Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
78,258cataloged exploits
36,019CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,458Referência 22,697GitHub PoC 14,455VulnCheck XDB 8,811Nuclei 4,349Metasploit 3,488✓ verified onlyrecentpopularrisk
24,458 exploits
Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 5.5.1/6.x - 'calendar.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitr
23RISK
open ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 5.5.1/6.x - 'addfav.php?main' SQL Injection
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitr
23RISK
open ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 5.5.1/6.x - 'grabnext.php?posted' SQL Injection
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitr
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Outlook Express - NNTP Buffer Overflow (MS05-030)
Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows rem
60RISK
open ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 5.5.1/6.x - 'download.php?Number' SQL Injection
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitr
23RISK
open ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 5.5.1/6.x - 'viewmessage.php?message' SQL Injection
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitr
23RISK
open ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 5.5.1/6.x - 'notifymod.php?Number' SQL Injection
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitr
23RISK
open ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 5.5.1/6.x - 'modifypost.php?Number' SQL Injection
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitr
23RISK
open ↗Exploit-DB✓ VexDay Proof
Sun Solaris 10 Traceroute - Multiple Local Buffer Overflow Vulnerabilities
traceroute in Sun Solaris 10 on x86 systems allows local users to execute arbitrary code with PRIV_NET_RAWACCESS privile
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - 'SMB' Transaction Response Handling (MS05-011)
The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate c
45RISK
open ↗Exploit-DB✓ VexDay Proof
Ipswitch WhatsUp Professional 2005 SP1 - 'login.asp' SQL Injection
SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Professi
28RISK
open ↗Exploit-DB✓ VexDay Proof
DUware DUpaypal 3.0/3.1 - 'sub.asp?iSub' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQ
23RISK
open ↗Exploit-DB✓ VexDay Proof
DUware DUamazon Pro 3.0/3.1 - 'catDelete.asp?iCat' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQ
23RISK
open ↗Exploit-DB✓ VexDay Proof
DUware DUforum 3.0/3.1 - 'forums.asp?iFor' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other versions, allow remote attackers to exe
23RISK
open ↗Exploit-DB✓ VexDay Proof
DUware DUamazon Pro 3.0/3.1 - 'productEdit.asp?iCat' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQ
23RISK
open ↗Exploit-DB✓ VexDay Proof
DUware DUamazon Pro 3.0/3.1 - 'detail.asp?iSub' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQ
23RISK
open ↗Exploit-DB✓ VexDay Proof
DUware DUforum 3.0/3.1 - 'post.asp?iFor' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other versions, allow remote attackers to exe
23RISK
open ↗Exploit-DB✓ VexDay Proof
DUware DUamazon Pro 3.0/3.1 - 'review.asp?iPro' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQ
23RISK
open ↗Exploit-DB✓ VexDay Proof
DUware DUforum 3.0/3.1 - 'messages.asp?iMsg' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other versions, allow remote attackers to exe
23RISK
open ↗Exploit-DB✓ VexDay Proof
DUware DUportal 3.4.3 Pro - Multiple SQL Injections
PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers
28RISK
open ↗Exploit-DB✓ VexDay Proof
DUware DUforum 3.0/3.1 - 'userEdit.asp?id' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other versions, allow remote attackers to exe
23RISK
open ↗Exploit-DB✓ VexDay Proof
DUware DUamazon Pro 3.0/3.1 - 'type.asp?iType' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQ
23RISK
open ↗Exploit-DB✓ VexDay Proof
DUware DUamazon Pro 3.0/3.1 - 'productDelete.asp?iCat' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQ
23RISK
open ↗Exploit-DB✓ VexDay Proof
DUware DUpaypal 3.0/3.1 - 'detail.asp?iPro' SQL Injection
SQL injection vulnerability in detail.asp in DUware DUpaypal 3.1, and possibly earlier, allows remote attackers to execu
23RISK
open ↗Exploit-DB✓ VexDay Proof
Simple Machines Forum (SMF) 1.0.4 - 'modify' SQL Injection
Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers t
23RISK
open ↗Exploit-DB✓ VexDay Proof
MercuryBoard 1.1.4 - SQL Injection
SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote attackers to execute arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
PAFaq - Administrator 'Username' SQL Injection
Multiple SQL injection vulnerabilities in login in paFAQ 1.0 Beta 4 allow remote attackers to execute arbitrary SQL comm
23RISK
open ↗Exploit-DB✓ VexDay Proof
RaXnet Cacti 0.5/0.6/0.8 - 'Top_Graph_Header.php' Remote File Inclusion
PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote att
28RISK
open ↗Exploit-DB✓ VexDay Proof
PAFaq - Question Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in paFAQ 1.0 Beta 4 allow remote attackers to inject arbitrary web s
23RISK
open ↗Exploit-DB✓ VexDay Proof
UApplication Ublog Reload 1.0.5 - 'Trackback.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inject arbitr
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.