient access con
23RISK
open ↗Exploit-DB✓ VexDay Proof
EmbeddedWB Web Browser ActiveX Control - Remote Code Execution
Unspecified vulnerability in the EmbeddedWB Web Browser ActiveX control allows remote attackers to execute arbitrary cod
23RISK
open ↗Exploit-DB✓ VexDay Proof
Adobe Acrobat/Adobe Reader 7.0.9 - Information Disclosure
Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as de
23RISK
open ↗Exploit-DB✓ VexDay Proof
3Com TFTP Service (3CTftpSvc) 2.0.1 - Long Transporting Mode
Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a d
60RISK
open ↗Exploit-DB✓ VexDay Proof
Kiwi CatTools TFTP 3.2.8 - Directory Traversal
Directory traversal vulnerability in the TFTP server in Kiwi CatTools before 3.2.0 beta allows remote attackers to read
23RISK
open ↗Exploit-DB✓ VexDay Proof
Nullsoft SHOUTcast 1.9.7 - Logfile HTML Injection
Cross-site scripting (XSS) vulnerability in the Nullsoft ShoutcastServer 1.9.7 allows remote attackers to inject arbitra
23RISK
open ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - Audit Subsystems Local Denial of Service
The file watch implementation in the audit subsystem (auditctl -w) in the Red Hat Enterprise Linux (RHEL) 4 kernel 2.6.9
23RISK
open ↗Exploit-DB✓ VexDay Proof
Oracle 9i/10g DBMS_METADATA.GET_DDL - SQL Injection (2)
SQL injection vulnerability in the SYS.DBMS_METADATA_UTIL package in Oracle Database 10g, and possibly earlier versions,
23RISK
open ↗Exploit-DB✓ VexDay Proof
SQLiteManager 1.2 - 'main.php' Multiple HTML Injection Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.0 allow remote attackers to inject arbitrary we
23RISK
open ↗Exploit-DB✓ VexDay Proof
SolarPay - 'index.php' Local File Inclusion
Directory traversal vulnerability in index.php in SolarPay allows remote attackers to read certain files via a .. (dot d
23RISK
open ↗Exploit-DB✓ VexDay Proof
Audins Audiens 3.3 - '/system/index.php?Cookie PHPSESSID' SQL Injection
SQL injection vulnerability in system/index.php in Audins Audiens 3.3 allows remote attackers to execute arbitrary SQL c
23RISK
open ↗Exploit-DB✓ VexDay Proof
WordPress Core 2.1.1 - 'post.php' Cross-Site Scripting
Cross-site request forgery (CSRF) vulnerability in the AdminPanel in WordPress 2.1.1 and earlier allows remote attackers
23RISK
open ↗Exploit-DB✓ VexDay Proof
Tyger Bug Tracking System 1.1.3 - 'register.php?PATH_INFO' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Tyger Bug Tracking System (TygerBT) 1.1.3 allow remote attackers
23RISK
open ↗Exploit-DB✓ VexDay Proof
Audins Audiens 3.3 - 'setup.php?PATH_INFO' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in setup.php in Audins Audiens 3.3 allows remote attackers to inject arbitrary
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.