Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
77,058cataloged exploits
35,300CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,175GitHub PoC 14,096VulnCheck XDB 8,607Nuclei 4,255Metasploit 3,474✓ verified onlyrecentpopularrisk
24,451 exploits
Exploit-DB✓ VexDay Proof
Rentventory - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Rentventory 1.0.1 allow remote attackers to inject a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Tausch Ticket Script 3 - 'vote.php?descr' SQL Injection
Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL command
23RISK
open ↗Exploit-DB✓ VexDay Proof
Swinger Club Portal - 'start.php?id' SQL Injection
SQL injection vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary SQ
23RISK
open ↗Exploit-DB✓ VexDay Proof
Tausch Ticket Script 3 - 'suchauftraege_user.php?userid' SQL Injection
Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL command
23RISK
open ↗Exploit-DB✓ VexDay Proof
Swinger Club Portal - 'start.php?go' Remote File Inclusion
PHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute
23RISK
open ↗Exploit-DB✓ VexDay Proof
HP Multiple LaserJet Printer - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJe
23RISK
open ↗Exploit-DB✓ VexDay Proof
Opial 1.0 - 'albumID' SQL Injection
SQL injection vulnerability in albumdetail.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands vi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Rentventory - Multiple SQL Injections
SQL injection vulnerability in index.php in Rentventory allows remote attackers to execute arbitrary SQL commands via th
23RISK
open ↗Exploit-DB✓ VexDay Proof
Opial 1.0 - Authentication Bypass
SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands vi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Sourcefire 3D Sensor & Defense Center 4.8.x - Privilege Escalation
The web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor before 4.8.2 allow remote authentica
23RISK
open ↗Exploit-DB✓ VexDay Proof
Opial 1.0 - Authentication Bypass
SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands vi
23RISK
open ↗Exploit-DB✓ VexDay Proof
ARD-9808 DVR Card Security Camera - GET Remote Denial of Service
The ARD-9808 DVR card security camera allows remote attackers to cause a denial of service via a long URI composed of //
23RISK
open ↗Exploit-DB✓ VexDay Proof
kervinet forum 1.1 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in KerviNet Forum 1.1 and earlier allow remote attackers to execute arbitrary SQL
23RISK
open ↗Exploit-DB✓ VexDay Proof
kervinet forum 1.1 - Multiple Vulnerabilities
KerviNet Forum 1.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) admin
23RISK
open ↗Exploit-DB✓ VexDay Proof
AudioPLUS 2.00.215 - '.pls' Local Buffer Overflow (SEH)
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.0.0.215 allows remote attackers to execute arbitrary code via a long
23RISK
open ↗Exploit-DB✓ VexDay Proof
MP3-Nator 2.0 - '.plf' Universal Buffer Overflow (SEH)
Stack-based buffer overflow in Mp3-Nator 2.0 allows remote attackers to execute arbitrary code via (1) a long string in
28RISK
open ↗Exploit-DB✓ VexDay Proof
AudioPLUS 2.00.215 - '.pls' Local Buffer Overflow (SEH)
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.00.215 allows remote attackers to execute arbitrary code via a .pls
23RISK
open ↗Exploit-DB✓ VexDay Proof
AudioPLUS 2.00.215 - '.lst' / '.m3u' Local Buffer Overflow (SEH)
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.00.215 allows remote attackers to execute arbitrary code via a .pls
23RISK
open ↗Exploit-DB✓ VexDay Proof
CMS chainuk 1.2 - Multiple Vulnerabilities
Multiple directory traversal vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to include and execut
23RISK
open ↗Exploit-DB✓ VexDay Proof
ARD-9808 DVR Card Security Camera - Arbitrary Configuration Disclosure
The ARD-9808 DVR card security camera stores sensitive information under the web root with insufficient access control,
23RISK
open ↗Exploit-DB✓ VexDay Proof
kervinet forum 1.1 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in add_voting.php in KerviNet Forum 1.1 and earlier allows remote authenticated
23RISK
open ↗Exploit-DB✓ VexDay Proof
CMS chainuk 1.2 - Multiple Vulnerabilities
CMS Chainuk 1.2 and earlier allows remote attackers to obtain sensitive information via (1) a crafted id parameter to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
AudioPLUS 2.00.215 - '.lst' / '.m3u' Local Buffer Overflow (SEH)
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.0.0.215 allows remote attackers to execute arbitrary code via a long
23RISK
open ↗Exploit-DB✓ VexDay Proof
CMS chainuk 1.2 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in admin/admin_menu.php in CMS Chainuk 1.2 and earlier allows remote attackers
23RISK
open ↗Exploit-DB✓ VexDay Proof
CMS chainuk 1.2 - Multiple Vulnerabilities
Multiple static code injection vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
kervinet forum 1.1 - Multiple Vulnerabilities
admin/edit_user.php in KerviNet Forum 1.1 and earlier does not require administrative authentication, which allows remot
23RISK
open ↗Exploit-DB✓ VexDay Proof
PEamp 1.02b - '.m3u' Local Buffer Overflow (PoC)
Buffer overflow in amp.exe in Brothersoft PEamp 1.02b allows user-assisted remote attackers to execute arbitrary code vi
23RISK
open ↗Exploit-DB✓ VexDay Proof
PunBB Extension Vote For Us 1.0.1 - Blind SQL Injection
SQL injection vulnerability in voteforus.php in the Vote For Us extension 1.0.1 and earlier for PunBB allows remote atta
23RISK
open ↗Exploit-DB✓ VexDay Proof
jax formmailer 3.0.0 - Remote File Inclusion
PHP remote file inclusion vulnerability in formmailer.admin.inc.php in Jax FormMailer 3.0.0 allows remote attackers to e
23RISK
open ↗Exploit-DB✓ VexDay Proof
PunBB Affiliates Mod 1.1 - Blind SQL Injection
Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation (aka Affiliates) module 1.1.0 and earlier fo
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.