Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
77,401cataloged exploits
35,511CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,332GitHub PoC 14,209VulnCheck XDB 8,646Nuclei 4,289Metasploit 3,474✓ verified onlyrecentpopularrisk
24,451 exploits
Exploit-DB✓ VexDay Proof
ACDSee 9.0 Photo Manager - Multiple '.BMP' Denial of Service Vulnerabilities
Integer overflow in ACDSee Photo Manager 9.0 allows context-dependent attackers to cause a denial of service and possibl
23RISK
open ↗Exploit-DB✓ VexDay Proof
IrfanView 3.99 - Multiple .BMP Denial of Service Vulnerabilities
Buffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of service and possibly execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
HP Mercury Quality Center - Spider90.ocx ProgColor Overflow
Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for M
50RISK
open ↗Exploit-DB✓ VexDay Proof
phpMyNewsletter 0.6.10 - 'customize.php' Remote File Inclusion
PHP remote file inclusion vulnerability in customize.php for phpMyNewsletter 0.6.10 allows remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
TrueCrypt 4.3 - 'setuid' Local Privilege Escalation
TrueCrypt 4.3, when installed setuid root, allows local users to cause a denial of service (filesystem unavailability) o
23RISK
open ↗Exploit-DB✓ VexDay Proof
FastStone Image Viewer 2.9/3.6 - '.bmp' Image Handling Memory Corruption
Integer overflow in FastStone Image Viewer 2.9 allows context-dependent attackers to cause a denial of service and possi
23RISK
open ↗Exploit-DB✓ VexDay Proof
AOL SuperBuddy - ActiveX Control Remote Code Execution (Metasploit)
The LinkSBIcons method in the SuperBuddy ActiveX control (Sb.SuperBuddy.1) in America Online 9.0 Security Edition derefe
23RISK
open ↗Exploit-DB✓ VexDay Proof
Gazi Okul Sitesi 2007 - 'Fotokategori.asp' SQL Injection
SQL injection vulnerability in fotokategori.asp in Gazi Okul Sitesi 2007 allows remote attackers to execute arbitrary SQ
23RISK
open ↗Exploit-DB✓ VexDay Proof
HP Mercury Quality Center 9.0 build 9.1.0.4352 - SQL Execution
qcbin/servlet/tdservlet/TDAPI_GeneralWebTreatment in HP Mercury Quality Center 9.0 build 9.1.0.4352 allows remote authen
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Animated Cursor '.ani' Local Overflow (Hardware DEP)
Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code
50RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Animated Cursor '.ani' Universal Generator
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attack
60RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Animated Cursor '.ani' Universal Generator
Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code
50RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Animated Cursor '.ani' Local Overflow (Hardware DEP)
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attack
60RISK
open ↗Exploit-DB✓ VexDay Proof
Frontbase 4.2.7 - (Authenticated) Remote Buffer Overflow (2.2)
Buffer overflow in FrontBase Relational Database Server 4.2.7 and earlier allows remote authenticated users, with privil
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Animated Cursor '.ani' Local Buffer Overflow
Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code
50RISK
open ↗Exploit-DB✓ VexDay Proof
PulseAudio 0.9.5 - 'Assert()' Remote Denial of Service
PulseAudio 0.9.5 allows remote attackers to cause a denial of service (daemon crash) via (1) a PA_PSTREAM_DESCRIPTOR_LEN
23RISK
open ↗Exploit-DB✓ VexDay Proof
XOOPS Module XFsection 1.07 - 'articleId' Blind SQL Injection
SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows rem
23RISK
open ↗Exploit-DB✓ VexDay Proof
XOOPS Module Zmagazine 1.0 - 'print.php' SQL Injection
SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows rem
23RISK
open ↗Exploit-DB✓ VexDay Proof
XOOPS Module WF-Section 1.01 - 'articleId' SQL Injection
SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows rem
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Animated Cursor '.ani' Local Buffer Overflow
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attack
60RISK
open ↗Exploit-DB✓ VexDay Proof
WinMail Server 4.4 build 1124 - 'WebMail' Remote Add Super User
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows rem
23RISK
open ↗Exploit-DB✓ VexDay Proof
Symantec (Multiple Products) - 'SPBBCDrv' Driver Local Denial of Service
SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before b
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP - Animated Cursor '.ani' Remote Overflow (2)
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attack
60RISK
open ↗Exploit-DB✓ VexDay Proof
HP Instant Support - ActiveX Control Driver Check Buffer Overflow
Stack-based buffer overflow in the HPSDDX Class (SDD) ActiveX control in sdd.dll in HP Instant Support - Driver Check be
28RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP/Vista - Animated Cursor '.ani' Remote Overflow
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attack
60RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Animated Cursor '.ani' Remote (eeye patch Bypass)
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attack
60RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP/Vista - Animated Cursor '.ani' Remote Overflow
Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code
50RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP - Animated Cursor '.ani' Remote Overflow (2)
Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code
50RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Animated Cursor '.ani' Remote (eeye patch Bypass)
Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code
50RISK
open ↗Exploit-DB✓ VexDay Proof
IPSwitch IMail Server 8.20 - IMAPD Remote Buffer Overflow
Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), a
35RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.