Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
77,449cataloged exploits
35,552CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,367GitHub PoC 14,225VulnCheck XDB 8,649Nuclei 4,283Metasploit 3,474✓ verified onlyrecentpopularrisk
24,451 exploits
Exploit-DB✓ VexDay Proof
Microsoft Help Workshop 4.03.0002 - '.HPJ' Local Buffer Overflow
Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitr
35RISK
open ↗Exploit-DB✓ VexDay Proof
Rumpus 5.1 - Local Privilege Escalation / Remote FTP LIST
Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote authenticated users to execut
23RISK
open ↗Exploit-DB✓ VexDay Proof
HP JetDirect FTP Print Server - 'RERT' Denial of Service
The FTP service in HP JetDirect print servers allows remote attackers to cause a denial of service (engine crash) via a
23RISK
open ↗Exploit-DB✓ VexDay Proof
ArsDigita Community System 3.4.x - Directory Traversal
Directory traversal vulnerability in ArsDigita Community System (ACS) 3.4.10 and earlier, and ArsDigita Community Educat
23RISK
open ↗Exploit-DB✓ VexDay Proof
MyBloggie 2.1.5 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5 allows remote attackers t
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - VML Download and Execute (MS07-004)
Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, an
35RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Help Workshop 4.03.0002 - '.cnt' Local Buffer Overflow
Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitr
35RISK
open ↗Exploit-DB✓ VexDay Proof
Woltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (3)
SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in the
23RISK
open ↗Exploit-DB✓ VexDay Proof
KarjaSoft Sami FTP Server 2.0.2 - USER/PASS Remote Buffer Overflow
Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER c
60RISK
open ↗Exploit-DB✓ VexDay Proof
MyBloggie 2.1.5 - 'login.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5 allows remote attackers t
23RISK
open ↗Exploit-DB✓ VexDay Proof
avm fritz!dsl igd control service 2.2.29 - Directory Traversal Information Disclosure
Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - VML Remote Buffer Overflow (MS07-004)
Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, an
35RISK
open ↗Exploit-DB✓ VexDay Proof
Oracle January 2007 Security Update - Multiple Vulnerabilities
Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.11 and 8.48.06 has unknown i
23RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'register.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'power_search.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
DT_Guestbook 1.0 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in DT Guestbook (dt_guestbook) 1.0f, when register_globals is enab
23RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'mailing_list.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'login.php?Error_msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'new.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'user_detail.php?u' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'upgrade.php?gateway' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'tell_friend.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'suggest_category.php?Error_msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'send_pwd.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'Sendmail.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'search.php?keyword' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISK
open ↗Exploit-DB✓ VexDay Proof
Squid Proxy 2.5/2.6 - FTP URI Remote Denial of Service
squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via craft
28RISK
open ↗Exploit-DB✓ VexDay Proof
Jax Petition 3.06 Book - 'smileys.php?languagepack' Local File Inclusion
Multiple directory traversal vulnerabilities in Jax Petition Book 1.0.3.06 allow remote attackers to include and execute
23RISK
open ↗Exploit-DB✓ VexDay Proof
InstantASP 4.1 - 'Logon.aspx?sessionid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in InstantASP 4.1.0 allow remote attackers to inject arbitrary web s
23RISK
open ↗Exploit-DB✓ VexDay Proof
Jax Petition Book 3.06 - 'jax_petitionbook.php?languagepack' Local File Inclusion
Multiple directory traversal vulnerabilities in Jax Petition Book 1.0.3.06 allow remote attackers to include and execute
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.