Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
76,496cataloged exploits
34,964CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,899GitHub PoC 13,937VulnCheck XDB 8,510Nuclei 4,239Metasploit 3,468✓ verified onlyrecentpopularrisk
24,443 exploits
Exploit-DB✓ VexDay Proof
Site2Nite Big Truck Broker - 'txtSiteId' SQL Injection
SQL injection vulnerability in news_default.asp in Site2Nite Big Truck Broker allows remote attackers to execute arbitra
23RISK
open ↗Exploit-DB
Skeletonz CMS - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the comment feature in Skeletonz CMS 1.0, when the Blog plugin is
23RISK
open ↗Exploit-DB
CA Internet Security Suite 2010 - 'KmxSbx.sys' Kernel Pool Overflow
Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite Plus 2010 allows local users to cause a denial of
23RISK
open ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.37 - Unix Sockets Local Denial of Service
The wait_for_unix_gc function in net/unix/garbage.c in the Linux kernel before 2.6.37-rc3-next-20101125 does not properl
23RISK
open ↗Exploit-DB✓ VexDay Proof
Jurpopage 0.2.0 - SQL Injection
Multiple SQL injection vulnerabilities in index.php in Jurpopage 0.2.0 allow remote attackers to execute arbitrary SQL c
23RISK
open ↗Exploit-DB✓ VexDay Proof
Jurpopage 0.2.0 - SQL Injection
SQL injection vulnerability in index.php in Jurpopage 0.2.0 allows remote attackers to execute arbitrary SQL commands vi
23RISK
open ↗Exploit-DB
Linux Kernel 2.6.37 - 'setup_arg_pages()' Denial of Service
The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN is used, does n
23RISK
open ↗Exploit-DB✓ VexDay Proof
SystemTap - Local Privilege Escalation
The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allow
38RISK
open ↗Exploit-DB✓ VexDay Proof
Easy Banner 2009.05.18 - '/member.php' Multiple SQL Injection / Authentication Bypass
Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic_quotes_g
23RISK
open ↗Exploit-DB✓ VexDay Proof
Easy Banner 2009.05.18 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18, when ma
23RISK
open ↗Exploit-DB
Linux Kernel 2.6.37 - 'setup_arg_pages()' Denial of Service
fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays repre
23RISK
open ↗Exploit-DB
Joomla! Component JE Ajax Event Calendar - SQL Injection
SQL injection vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar) component 1.0.5 for Joomla! allows r
23RISK
open ↗Exploit-DB
SiteEngine 7.1 - SQL Injection
SQL injection vulnerability in comments.php in SiteEngine 7.1 allows remote attackers to execute arbitrary SQL commands
23RISK
open ↗Exploit-DB
Joomla! Component JE Ajax Event Calendar - SQL Injection
SQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component for Joomla! allows remote atta
23RISK
open ↗Exploit-DB
WSN Links - SQL Injection
Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x be
23RISK
open ↗Exploit-DB✓ VexDay Proof
Oracle 8i - TNS Listener SERVICE_NAME Buffer Overflow (Metasploit)
Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users
50RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Visual Studio - Msmask32.ocx ActiveX Buffer Overflow (MS08-070) (Metasploit)
Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions befo
50RISK
open ↗Exploit-DB✓ VexDay Proof
Zenturi ProgramChecker - ActiveX Control Arbitrary File Download (Metasploit)
Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to
50RISK
open ↗Exploit-DB✓ VexDay Proof
Symantec AppStream LaunchObj - ActiveX Control Arbitrary File Download and Execute (Metasploit)
The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 d
50RISK
open ↗Exploit-DB✓ VexDay Proof
Wireshark - LWRES Dissector getaddrsbyname_request Buffer Overflow (Loop) (Metasploit)
Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote
60RISK
open ↗Exploit-DB
Free Simple Software - SQL Injection
SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitr
23RISK
open ↗Exploit-DB✓ VexDay Proof
Motorola Timbuktu Pro - Directory Traversal / Arbitrary File Upload (Metasploit)
Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu P
50RISK
open ↗Exploit-DB✓ VexDay Proof
DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) - SCPC_TXTEVENT Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a
50RISK
open ↗Exploit-DB✓ VexDay Proof
Novell NetIdentity Agent - XTIERRPCPIPE Named Pipe Buffer Overflow (Metasploit)
Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute ar
50RISK
open ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - 'inotify_init()' Memory Leak Local Denial of Service
Memory leak in the inotify_init1 function in fs/notify/inotify/inotify_user.c in the Linux kernel before 2.6.37 allows l
23RISK
open ↗Exploit-DB✓ VexDay Proof
Realtek Media Player Playlist - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows
50RISK
open ↗Exploit-DB✓ VexDay Proof
Oracle 8i - TNS Listener 'ARGUMENTS' Remote Buffer Overflow (Metasploit)
Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers t
60RISK
open ↗Exploit-DB✓ VexDay Proof
Hewlett-Packard (HP) Power Manager Administration - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers t
60RISK
open ↗Exploit-DB✓ VexDay Proof
Symantec Altiris Deployment Solution - ActiveX Control Arbitrary File Download and Execute (Metasploit)
The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution
50RISK
open ↗Exploit-DB✓ VexDay Proof
BASE - 'base_qry_common' Remote File Inclusion (Metasploit)
PHP remote file inclusion vulnerability in Basic Analysis and Security Engine (BASE) 1.2.4 and earlier, with register_gl
50RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.