Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,940cataloged exploits
40,797CVEs with public exploitation
24,696lab-tested
AllReferência 26,494Exploit-DB 24,489GitHub PoC 18,333VulnCheck XDB 10,507Nuclei 4,578Metasploit 3,539✓ verified onlyrecentpopularrisk
24,696 exploits
Exploit-DB✓ VexDay Proof
AIX 4.3.3/5.x - Getlvcb Command Line Argument Buffer Overflow (1)
Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) get
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHP 4.x - Transparent Session ID Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use_tra
23RISK
open ↗Exploit-DB✓ VexDay Proof
GNU Make For IBM AIX 4.3.3 - CC Path Local Buffer Overflow
Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long C
23RISK
open ↗Exploit-DB✓ VexDay Proof
AIX 4.3.3/5.1 - Invscoutd Symbolic Link
The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 5.0 - WebDAV PROPFIND / SEARCH Method Denial of Service
Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a lon
35RISK
open ↗Exploit-DB✓ VexDay Proof
Bandmin 1.4 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.cgi for Bandmin 1.4 allows remote attackers to insert arbitrary HTML o
23RISK
open ↗Exploit-DB✓ VexDay Proof
Upclient 5.0 b7 - Command Line Argument Buffer Overflow
Buffer overflow in Uptime Client (UpClient) 5.0b7, and possibly other versions, allows local users to gain privileges vi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Sun ONE Application Server 7.0 - Error Message Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7.0
23RISK
open ↗Exploit-DB✓ VexDay Proof
Axis Network Camera 2.x - HTTP Authentication Bypass
The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass acces
28RISK
open ↗Exploit-DB✓ VexDay Proof
Sun ONE Application Server 7.0 - Source Disclosure
Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that
28RISK
open ↗Exploit-DB✓ VexDay Proof
BRS Webweaver 1.0 4 - POST / HEAD Denial of Service
Buffer overflow in BRS WebWeaver 1.04 and earlier allows remote attackers to cause a denial of service (crash) and possi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Batalla Naval 1.0 4 - Remote Buffer Overflow (2)
Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long
28RISK
open ↗Exploit-DB✓ VexDay Proof
Vignette 4/5 - Cross-Site Scripting
Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow rem
23RISK
open ↗Exploit-DB✓ VexDay Proof
Vignette 4.x/5.0 - Memory Disclosure
Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to r
23RISK
open ↗Exploit-DB✓ VexDay Proof
Batalla Naval 1.0 4 - Remote Buffer Overflow (1)
Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long
28RISK
open ↗Exploit-DB✓ VexDay Proof
BLNews 2.1.3 - Remote File Inclusion
objects.inc.php4 in BLNews 2.1.3 allows remote attackers to execute arbitrary PHP code via a Server[path] parameter that
23RISK
open ↗Exploit-DB✓ VexDay Proof
Ultimate PHP Board 1.9 - 'admin_iplog.php' Arbitrary PHP Execution
Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via
23RISK
open ↗Exploit-DB✓ VexDay Proof
IISProtect 2.1/2.2 - Web Administration Interface SQL Injection
SQL injection vulnerability in the web-based administration interface for iisPROTECT 2.2-r4, and possibly earlier versio
23RISK
open ↗Exploit-DB✓ VexDay Proof
UML_NET - Integer Mismanagement Code Execution
uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users
23RISK
open ↗Exploit-DB✓ VexDay Proof
Prishtina FTP Client 1.x - Remote Denial of Service
Buffer overflow in Prishtina FTP client 1.x allows remote FTP servers to cause a denial of service (crash) and possibly
23RISK
open ↗Exploit-DB✓ VexDay Proof
Maelstrom Server 3.0.x - Argument Buffer Overflow (2)
Buffer overflow in Maelstrom 3.0.6, 3.0.5, and earlier allows local users to execute arbitrary code via a long -server c
23RISK
open ↗Exploit-DB✓ VexDay Proof
AIX 4.3/5.1 - diagrpt Arbitrary Privileged Program Execution
diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allow
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apple QuickTime/Darwin Streaming MP3Broadcaster - ID3 Tag Handling
Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a
23RISK
open ↗Exploit-DB✓ VexDay Proof
WsMp3d 0.x - Remote Heap Overflow
Multiple heap-based buffer overflows in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allow remote attackers to execute arbit
23RISK
open ↗Exploit-DB✓ VexDay Proof
IISProtect 2.1/2.2 - Authentication Bypass
iisPROTECT 2.1 and 2.2 allows remote attackers to bypass authentication via an HTTP request containing URL-encoded chara
23RISK
open ↗Exploit-DB✓ VexDay Proof
Nessus 2.0.x - LibNASL Arbitrary Code Execution
Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause
23RISK
open ↗Exploit-DB✓ VexDay Proof
Qualcomm Eudora 5.2.1/6.0 - File Attachment Spoofing Variant
Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by
23RISK
open ↗Exploit-DB✓ VexDay Proof
WSMP3 0.0.x - Remote Command Execution
Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execut
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP - 'explorer.exe' Local Buffer Overflow
Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the XP user via a desktop.in
23RISK
open ↗Exploit-DB✓ VexDay Proof
CUPS 1.1.x - Cupsd Request Method Denial of Service
CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port (
28RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.