Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
81,270cataloged exploits
37,818CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,482Referência 24,178GitHub PoC 15,557VulnCheck XDB 9,108Nuclei 4,440Metasploit 3,505✓ verified onlyrecentpopularrisk
19,066 exploits
Exploit-DB✓ VexDay Proof
Knox Arkeia Pro 5.1.12 - Backup Remote Code Execution
Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a l
50RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - 'RPC DCOM2' Remote (MS03-039)
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and loc
35RISK
open ↗Exploit-DB✓ VexDay Proof
LSH 1.x - Remote Buffer Overflow (2)
lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) cli
28RISK
open ↗Exploit-DB✓ VexDay Proof
Solaris Sadmind - Default Configuration Remote Code Execution
The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attack
60RISK
open ↗Exploit-DB✓ VexDay Proof
LSH 1.x - Remote Buffer Overflow (1)
lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) cli
28RISK
open ↗Exploit-DB✓ VexDay Proof
IBM DB2 db2dart - Buffer Overflow
Buffer overflow in db2dart in IBM DB2 Universal Data Base 7.2 before Fixpak 10 allows local users to gain root privilege
23RISK
open ↗Exploit-DB✓ VexDay Proof
Sendmail 8.12.9 - 'Prescan()' Variant Remote Buffer Overrun
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient
28RISK
open ↗Exploit-DB✓ VexDay Proof
Pine 4.56 - Remote Buffer Overflow
Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-b
28RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - 'RPC DCOM' Long Filename Overflow (MS03-026)
Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote
60RISK
open ↗Exploit-DB✓ VexDay Proof
Nokia Electronic Documentation 5.0 - Connection redirection
Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the locat
23RISK
open ↗Exploit-DB✓ VexDay Proof
Nokia Electronic Documentation 5.0 - Path Disclosure
Nokia Electronic Documentation (NED) 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root,
23RISK
open ↗Exploit-DB✓ VexDay Proof
Nokia Electronic Documentation 5.0 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Nokia Electronic Documentation (NED) 5.0 allows remote attackers to execute
28RISK
open ↗Exploit-DB✓ VexDay Proof
MySQL 3.23.x/4.0.x - Remote Buffer Overflow
Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers wit
45RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - 'RPC DCOM' Scanner (MS03-039)
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and loc
35RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5 - window.open Search Pane Cross-Zone Scripting
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind
35RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Script Execution
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind
35RISK
open ↗Exploit-DB✓ VexDay Proof
Roger Wilco 1.x - Client Data Buffer Overflow
Buffer overflow in RogerWilco graphical server 1.4.1.6 and earlier, dedicated server 0.32a and earlier for Windows, and
23RISK
open ↗Exploit-DB✓ VexDay Proof
MySQL 3.23.x/4.0.x - Password Handler Buffer Overflow
Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers wit
45RISK
open ↗Exploit-DB✓ VexDay Proof
Escapade 0.2.1 Beta Scripting Engine - 'PAGE' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Escapade Scripting Engine (ESP) allows remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
NullSoft Winamp 2.81/2.91/3.0/3.1 - MIDI Plugin 'IN_MIDI.dll' Track Data Size Buffer Overflow (PoC)
The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5 - XML Page Object Type Validation (MS03-040)
Internet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web server during XML data bindi
28RISK
open ↗Exploit-DB✓ VexDay Proof
FTP Desktop 3.5 - FTP 331 Server Response Buffer Overflow
Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious se
23RISK
open ↗Exploit-DB✓ VexDay Proof
ICQ 2003 - Webfront Guestbook Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the ICQ Web Front guestbook (guestbook.html) allows remote attackers to inse
23RISK
open ↗Exploit-DB✓ VexDay Proof
FTP Desktop 3.5 - Banner Parsing Buffer Overflow
Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious se
23RISK
open ↗Exploit-DB✓ VexDay Proof
Mah-Jong 1.4/1.6 - Server Remote Denial of Service
Unknown vulnerability in mah-jong 1.5.6 and earlier allows remote attackers to cause a denial of service (tight loop).
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5/6 - Browser Popup Window Object Type Validation
Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creati
35RISK
open ↗Exploit-DB✓ VexDay Proof
Mah-Jong 1.4 - Client/Server Remote sscanf() Buffer Overflow
Buffer overflow in mah-jong 1.5.6 and earlier allows remote attackers to execute arbitrary code.
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft WordPerfect Document Converter (Windows NT4 Workstation SP5/SP6 French) - File Template Buffer Overflow (MS03-036)
Buffer overflow in Microsoft Wordperfect Converter allows remote attackers to execute arbitrary code via modified data o
28RISK
open ↗Exploit-DB✓ VexDay Proof
Stunnel 3.24/4.00 - Daemon Hijacking
Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen(), which allows local users to
23RISK
open ↗Exploit-DB✓ VexDay Proof
Ipswitch WS_FTP Server 3.4/4.0 - FTP Command Buffer Overrun
Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly e
45RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.