Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
77,401cataloged exploits
35,511CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,332GitHub PoC 14,209VulnCheck XDB 8,646Nuclei 4,289Metasploit 3,474✓ verified onlyrecentpopularrisk
24,451 exploits
Exploit-DB✓ VexDay Proof
Word Viewer OCX 3.2 - Remote Denial of Service
The WordOCX ActiveX control in WordViewer.ocx 3.2.0.5 allows remote attackers to cause a denial of service (Internet Exp
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHPSecurityAdmin 4.0.2 - 'Logout.php' Remote File Inclusion
PHP remote file inclusion vulnerability in include/logout.php in Justin Koivisto SecurityAdmin for PHP (aka PHPSecurityA
23RISK
open ↗Exploit-DB✓ VexDay Proof
Pre News Manager 1.0 - SQL Injection
SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the (1
23RISK
open ↗Exploit-DB✓ VexDay Proof
Progress WebSpeed 3.0/3.1 - Denial of Service
WebSpeed 3.x in OpenEdge 10.x in Progress Software Progress 9.1e, and certain other 9.x versions, allows remote attacker
23RISK
open ↗Exploit-DB✓ VexDay Proof
3proxy 0.5.3g - exec-shield 'proxy.c logurl()' Remote Overflow
Buffer overflow in the HTTP proxy service for 3proxy 0.5 to 0.5.3g, and 0.6b-devel before 20070413, might allow remote a
28RISK
open ↗Exploit-DB✓ VexDay Proof
CMS Made Simple 1.0.5 - 'Stylesheet.php' SQL Injection
SQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote attackers to execute ar
23RISK
open ↗Exploit-DB✓ VexDay Proof
Atomix MP3 - '.MP3' File Buffer Overflow
Stack-based buffer overflow in AtomixMP3 allows remote attackers to execute arbitrary code via a long filename in an MP3
23RISK
open ↗Exploit-DB✓ VexDay Proof
ObieWebsite Mini Web Shop 2 - 'Sendmail.php?PATH_INFO' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Minh Nguyen Duong Obie Website Mini Web Shop 2 allow remote attac
23RISK
open ↗Exploit-DB✓ VexDay Proof
ObieWebsite Mini Web Shop 2 - 'order_form.php?PATH_INFO' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Minh Nguyen Duong Obie Website Mini Web Shop 2 allow remote attac
23RISK
open ↗Exploit-DB✓ VexDay Proof
X.Org X Window System Xserver 1.3 - XRender Extension Divide by Zero Denial of Service
The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows remo
23RISK
open ↗Exploit-DB✓ VexDay Proof
WordPress Plugin wordTube 1.43 - 'wpPATH' Remote File Inclusion
Directory traversal vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when reg
23RISK
open ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 2.0.0.3 - Href Denial of Service
Mozilla Firefox 2.0.0.3 allows remote attackers to cause a denial of service (application crash) via a long hostname in
23RISK
open ↗Exploit-DB✓ VexDay Proof
E-Annu - 'home.php' SQL Injection
SQL injection vulnerability in home.php in E-Annu allows remote attackers to execute arbitrary SQL commands via the a pa
23RISK
open ↗Exploit-DB✓ VexDay Proof
Aventail Connect 4.1.2.13 - Hostname Remote Buffer Overflow
Buffer overflow in asnsp.dll in Aventail Connect 4.1.2.13 allows remote attackers to cause a denial of service (applicat
28RISK
open ↗Exploit-DB✓ VexDay Proof
Gazi Download Portal - 'Down_Indir.asp' SQL Injection
SQL injection vulnerability in down_indir.asp in Gazi Download Portal allows remote attackers to execute arbitrary SQL c
23RISK
open ↗Exploit-DB✓ VexDay Proof
3proxy 0.5.3g (Windows x86) - 'proxy.c logurl()' Remote Buffer Overflow
Buffer overflow in the HTTP proxy service for 3proxy 0.5 to 0.5.3g, and 0.6b-devel before 20070413, might allow remote a
28RISK
open ↗Exploit-DB✓ VexDay Proof
3proxy 0.5.3g (Linux) - 'proxy.c logurl()' Remote Buffer Overflow
Buffer overflow in the HTTP proxy service for 3proxy 0.5 to 0.5.3g, and 0.6b-devel before 20070413, might allow remote a
28RISK
open ↗Exploit-DB✓ VexDay Proof
Fenice Oms server 1.10 - exec-shield Remote Buffer Overflow
Buffer overflow in the parse_url function in the RTSP module (rtsp/parse_url.c) in Fenice 1.10 and earlier allows remote
28RISK
open ↗Exploit-DB✓ VexDay Proof
IPIX Image Well - ActiveX 'iPIX-ImageWell-ipix.dll' Remote Buffer Overflow
Multiple buffer overflows in the Internet Pictures Corporation iPIX Image Well ActiveX control (iPIX-ImageWell-ipix.dll)
28RISK
open ↗Exploit-DB✓ VexDay Proof
MyDNS 1.1.0 - Remote Heap Overflow (PoC)
Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and poss
28RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - NCTAudioFile2.AudioFile ActiveX Remote Stack Overflow (2)
Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple prod
50RISK
open ↗Exploit-DB✓ VexDay Proof
ManageEngine Password Manager Pro Build 5401 - Database Remote Unauthorized Access
ManageEngine PasswordManager Pro (PMP) allows remote attackers to obtain administrative access to a database by injectin
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apache AXIS 1.0 - Non-Existent WSDL Path Information Disclosure
Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which re
28RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - '.ani' GDI Remote Privilege Escalation (MS07-017)
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attack
60RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - '.ani' GDI Remote Privilege Escalation (MS07-017)
The Graphics Rendering Engine in Microsoft Windows 2000 SP4 and XP SP2 allows local users to gain privileges via "invali
23RISK
open ↗Exploit-DB✓ VexDay Proof
Doruk100Net - 'Info.php' Remote File Inclusion
PHP remote file inclusion vulnerability in info.php in Doruk100.net doruk100net allows remote attackers to execute arbit
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - '.ani' GDI Remote Privilege Escalation (MS07-017)
Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and
23RISK
open ↗Exploit-DB✓ VexDay Proof
EsForum 3.0 - 'forum.php?idsalon' SQL Injection
SQL injection vulnerability in forum.php in EsForum 3.0 allows remote attackers to execute arbitrary SQL commands via th
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - '.ani' GDI Remote Privilege Escalation (MS07-017)
Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-a
28RISK
open ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - NETLINK_FIB_LOOKUP Local Denial of Service
The nl_fib_lookup function in net/ipv4/fib_frontend.c in Linux Kernel before 2.6.20.8 allows attackers to cause a denial
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.