Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,464cataloged exploits
40,695CVEs with public exploitation
24,696lab-tested
AllReferência 26,426Exploit-DB 24,489GitHub PoC 18,182VulnCheck XDB 10,251Nuclei 4,577Metasploit 3,539✓ verified onlyrecentpopularrisk
24,696 exploits
Exploit-DB✓ VexDay Proof
Siemens S55 - Cellular Telephone Sms Confirmation Message Bypass
GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized SM
23RISK
open ↗Exploit-DB✓ VexDay Proof
DiGi WWW Server 1 - Remote Denial of Service
DiGi Web Server allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request that cont
23RISK
open ↗Exploit-DB✓ VexDay Proof
OpenBB 1.0.x - 'myhome.php?to' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote atta
38RISK
open ↗Exploit-DB✓ VexDay Proof
OpenBB 1.0.x - 'member.php?redirect' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote atta
38RISK
open ↗Exploit-DB✓ VexDay Proof
OpenBB 1.0.x - 'index.php?redirect' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote atta
38RISK
open ↗Exploit-DB✓ VexDay Proof
OpenBB 1.0.x - 'search.php?q' SQL Injection
Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execu
23RISK
open ↗Exploit-DB✓ VexDay Proof
OpenBB 1.0.x - 'board.php?FID' SQL Injection
Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execu
23RISK
open ↗Exploit-DB✓ VexDay Proof
OpenBB 1.0.x - 'member.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execu
23RISK
open ↗Exploit-DB✓ VexDay Proof
OpenBB 1.0.x - Private Message Disclosure
The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to read arbit
23RISK
open ↗Exploit-DB✓ VexDay Proof
OpenBB 1.0.x - 'post.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execu
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 7.2 Multiple Video Gallery Module - SQL Injection
SQL injection vulnerability in modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to execut
23RISK
open ↗Exploit-DB✓ VexDay Proof
OpenBB 1.0.x - 'post.php?TID' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote atta
38RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2000/NT 4.0 - Shell Long Share Name Buffer Overrun
Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me
35RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - 'Lsasrv.dll' RPC Remote Buffer Overflow (MS04-011)
Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority
60RISK
open ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.5.x/2.6.x - CPUFreq Proc Handler Integer Handling Memory Read
Integer signedness error in the cpufreq proc handler (cpufreq_procctl) in Linux kernel 2.6 allows local users to gain pr
23RISK
open ↗Exploit-DB✓ VexDay Proof
TCP Connection Reset - Remote Denial of Service
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial o
45RISK
open ↗Exploit-DB✓ VexDay Proof
PHProfession 2.5 - 'upload.php' Direct Request Full Path Disclosure
phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which re
23RISK
open ↗Exploit-DB✓ VexDay Proof
Multiple Vendor - TCP Sequence Number Approximation (4)
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial o
45RISK
open ↗Exploit-DB✓ VexDay Proof
PHProfession 2.5 - 'modules.php?offset' SQL Injection
SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to execute arbitrary SQL code via
23RISK
open ↗Exploit-DB✓ VexDay Proof
Advanced Guestbook 2.2 - 'Password' SQL Injection
SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHProfession 2.5 - 'modules.php?jcode' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
Omnicron OmniHTTPd 2.x/3.0 - GET Buffer Overflow
Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GET
28RISK
open ↗Exploit-DB✓ VexDay Proof
Protector System 1.15 b1 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection filt
23RISK
open ↗Exploit-DB✓ VexDay Proof
Protector System 1.15 - 'blocker_query.php' Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in blocker_query.php in Protector System 1.15b1 allows remote attackers to inje
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2000 - TCP Connection Reset
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial o
45RISK
open ↗Exploit-DB✓ VexDay Proof
Xine 0.9.x and Xine-Lib 1 - Multiple Remote File Overwrite Vulnerabilities
xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Epic Games Unreal Tournament Engine 3 - UMOD Manifest.INI Arbitrary File Overwrite
Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files
23RISK
open ↗Exploit-DB✓ VexDay Proof
PostNuke Phoenix 0.726 - 'openwindow.php?hlpfile' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.726 allows remote attackers to inject arbitrary web sc
23RISK
open ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.3 - 'setsockopt' Local Denial of Service
Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows loca
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 5.0 - SSL Remote Buffer Overflow (MS04-011)
Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as u
60RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.