Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
19,067 exploits
Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x Kernel - 'shared_region_map_file_np()' Memory Corruption
The shared_region_map_file_np function in Apple Mac OS X 10.4.8 and earlier kernel allows local users to cause a denial
23RISK
open ↗Exploit-DB✓ VexDay Proof
Upload Service 1.0 - 'top.php?maindir' Remote File Inclusion
PHP remote file inclusion vulnerability in upload/top.php in Upload-Service 1.0, when register_globals is enabled, allow
23RISK
open ↗Exploit-DB✓ VexDay Proof
3Com TFTP Service (3CTftpSvc) 2.0.1 - Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a d
60RISK
open ↗Exploit-DB✓ VexDay Proof
Apple iChat 3.1.6 441 - 'aim://' URL Handler Format String (PoC)
Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service (null pointer dere
28RISK
open ↗Exploit-DB✓ VexDay Proof
SMF 1.1 - 'index.php' HTML Injection
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Simple Machines Forum (SMF) 1.1 RC3 allow remote aut
23RISK
open ↗Exploit-DB✓ VexDay Proof
MySpeach 2.1b - 'up.php' Remote File Inclusion
PHP remote file inclusion vulnerability in up.php in Sky GUNNING MySpeach 3.0.6 and earlier allows remote attackers to e
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Help Workshop 4.03.0002 - '.HPJ' Local Buffer Overflow
Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitr
35RISK
open ↗Exploit-DB✓ VexDay Proof
Rumpus 5.1 - Local Privilege Escalation / Remote FTP LIST
Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote authenticated users to execut
23RISK
open ↗Exploit-DB✓ VexDay Proof
HP JetDirect FTP Print Server - 'RERT' Denial of Service
The FTP service in HP JetDirect print servers allows remote attackers to cause a denial of service (engine crash) via a
23RISK
open ↗Exploit-DB✓ VexDay Proof
ArsDigita Community System 3.4.x - Directory Traversal
Directory traversal vulnerability in ArsDigita Community System (ACS) 3.4.10 and earlier, and ArsDigita Community Educat
23RISK
open ↗Exploit-DB✓ VexDay Proof
avm fritz!dsl igd control service 2.2.29 - Directory Traversal Information Disclosure
Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbi
23RISK
open ↗Exploit-DB✓ VexDay Proof
MyBloggie 2.1.5 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5 allows remote attackers t
23RISK
open ↗Exploit-DB✓ VexDay Proof
Woltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (3)
SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in the
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Help Workshop 4.03.0002 - '.cnt' Local Buffer Overflow
Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitr
35RISK
open ↗Exploit-DB✓ VexDay Proof
KarjaSoft Sami FTP Server 2.0.2 - USER/PASS Remote Buffer Overflow
Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER c
60RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - VML Download and Execute (MS07-004)
Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, an
35RISK
open ↗Exploit-DB✓ VexDay Proof
MyBloggie 2.1.5 - 'login.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5 allows remote attackers t
23RISK
open ↗Exploit-DB✓ VexDay Proof
Oracle January 2007 Security Update - Multiple Vulnerabilities
Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.11 and 8.48.06 has unknown i
23RISK
open ↗Exploit-DB✓ VexDay Proof
DT_Guestbook 1.0 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in DT Guestbook (dt_guestbook) 1.0f, when register_globals is enab
23RISK
open ↗Exploit-DB✓ VexDay Proof
Squid Proxy 2.5/2.6 - FTP URI Remote Denial of Service
squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via craft
28RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'power_search.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'suggest_category.php?Error_msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'upgrade.php?gateway' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'send_pwd.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'new.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - VML Remote Buffer Overflow (MS07-004)
Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, an
35RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'Sendmail.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'register.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'tell_friend.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'search.php?keyword' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.