Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
81,524cataloged exploits
37,962CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,482Referência 24,284GitHub PoC 15,675VulnCheck XDB 9,136Nuclei 4,441Metasploit 3,506✓ verified onlyrecentpopularrisk
19,066 exploits
Exploit-DB✓ VexDay Proof
Samba 2.0.x - Insecure TMP File Symbolic Link
Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue qu
23RISK
open ↗Exploit-DB✓ VexDay Proof
CrossWind CyberScheduler 2.1 - websyncd Remote Buffer Overflow
Buffer overflow in websync.exe in Cyberscheduler allows remote attackers to execute arbitrary commands via a long tzs (t
23RISK
open ↗Exploit-DB✓ VexDay Proof
Simpleserver WWW 1.0.x - AUX Directory Denial of Service
AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux direc
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.5 - CLSID File Execution
Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow at
28RISK
open ↗Exploit-DB✓ VexDay Proof
GoAhead Web Server 2.1 (Windows) - Denial of Service
GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.
23RISK
open ↗Exploit-DB✓ VexDay Proof
Solaris 2.6 - FTP Core Dump Shadow Password Recovery
FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possib
23RISK
open ↗Exploit-DB✓ VexDay Proof
FreeBSD 4.2-stable - FTPd 'glob()' Remote Buffer Overflow
Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern strin
28RISK
open ↗Exploit-DB✓ VexDay Proof
cfingerd 1.4 - Format String (2)
Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privilege
28RISK
open ↗Exploit-DB✓ VexDay Proof
OpenBSD 2.x < 2.8 FTPd - 'glob()' Remote Buffer Overflow
Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern strin
28RISK
open ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.4 - IPTables FTP Stateful Inspection Arbitrary Filter Rule Insertion
ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP
28RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft ISA Server 2000 Web Proxy - Denial of Service
Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of se
28RISK
open ↗Exploit-DB✓ VexDay Proof
Solaris 2.5/2.6/7.0/8 - 'mailx -F' Local Buffer Overflow (2)
Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F'
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHPSlash 0.5.3 2/0.6.1 - URL Block Arbitrary File Disclosure
Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrar
23RISK
open ↗Exploit-DB✓ VexDay Proof
FreeBSD 2.2-4.2 / NetBSD 1.2-4.5 / OpenBSD 2.x - FTPd 'glob()' Remote Buffer Overflow
Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern strin
28RISK
open ↗Exploit-DB✓ VexDay Proof
Siemens Reliant UNIX 5.4 - ppd -T Race Condition
ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file.
23RISK
open ↗Exploit-DB✓ VexDay Proof
Netscape SmartDownload 1.3 - Remote Buffer Overflow
Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers (malicious web pages) to execute arbitrary command
23RISK
open ↗Exploit-DB✓ VexDay Proof
IBM Websphere/Net.Commerce 3 - CGI-BIN Macro Denial of Service
IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w
23RISK
open ↗Exploit-DB✓ VexDay Proof
NCM Content Management System - content.pl Input Validation
content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content dat
23RISK
open ↗Exploit-DB✓ VexDay Proof
Trend Micro Interscan VirusWall (Linux) 3.0.1 - Multiple Program Buffer Overflows
Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 a
28RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows NT 4.0/2000 - TCP Stack Denial of Service (2)
Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of e
28RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows NT 4.0/2000 - TCP Stack Denial of Service (1)
Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of e
28RISK
open ↗Exploit-DB✓ VexDay Proof
Solaris 7.0/8 - IPCS Timezone Buffer Overflow
Buffer overflow in ipcs in Solaris 7 x86 allows local users to execute arbitrary code via a long TZ (timezone) environme
23RISK
open ↗Exploit-DB✓ VexDay Proof
Oracle Application Server 4.0.8.2 - ndwfn4.so Buffer Overflow
Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle app
28RISK
open ↗Exploit-DB✓ VexDay Proof
SGI IRIX 6.5 / Solaris 7.0/8 CDE - '/usr/dt/bin/dtsession' Local Buffer Overflow
Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via
23RISK
open ↗Exploit-DB✓ VexDay Proof
cfingerd 1.4 - Format String (1)
Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privilege
28RISK
open ↗Exploit-DB✓ VexDay Proof
Strip Password Generator 0.3/0.4/0.5 - Limited Password-Space
Zetetic Secure Tool for Recalling Important Passwords (STRIP) 0.5 and earlier for the PalmOS allows a local attacker to
23RISK
open ↗Exploit-DB✓ VexDay Proof
Solaris 2.x/7.0/8 - Xsun HOME Buffer Overflow
Buffer overflow in Xsun in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME enviro
23RISK
open ↗Exploit-DB✓ VexDay Proof
nph-maillist 3.0/3.5 - Arbitrary Code Execution
nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters ("`") in the email addres
28RISK
open ↗Exploit-DB✓ VexDay Proof
PGP 5.x/6.x/7.0 - ASCII Armor Parser Arbitrary File Creation
ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malfor
23RISK
open ↗Exploit-DB✓ VexDay Proof
Solaris 7/8 - 'kcms_configure' Command-Line Buffer Overflow (1)
kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overf
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.