Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
76,542cataloged exploits
34,971CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,899GitHub PoC 13,947VulnCheck XDB 8,542Nuclei 4,243Metasploit 3,468✓ verified onlyrecentpopularrisk
24,443 exploits
Exploit-DB✓ VexDay Proof
2DayBiz The Web Template Software - SQL Injection / Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject ar
23RISK
open ↗Exploit-DB✓ VexDay Proof
Weborf HTTP Server - Denial of Service
Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode character
23RISK
open ↗Exploit-DB✓ VexDay Proof
2DayBiz Video Community Portal - 'user-profile.php' SQL Injection
SQL injection vulnerability in user-profile.php in 2daybiz Video Community Portal Script allows remote attackers to exec
23RISK
open ↗Exploit-DB✓ VexDay Proof
2DayBiz The Web Template Software - SQL Injection / Cross-Site Scripting
SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitra
23RISK
open ↗Exploit-DB✓ VexDay Proof
AdaptCMS 2.0.0 Beta - 'init.php' Remote File Inclusion
PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in AdaptCMS 2.0.0 Beta, when register_globals is ena
23RISK
open ↗Exploit-DB✓ VexDay Proof
Novell iManager - Multiple Vulnerabilities
Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll
28RISK
open ↗Exploit-DB✓ VexDay Proof
2DayBiz Matrimonial Script - SQL Injection
SQL injection vulnerability in customprofile.php in 2daybiz Matrimonial Script allows remote attackers to execute arbitr
23RISK
open ↗Exploit-DB✓ VexDay Proof
FreeBSD - 'mountnfs()' Denial of Service
sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is
23RISK
open ↗Exploit-DB
Joomla! Component JE Ajax Event Calendar 1.0.5 - SQL Injection
SQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component for Joomla! allows remote atta
23RISK
open ↗Exploit-DB✓ VexDay Proof
FreeBSD 8.0/7.3/7.2 - 'nfs_mount()' Local Privilege Escalation
sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is
23RISK
open ↗Exploit-DB✓ VexDay Proof
Boat Classifieds - 'printdetail.asp?Id' SQL Injection
SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrar
23RISK
open ↗Exploit-DB
Joomla! Component JE Ajax Event Calendar 1.0.5 - SQL Injection
SQL injection vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar) component 1.0.5 for Joomla! allows r
23RISK
open ↗Exploit-DB✓ VexDay Proof
2DayBiz MLM Script - SQL Injection
SQL injection vulnerability in viewnews.php in 2daybiz Multi Level Marketing (MLM) Software allows remote attackers to e
23RISK
open ↗Exploit-DB✓ VexDay Proof
Texas Imperial Software WFTPD 3.23 - SIZE Overflow (Metasploit)
Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands.
50RISK
open ↗Exploit-DB✓ VexDay Proof
Mercury/32 Mail Server < 4.01b - LOGIN Buffer Overflow (Metasploit)
Stack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier allows remote attackers
50RISK
open ↗Exploit-DB✓ VexDay Proof
HP OpenView - Operations OVTrace Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 f
50RISK
open ↗Exploit-DB✓ VexDay Proof
mIRC 6.34 - PRIVMSG Handling Stack Buffer Overflow (Metasploit)
Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIV
50RISK
open ↗Exploit-DB✓ VexDay Proof
Cornerstone CMS - SQL Injection
SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Boat Classifieds - SQL Injection
SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrar
23RISK
open ↗Exploit-DB✓ VexDay Proof
Job Search Engine Script - SQL Injection
SQL injection vulnerability in show_search_result.php in 2daybiz Job Search Engine Script allows remote attackers to exe
23RISK
open ↗Exploit-DB✓ VexDay Proof
K-Search - SQL Injection / Cross-Site Scripting
Multiple SQL injection vulnerabilities in K-Search 1.0 and earlier allow remote attackers to execute arbitrary SQL comma
23RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component Picasa2Gallery 1.2.8 - Local File Inclusion
Directory traversal vulnerability in the Picasa2Gallery (com_picasa2gallery) component 1.2.8 and earlier for Joomla! all
38RISK
open ↗Exploit-DB✓ VexDay Proof
Video Community portal - SQL Injection / Cross-Site Scripting
SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to execute
23RISK
open ↗Exploit-DB✓ VexDay Proof
Video Community portal - SQL Injection / Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attacke
23RISK
open ↗Exploit-DB✓ VexDay Proof
K-Search - SQL Injection / Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in K-Search allows remote attackers to inject arbitrary web script
23RISK
open ↗Exploit-DB✓ VexDay Proof
CA BrightStor Universal Agent - Remote Overflow (Metasploit)
Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticate
50RISK
open ↗Exploit-DB✓ VexDay Proof
BolinTech DreamFTP Server 1.02 - Format String (Metasploit)
Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string
50RISK
open ↗Exploit-DB✓ VexDay Proof
Veritas Backup Exec Name Service - Remote Overflow (Metasploit)
Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9
60RISK
open ↗Exploit-DB✓ VexDay Proof
Solaris Sadmind - Command Execution (Metasploit)
The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attack
60RISK
open ↗Exploit-DB✓ VexDay Proof
WinComLPD 3.0.2 - Remote Buffer Overflow (Metasploit)
Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earl
50RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.