Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
76,559cataloged exploits
34,978CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,899GitHub PoC 13,960VulnCheck XDB 8,542Nuclei 4,243Metasploit 3,472✓ verified onlyrecentpopularrisk
24,443 exploits
Exploit-DB✓ VexDay Proof
Joomla! Component Juke Box 1.7 - Local File Inclusion
Directory traversal vulnerability in the JOOFORGE Jutebox (com_jukebox) component 1.0 and 1.7 for Joomla! allows remote
43RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component Joomla! Flickr 1.0 - Local File Inclusion
Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr (com_joomlaflickr) component 1.0.3 for Joomla
43RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component Freestyle FAQ Lite 1.3 - 'faqid' SQL Injection
SQL injection vulnerability in the Freestyle FAQs Lite (com_fsf) component, possibly 1.3, for Joomla! allows remote atta
23RISK
open ↗Exploit-DB✓ VexDay Proof
WordPress Plugin NextGEN Gallery 1.5.1 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component Highslide 1.5 - Local File Inclusion
Directory traversal vulnerability in the Highslide JS (com_hsconfig) component 1.5 and 2.0.9 for Joomla! allows remote a
43RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component Saber Cart 1.0.0.12 - Local File Inclusion
Directory traversal vulnerability in the Seber Cart (com_sebercart) component 1.0.0.12 and 1.0.0.13 for Joomla!, when ma
38RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component Shoutbox Pro - Local File Inclusion
Directory traversal vulnerability in the Shoutbox Pro (com_shoutbox) component for Joomla! allows remote attackers to re
43RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component JInventory 1.23.02 - Local File Inclusion
Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly ot
43RISK
open ↗Exploit-DB✓ VexDay Proof
Samba 3.0.24 (Solaris) - 'lsa_io_trans_names' Heap Overflow (Metasploit)
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers
60RISK
open ↗Exploit-DB✓ VexDay Proof
Samba 3.0.10 (OSX) - 'lsa_io_trans_names' Heap Overflow (Metasploit)
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers
60RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component LoginBox - Local File Inclusion
Directory traversal vulnerability in the LoginBox Pro (com_loginbox) component for Joomla! allows remote attackers to re
43RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component SVMap 1.1.1 - Local File Inclusion
Directory traversal vulnerability in the SVMap (com_svmap) component 1.1.1 for Joomla! allows remote attackers to read a
43RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component Magic Updater - Local File Inclusion
Directory traversal vulnerability in the Magic Updater (com_joomlaupdater) component for Joomla! allows remote attackers
43RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component redSHOP 1.0 - Local File Inclusion
Directory traversal vulnerability in the redSHOP (com_redshop) component 1.0.x for Joomla! allows remote attackers to re
43RISK
open ↗Exploit-DB✓ VexDay Proof
nodesforum 1.033 - Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Nodesforum 1.033 and 1.045, when register_globals is enabled, allo
23RISK
open ↗Exploit-DB✓ VexDay Proof
eZip Wizard 3.0 - '.zip' File (SEH)
Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .z
50RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component redTWITTER 1.0 - Local File Inclusion
Directory traversal vulnerability in the redTWITTER (com_redtwitter) component 1.0.x including 1.0b11 for Joomla! allows
43RISK
open ↗Exploit-DB✓ VexDay Proof
ZipCentral - '.zip' File (SEH)
Stack-based buffer overflow in ZipCentral 4.01 allows remote user-assisted attackers to execute arbitrary code via a ZIP
23RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component Picasa 2.0 - Local File Inclusion
Directory traversal vulnerability in the Picasa (com_joomlapicasa2) component 2.0 and 2.0.5 for Joomla! allows remote at
43RISK
open ↗Exploit-DB✓ VexDay Proof
Uiga Proxy - Remote File Inclusion
PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when register_globals is enabled, allows
23RISK
open ↗Exploit-DB✓ VexDay Proof
Facil-CMS 0.1RC2 - Local/Remote File Inclusion
Multiple directory traversal vulnerabilities in Facil CMS 0.1RC allow remote attackers to read arbitrary files via a ..
23RISK
open ↗Exploit-DB✓ VexDay Proof
IncrediMail 2.0 - ActiveX (Authenticated) Buffer Overflow (PoC)
Buffer overflow in the Authenticate method in the INCREDISPOOLERLib.Pop ActiveX control in ImSpoolU.dll in IncrediMail 2
23RISK
open ↗Exploit-DB✓ VexDay Proof
Joomla! Component JP Jobs 1.4.1 - SQL Injection
SQL injection vulnerability in the JP Jobs (com_jp_jobs) component 1.4.1 and earlier for Joomla! allows remote attackers
23RISK
open ↗Exploit-DB
PHP-fusion dsmsf Mod Downloads - SQL Injection
SQL injection vulnerability in screen.php in the Download System mSF (dsmsf) module for PHP-Fusion allows remote attacke
23RISK
open ↗Exploit-DB
Microsoft Internet Explorer Tabular Data Control - ActiveX Remote Code Execution
The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on Windows XP SP2 and SP3, and
60RISK
open ↗Exploit-DB✓ VexDay Proof
Free MP3 CD Ripper 2.6 - '.wav' Local Overflow
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem
50RISK
open ↗Exploit-DB
DynPG CMS 4.1.0 - 'popup.php' / 'counter.php' Multiple Vulnerabilities
Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magic_quotes_gpc is di
28RISK
open ↗Exploit-DB
CMS Made Simple 1.7 - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in CMS Made Simple 1.8.1 and earlier allows remote attackers to hijack t
23RISK
open ↗Exploit-DB✓ VexDay Proof
TugZip 3.5 Archiver - '.ZIP' File Buffer Overflow
Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary
50RISK
open ↗Exploit-DB
DynPG CMS 4.1.0 - Multiple Vulnerabilities
Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magic_quotes_gpc is di
28RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.