Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
81,524cataloged exploits
37,962CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,482Referência 24,284GitHub PoC 15,675VulnCheck XDB 9,136Nuclei 4,441Metasploit 3,506✓ verified onlyrecentpopularrisk
19,066 exploits
Exploit-DB✓ VexDay Proof
FreeBSD 3.5/4.x - '/usr/bin/top' Format String
Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" fun
23RISK
open ↗Exploit-DB✓ VexDay Proof
ManTrap 1.6.1 - Root Directory Inode Disclosure
Recourse ManTrap 1.6 sets up a chroot environment to hide the fact that it is running, but the inode number for the resu
23RISK
open ↗Exploit-DB✓ VexDay Proof
ManTrap 1.6.1 - Hidden Process Disclosure
Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers to determine that they
23RISK
open ↗Exploit-DB✓ VexDay Proof
Unify eWave ServletExec 3.0 c - Denial of Service
eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of servi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Kootenay Web Inc whois 1.0 - Remote Command Execution
Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in
28RISK
open ↗Exploit-DB✓ VexDay Proof
Cat Soft Serv-U FTP Server 2.5.x - Brute Force
Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (poss
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Indexing Service (Windows 2000/NT 4.0) - '.htw' Cross-Site Scripting
The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross s
28RISK
open ↗Exploit-DB✓ VexDay Proof
ISC BIND 8.1 - Host Remote Buffer Overflow
Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR qu
28RISK
open ↗Exploit-DB✓ VexDay Proof
Cisco Catalyst 3500 XL - Arbitrary Command Execution
The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands with
60RISK
open ↗Exploit-DB✓ VexDay Proof
Cisco Virtual Central Office 4000 (VCO/4K) 5.1.3 - Remote Username / Password Retrieval
Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which
23RISK
open ↗Exploit-DB✓ VexDay Proof
Sun HotJava Browser 3 - Arbitrary DOM Access
HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named wind
23RISK
open ↗Exploit-DB✓ VexDay Proof
Cisco IOS 12 - Software '?/' HTTP Request Denial of Service
The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a
23RISK
open ↗Exploit-DB✓ VexDay Proof
iPlanet Certificate Management System 4.2 - Directory Traversal
Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Netscape Directory Server 4.12 - Directory Server Directory Traversal
Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Avirt Mail 4.0/4.2 - 'Mail From:' / 'Rcpt to:' Denial of Service
Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via
23RISK
open ↗Exploit-DB✓ VexDay Proof
Allaire JRun 3 - Directory Disclosure
Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request
23RISK
open ↗Exploit-DB✓ VexDay Proof
Allaire JRun 2.3 - Arbitrary Code Execution
Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scrip
28RISK
open ↗Exploit-DB✓ VexDay Proof
David Bagley xlock 4.16 - User Supplied Format String (2)
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privile
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (2)
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
35RISK
open ↗Exploit-DB✓ VexDay Proof
Intel InBusiness eMail Station 1.4.87 - Denial of Service
Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of servi
23RISK
open ↗Exploit-DB✓ VexDay Proof
HP-UX 10.20/11.0 - crontab '/tmp' File
HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target fil
23RISK
open ↗Exploit-DB✓ VexDay Proof
Hilgraeve HyperTerminal 6.0 - Telnet Buffer Overflow
Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Oracle Internet Directory 2.0.6 - oidldap
Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line param
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (4)
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
35RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (5)
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
35RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (1)
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
35RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (3)
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
35RISK
open ↗Exploit-DB✓ VexDay Proof
cURL 6.1 < 7.4 - Remote Buffer Overflow (2)
Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbi
28RISK
open ↗Exploit-DB✓ VexDay Proof
anaconda Foundation 1.4 < 1.9 - Directory Traversal
Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitrar
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft NetMeeting 3.0.1 4.4.3385 - Remote Desktop Sharing Denial of Service
Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utili
28RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.