Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
77,449cataloged exploits
35,552CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,367GitHub PoC 14,225VulnCheck XDB 8,649Nuclei 4,283Metasploit 3,474✓ verified onlyrecentpopularrisk
24,451 exploits
Exploit-DB✓ VexDay Proof
PortailPHP 2 - '/mod_search/index.php?chemin' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to execute arbit
23RISK
open ↗Exploit-DB✓ VexDay Proof
PortailPHP 2 - '/mod_news/goodies.php?chemin' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to execute arbit
23RISK
open ↗Exploit-DB✓ VexDay Proof
PortailPHP 2 - '/mod_news/goodies.php?chemin' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to read arbitrary file
23RISK
open ↗Exploit-DB✓ VexDay Proof
KDPics 1.11 - 'exif.php?lib_path' Remote File Inclusion
Multiple cross-site scripting (XSS) vulnerabilities in KDPics 1.16 and earlier allow remote attackers to inject arbitrar
23RISK
open ↗Exploit-DB✓ VexDay Proof
EasyMail Objects 6.x - Connect Method Remote Stack Buffer Overflow
Stack-based buffer overflow in the Connect method in the IMAP4 component in Quiksoft EasyMail Objects before 6.5 allows
23RISK
open ↗Exploit-DB✓ VexDay Proof
EasyMoblog 0.5.1 - Multiple Input Validation Vulnerabilities
Multiple SQL injection vulnerabilities in EasyMoblog 0.5.1 allow remote attackers to execute arbitrary SQL commands via
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHPProbid 5.24 - 'Lang.php' Remote File Inclusion
PHP remote file inclusion vulnerability in lang.php in PHPProbid 5.24 allows remote attackers to execute arbitrary PHP c
23RISK
open ↗Exploit-DB✓ VexDay Proof
Flipper Poll 1.1.0 - 'poll.php?root_path' Remote File Inclusion
PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
CA BrightStor ARCserve - 'lgserver.exe' Remote Stack Overflow
Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1
60RISK
open ↗Exploit-DB✓ VexDay Proof
Comodo Firewall 2.3.6 - 'CMDMon.SYS' Multiple Denial of Service Vulnerabilities
cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not validate arguments that
23RISK
open ↗Exploit-DB✓ VexDay Proof
Portail Web PHP 2.5.1 - 'includes.php' Remote File Inclusion
PHP remote file inclusion vulnerability in includes/includes.php in Guernion Sylvain Portail Web Php (aka Gsylvain35 Por
23RISK
open ↗Exploit-DB✓ VexDay Proof
OpenEMR 2.8.2 - 'Login_Frame.php' Cross-Site Scripting
Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwr
23RISK
open ↗Exploit-DB✓ VexDay Proof
OpenEMR 2.8.2 - 'Import_XML.php' Remote File Inclusion
Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwr
23RISK
open ↗Exploit-DB✓ VexDay Proof
EncapsCMS 0.3.6 - 'common_foot.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in EncapsCMS 0.3.6 allow remote attackers to execute arbitrary PHP co
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - iPhoto 'photo://' URL Handling Format String
Format string vulnerability in iPhoto 6.0.5 allows remote user-assisted attackers to cause a denial of service (crash) v
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apple iChat Bonjour 3.1.6.441 - Multiple Denial of Service Vulnerabilities
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allow
23RISK
open ↗Exploit-DB✓ VexDay Proof
CascadianFAQ 4.1 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to exe
23RISK
open ↗Exploit-DB✓ VexDay Proof
Sun Solaris 10 - ICMP Remote Denial of Service
Unspecified vulnerability in Sun Solaris 10 before 20070130 allows remote attackers to cause a denial of service (system
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apple iChat Bonjour 3.1.6.441 - Multiple Denial of Service Vulnerabilities
The Bonjour functionality in iChat in Apple Mac OS X 10.3.9 allows remote attackers to cause a denial of service (persis
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apple iChat Bonjour 3.1.6.441 - Multiple Denial of Service Vulnerabilities
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - Safari window.console.log Format String
Format string vulnerability in Apple Safari 2.0.4 (419.3) allows remote user-assisted attackers to cause a denial of ser
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - iMovie HD '.imovieproj' Filename Format String
Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-as
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - Help Viewer '.help' Filename Format String
Format string vulnerability in Help Viewer 3.0.0 allows remote user-assisted attackers to cause a denial of service (cra
23RISK
open ↗Exploit-DB✓ VexDay Proof
CVSTrac 2.0.0 - Defacement Denial of Service
The is_eow function in format.c in CVSTrac before 2.0.1 does not properly check for the "'" (quote) character, which all
23RISK
open ↗Exploit-DB✓ VexDay Proof
SSC DiskAccess NFS Client - 'DAPCNFSD.dll' Remote Stack Buffer Overflow
Buffer overflow in the EnumPrintersA function in dapcnfsd.dll 0.6.4.0 in Shaffer Solutions (SSC) DiskAccess NFS Client a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.8 (8L2127) - 'crashdump' Local Privilege Escalation
crashdump in Apple Mac OS X 10.4.8 allows local users in the admin group to modify arbitrary files or gain privileges vi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1 - Multiple ActiveX Controls Denial of Service Vulnerabilities
Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of se
35RISK
open ↗Exploit-DB✓ VexDay Proof
Multiple Printer Providers (Spooler Service) - Local Privilege Escalation
Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91 through 4.91 SP2 allow remo
35RISK
open ↗Exploit-DB✓ VexDay Proof
Trend Micro VirusWall 3.81 - 'vscan/VSAPI' Local Buffer Overflow
Buffer overflow in libvsapi.so in the VSAPI library in Trend Micro VirusWall 3.81 for Linux, as used by IScan.BASE/vscan
23RISK
open ↗Exploit-DB✓ VexDay Proof
CA BrightStor ARCserve - 'msgeng.exe' Remote Heap Overflow (2)
Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1
60RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.