Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
85,337cataloged exploits
39,873CVEs with public exploitation
24,696lab-tested
AllReferência 25,822Exploit-DB 24,487GitHub PoC 17,115VulnCheck XDB 9,874Nuclei 4,511Metasploit 3,528✓ verified onlyrecentpopularrisk
3,523 exploits
Metasploit600
Apple Safari Webkit libxslt Arbitrary File Creation
WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbi
50RISK
open ↗Metasploit600
Wireshark console.lua Pre-Loading Script Execution
Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain pr
50RISK
open ↗Metasploit300
Citrix Gateway ActiveX Control Stack Based Buffer Overflow Vulnerability
Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Ed
50RISK
open ↗Metasploit600
LifeSize Room Command Injection
The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) and 4.7.18 allows remote attackers to execute arbitra
50RISK
open ↗Metasploit600
WeBid converter.php Remote PHP Code Injection
WeBid 1.0.2 converter.php Remote PHP Code Injection
63RISK
open ↗Metasploit600
VSFTPD 2.3.4 Backdoor Command Execution
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
60RISK
open ↗Metasploit300
Kaillera 0.86 Server Denial of Service
Kaillera 0.86 Server DoS via Malformed UDP Packet
36RISK
open ↗Metasploit500
HP OmniInet.exe Opcode 27 Buffer Overflow
Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow
60RISK
open ↗Metasploit400
HP OmniInet.exe Opcode 20 Buffer Overflow
Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow
60RISK
open ↗Metasploit300
Mozilla Firefox Array.reduceRight() Integer Overflow
Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird bef
60RISK
open ↗Metasploit300
MS11-050 IE mshtml!CObjectElement Use After Free
Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute
50RISK
open ↗Metasploit600
Cisco AnyConnect VPN Client ActiveX URL Property Download and Execute
The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Win
50RISK
open ↗Metasploit400
IBM Tivoli Endpoint Manager POST Query Buffer Overflow
Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3
50RISK
open ↗Metasploit300
Sybase Easerver 6.3 Directory Traversal
Directory traversal vulnerability in the HTTP Server in Sybase EAServer 6.3.1 Developer Edition allows remote attackers
30RISK
open ↗Metasploit300
Lotus Notes 8.0.x - 8.5.2 FP2 - Autonomy Keyview (.lzh Attachment)
Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers
50RISK
open ↗Metasploit400
Lotus Notes 8.0.x - 8.5.2 FP2 - Autonomy Keyview (.lzh Attachment)
Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers
50RISK
open ↗Metasploit500
VisiWave VWR File Parsing Vulnerability
VisiWaveReport.exe in AZO Technologies, Inc. VisiWave Site Survey before 2.1.9 allows user-assisted remote attackers to
50RISK
open ↗Metasploit300
MPlayer SAMI Subtitle File Buffer Overflow
Stack-based buffer overflow in the sub_read_line_sami function in subreader.c in MPlayer, as used in SMPlayer 0.6.9, all
43RISK
open ↗Metasploit300
Mozilla Firefox 3.6.16 mChannel Use-After-Free Vulnerability
Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allo
60RISK
open ↗Metasploit300
Mozilla Firefox 3.6.16 mChannel Use-After-Free
Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allo
60RISK
open ↗Metasploit400
ICONICS WebHMI ActiveX Buffer Overflow
Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0
50RISK
open ↗Metasploit300
SPlayer 3.7 Content-Type Buffer Overflow
SPlayer 3.7 Content-Type Header Buffer Overflow
36RISK
open ↗Metasploit300
Tom Sawyer Software GET Extension Factory Remote Code Execution
Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.2
50RISK
open ↗Metasploit400
MJM QuickPlayer 1.00 Beta 60a / QuickPlayer 2010 .s3m Stack Buffer Overflow
MJM QuickPlayer <= 2010 .s3m Stack-Based Buffer Overflow
36RISK
open ↗Metasploit400
MJM Core Player 2011 .s3m Stack Buffer Overflow
MJM Core Player 2011 .s3m File Stack-Based Buffer Overflow
36RISK
open ↗Metasploit300
NetOp Remote Control Client 9.5 Buffer Overflow
NetOp Remote Control Client 9.5 .dws File Buffer Overflow
36RISK
open ↗Metasploit300
Subtitle Processor 7.7.1 .M3U SEH Unicode Buffer Overflow
Subtitle Processor 7.7.1 .m3u SEH Unicode Buffer Overflow
36RISK
open ↗Metasploit400
Magix Musik Maker 16 .mmm Stack Buffer Overflow
Magix Musik Maker <= v16 .mmm Stack-Based Buffer Overflow
36RISK
open ↗Metasploit400
Wireshark packet-dect.c Stack Buffer Overflow (local)
Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allow
50RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.