Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
76,496cataloged exploits
34,964CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,899GitHub PoC 13,937VulnCheck XDB 8,510Nuclei 4,239Metasploit 3,468✓ verified onlyrecentpopularrisk
24,443 exploits
Exploit-DB✓ VexDay Proof
CitectSCADA/CitectFacilities ODBC - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows rem
60RISK
open ↗Exploit-DB✓ VexDay Proof
Network Associates PGP KeyServer 7 - LDAP Buffer Overflow (Metasploit)
Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute a
50RISK
open ↗Exploit-DB✓ VexDay Proof
OneOrZero AIms 2.6.0 Members Edition - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition allo
23RISK
open ↗Exploit-DB✓ VexDay Proof
Camtron CMNC-200 IP Camera - ActiveX Buffer Overflow
Stack-based buffer overflow in a certain ActiveX control for the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200
23RISK
open ↗Exploit-DB✓ VexDay Proof
DBSite - SQL Injection
SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the
23RISK
open ↗Exploit-DB✓ VexDay Proof
Pre Online Tests Generator Pro - SQL Injection
SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers t
23RISK
open ↗Exploit-DB
AWCM 2.1 Final - Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in AR Web Content Manager (AWCM) 2.1 final allow remote attackers to
23RISK
open ↗Exploit-DB✓ VexDay Proof
Webmatic - 'index.php' SQL Injection
SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p
23RISK
open ↗Exploit-DB✓ VexDay Proof
Camtron CMNC-200 IP Camera - Undocumented Default Accounts
The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1
23RISK
open ↗Exploit-DB✓ VexDay Proof
Camtron CMNC-200 IP Camera - Denial of Service
The web server on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-00
23RISK
open ↗Exploit-DB✓ VexDay Proof
OneOrZero AIms 2.6.0 Members Edition - Multiple Vulnerabilities
Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users
23RISK
open ↗Exploit-DB✓ VexDay Proof
Camtron CMNC-200 IP Camera - Directory Traversal
Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera an
43RISK
open ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Event Registration 5.32 - SQL Injection
SQL injection vulnerability in the Event Registration plugin 5.32 and earlier for WordPress allows remote attackers to e
23RISK
open ↗Exploit-DB✓ VexDay Proof
Camtron CMNC-200 IP Camera - Authentication Bypass
The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera
23RISK
open ↗Exploit-DB✓ VexDay Proof
ASPilot Pilot Cart 7.3 - 'newsroom.asp' SQL Injection
SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL c
23RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component JSupport 1.5.6 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote attack
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft IIS FTP Server - NLST Response Overflow (MS09-053) (Metasploit)
Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authen
60RISK
open ↗Exploit-DB✓ VexDay Proof
Metinfo 3.0 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component JSupport 1.5.6 - SQL Injection
SQL injection vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote authenticated users
23RISK
open ↗Exploit-DB✓ VexDay Proof
Electronic Arts SnoopyCtrl - ActiveX Control Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote attac
50RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Exchange Server 2000 - XEXCH50 Heap Overflow (MS03-046) (Metasploit)
The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service
60RISK
open ↗Exploit-DB✓ VexDay Proof
IBM Lotus Domino Web Server - Accept-Language Stack Buffer Overflow (Metasploit)
Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows
50RISK
open ↗Exploit-DB✓ VexDay Proof
VUPlayer - '.m3u' Local Buffer Overflow (Metasploit)
Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long st
50RISK
open ↗Exploit-DB✓ VexDay Proof
ToolTalk - rpc.ttdbserverd _tt_internal_realpath Buffer Overflow (AIX) (Metasploit)
Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.
43RISK
open ↗Exploit-DB✓ VexDay Proof
AIX Calendar Manager Service Daemon (rpc.cmsd) Opcode 21 - Buffer Overflow (Metasploit)
Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through
50RISK
open ↗Exploit-DB✓ VexDay Proof
BlazeDVD 5.1 - PLF Buffer Overflow (Metasploit)
Stack-based buffer overflow in BlazeVideo BlazeDVD Standard and Professional 5.0, and possibly earlier, allows remote at
50RISK
open ↗Exploit-DB✓ VexDay Proof
IBM Access Support - ActiveX Control Buffer Overflow (Metasploit)
Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as dist
50RISK
open ↗Exploit-DB✓ VexDay Proof
feedDemon 3.1.0.12 - Local Stack Buffer Overflow (Metasploit)
Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbi
50RISK
open ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'OvWebHelp.exe' CGI Buffer Overflow (Metasploit)
Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows rem
60RISK
open ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'ovalarm.exe' CGI Buffer Overflow (Metasploit)
Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remo
50RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.