Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

71,886cataloged exploits
32,153CVEs with public exploitation
1,932lab-tested
AllExploit-DB 22,786Referência 19,978GitHub PoC 13,282VulnCheck XDB 8,176Nuclei 4,202Metasploit 3,462✓ verified onlyrecentpopularrisk
3,462 exploits
Metasploit400
Apache Win32 Chunked Encoding
CVE-2002-0392—19 Jun 2002
Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possi
60RISK
open ↗
Metasploit400
Oracle 8i TNS Listener SERVICE_NAME Buffer Overflow
CVE-2002-0965—27 May 2002
Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users
50RISK
open ↗
Metasploit400
MS02-018 Microsoft IIS 4.0 .HTR Path Overflow
CVE-1999-0874—10 Apr 2002
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .
60RISK
open ↗
Metasploit600
DistCC Daemon Command Execution
CVE-2004-2687—01 Feb 2002
distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote at
60RISK
open ↗
Metasploit600
Solaris in.telnetd TTYPROMPT Buffer Overflow
CVE-2001-0797—18 Jan 2002
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary comman
60RISK
open ↗
Metasploit400
System V Derived /bin/login Extraneous Arguments Buffer Overflow
CVE-2001-0797—12 Dec 2001
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary comman
60RISK
open ↗
Metasploit600
Irix LPD tagprinter Command Execution
CVE-2001-0800—01 Sep 2001
lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.
50RISK
open ↗
Metasploit600
Solaris LPD Command Execution
CVE-2001-1583—31 Aug 2001
lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request wit
60RISK
open ↗
Metasploit400
Network Associates PGP KeyServer 7 LDAP Buffer Overflow
CVE-2001-1320—16 Jul 2001
Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute a
50RISK
open ↗
Metasploit400
Oracle 8i TNS Listener (ARGUMENTS) Buffer Overflow
CVE-2001-0499—28 Jun 2001
Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers t
60RISK
open ↗
Metasploit300
Cisco IOS HTTP Unauthorized Administrative Access
CVE-2001-0537—27 Jun 2001
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when lo
50RISK
open ↗
Metasploit400
MS01-033 Microsoft IIS 5.0 IDQ Path Overflow
CVE-2001-0500—18 Jun 2001
Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier a
60RISK
open ↗
Metasploit600
MS01-026 Microsoft IIS/PWS CGI Filename Double Decode Command Execution
CVE-2001-0333—15 May 2001
Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encodi
60RISK
open ↗
Metasploit400
MS01-023 Microsoft IIS 5.0 Printer Host Header Overflow
CVE-2001-0241—01 May 2001
Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via
60RISK
open ↗
Metasploit400
NTP Daemon readvar Buffer Overflow
CVE-2001-0414—04 Apr 2001
Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial o
60RISK
open ↗
Metasploit600
MS08-068 Microsoft Windows SMB Relay Code Execution
CVE-2008-4037—31 Mar 2001
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 20
50RISK
open ↗
Metasploit300
Windows Gather DynaZIP Saved Password Extraction
CVE-2001-0152—27 Mar 2001
The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password
18RISK
open ↗
Metasploit600
HP OpenView OmniBack II Command Execution
CVE-2001-0311—28 Feb 2001
Vulnerability in OmniBackII A.03.50 in HP 11.x and earlier allows attackers to gain unauthorized access to an OmniBack c
43RISK
open ↗
Metasploit200
WinVNC Web Server GET Overflow
CVE-2001-0168—29 Jan 2001
Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute
60RISK
open ↗
Metasploit300
RealVNC 3.3.7 Client Buffer Overflow
CVE-2001-0167—29 Jan 2001
Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute
50RISK
open ↗
Metasploit400
MS00-094 Microsoft IIS Phone Book Service Overflow
CVE-2000-1089—04 Dec 2000
Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Se
60RISK
open ↗
Metasploit300
Cisco Device HTTP Device Manager Access
CVE-2000-0945—26 Oct 2000
The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands with
60RISK
open ↗
Metasploit300
LPRng use_syslog Remote Format String Vulnerability
CVE-2000-0917—25 Sep 2000
Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary comman
60RISK
open ↗
Metasploit200
GAMSoft TelSrv 1.5 Username Buffer Overflow
CVE-2000-0665—17 Jul 2000
GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.
50RISK
open ↗
Metasploit300
UoW pop2d Remote File Retrieval Vulnerability
CVE-1999-0920—14 Jul 2000
Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD com
50RISK
open ↗
Metasploit500
WU-FTPD SITE EXEC/INDEX Format String Vulnerability
CVE-2000-0573—22 Jun 2000
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remo
60RISK
open ↗
Metasploit600
Microsoft SQL Server Payload Execution via SQL Injection
CVE-2000-0402—30 May 2000
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in pla
60RISK
open ↗
Metasploit600
Microsoft SQL Server Payload Execution via SQL Injection
CVE-2000-1209—30 May 2000
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3)
60RISK
open ↗
Metasploit600
Microsoft SQL Server Payload Execution
CVE-2000-1209—30 May 2000
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3)
60RISK
open ↗
Metasploit600
Microsoft SQL Server Payload Execution
CVE-2000-0402—30 May 2000
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in pla
60RISK
open ↗
← previouspage 106 / 116next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.