Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
81,270cataloged exploits
37,818CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,482Referência 24,178GitHub PoC 15,557VulnCheck XDB 9,108Nuclei 4,440Metasploit 3,505✓ verified onlyrecentpopularrisk
19,066 exploits
Exploit-DB✓ VexDay Proof
PHP 4.x - Transparent Session ID Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use_tra
23RISK
open ↗Exploit-DB✓ VexDay Proof
GNU Make For IBM AIX 4.3.3 - CC Path Local Buffer Overflow
Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long C
23RISK
open ↗Exploit-DB✓ VexDay Proof
AIX 4.3.3/5.1 - Invscoutd Symbolic Link
The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 5.0 - WebDAV PROPFIND / SEARCH Method Denial of Service
Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a lon
35RISK
open ↗Exploit-DB✓ VexDay Proof
Bandmin 1.4 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.cgi for Bandmin 1.4 allows remote attackers to insert arbitrary HTML o
23RISK
open ↗Exploit-DB✓ VexDay Proof
Axis Network Camera 2.x - HTTP Authentication Bypass
The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass acces
28RISK
open ↗Exploit-DB✓ VexDay Proof
Sun ONE Application Server 7.0 - Error Message Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7.0
23RISK
open ↗Exploit-DB✓ VexDay Proof
Sun ONE Application Server 7.0 - Source Disclosure
Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that
28RISK
open ↗Exploit-DB✓ VexDay Proof
Upclient 5.0 b7 - Command Line Argument Buffer Overflow
Buffer overflow in Uptime Client (UpClient) 5.0b7, and possibly other versions, allows local users to gain privileges vi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Batalla Naval 1.0 4 - Remote Buffer Overflow (2)
Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long
28RISK
open ↗Exploit-DB✓ VexDay Proof
Batalla Naval 1.0 4 - Remote Buffer Overflow (1)
Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long
28RISK
open ↗Exploit-DB✓ VexDay Proof
Vignette 4/5 - Cross-Site Scripting
Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow rem
23RISK
open ↗Exploit-DB✓ VexDay Proof
BRS Webweaver 1.0 4 - POST / HEAD Denial of Service
Buffer overflow in BRS WebWeaver 1.04 and earlier allows remote attackers to cause a denial of service (crash) and possi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Vignette 4.x/5.0 - Memory Disclosure
Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to r
23RISK
open ↗Exploit-DB✓ VexDay Proof
BLNews 2.1.3 - Remote File Inclusion
objects.inc.php4 in BLNews 2.1.3 allows remote attackers to execute arbitrary PHP code via a Server[path] parameter that
23RISK
open ↗Exploit-DB✓ VexDay Proof
Ultimate PHP Board 1.9 - 'admin_iplog.php' Arbitrary PHP Execution
Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via
23RISK
open ↗Exploit-DB✓ VexDay Proof
IISProtect 2.1/2.2 - Web Administration Interface SQL Injection
SQL injection vulnerability in the web-based administration interface for iisPROTECT 2.2-r4, and possibly earlier versio
23RISK
open ↗Exploit-DB✓ VexDay Proof
Maelstrom Server 3.0.x - Argument Buffer Overflow (2)
Buffer overflow in Maelstrom 3.0.6, 3.0.5, and earlier allows local users to execute arbitrary code via a long -server c
23RISK
open ↗Exploit-DB✓ VexDay Proof
AIX 4.3/5.1 - diagrpt Arbitrary Privileged Program Execution
diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allow
23RISK
open ↗Exploit-DB✓ VexDay Proof
UML_NET - Integer Mismanagement Code Execution
uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users
23RISK
open ↗Exploit-DB✓ VexDay Proof
Prishtina FTP Client 1.x - Remote Denial of Service
Buffer overflow in Prishtina FTP client 1.x allows remote FTP servers to cause a denial of service (crash) and possibly
23RISK
open ↗Exploit-DB✓ VexDay Proof
Qualcomm Eudora 5.2.1/6.0 - File Attachment Spoofing Variant
Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by
23RISK
open ↗Exploit-DB✓ VexDay Proof
IISProtect 2.1/2.2 - Authentication Bypass
iisPROTECT 2.1 and 2.2 allows remote attackers to bypass authentication via an HTTP request containing URL-encoded chara
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apple QuickTime/Darwin Streaming MP3Broadcaster - ID3 Tag Handling
Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Nessus 2.0.x - LibNASL Arbitrary Code Execution
Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause
23RISK
open ↗Exploit-DB✓ VexDay Proof
WsMp3d 0.x - Remote Heap Overflow
Multiple heap-based buffer overflows in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allow remote attackers to execute arbit
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP - 'explorer.exe' Local Buffer Overflow
Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the XP user via a desktop.in
23RISK
open ↗Exploit-DB✓ VexDay Proof
WSMP3 0.0.x - Remote Command Execution
Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execut
23RISK
open ↗Exploit-DB✓ VexDay Proof
EJ3 TOPo 2.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in index.php for TOPo 2.2 (2.2.178) allows remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
Working Resources BadBlue 1.7.x/2.x - Unauthorized HTS Access
The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a filen
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.