Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
77,449cataloged exploits
35,552CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,367GitHub PoC 14,225VulnCheck XDB 8,649Nuclei 4,283Metasploit 3,474✓ verified onlyrecentpopularrisk
24,451 exploits
Exploit-DB✓ VexDay Proof
Microsoft Windows Explorer - 'explorer.exe .WMV' File Handling Denial of Service
explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cau
28RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Media Player 6.4/10.0 - MID Malformed Header Chunk Denial of Service
Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial o
28RISK
open ↗Exploit-DB✓ VexDay Proof
OpenLDAP 2.4.3 - 'KBIND' Remote Buffer Overflow
Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP
23RISK
open ↗Exploit-DB✓ VexDay Proof
GenesisTrader 1.0 - 'form.php' Arbitrary File Source Disclosure
form.php in GenesisTrader 1.0 allows remote attackers to read source code for arbitrary files and obtain sensitive infor
23RISK
open ↗Exploit-DB✓ VexDay Proof
Moodle 1.5/1.6 - '/mod/forum/discuss.php?navtail' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote attackers to inject arbi
23RISK
open ↗Exploit-DB✓ VexDay Proof
GenesisTrader 1.0 - 'form.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in form.php in GenesisTrader 1.0 allow remote attackers to inject ar
23RISK
open ↗Exploit-DB✓ VexDay Proof
Hilgraeve HyperAccess 8.4 - Multiple Remote Command Execution Vulnerabilities
Argument injection vulnerability in HyperAccess 8.4 allows user-assisted remote attackers to execute arbitrary vbscript
23RISK
open ↗Exploit-DB✓ VexDay Proof
ProFTPd 1.3.0a - 'mod_ctrls' 'support' Local Buffer Overflow (PoC)
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Word Document - Malformed Pointer (PoC)
Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to ex
35RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Word Document - Malformed Pointer (PoC)
Integer overflow in OpenOffice.org (OOo) 2.1 allows user-assisted remote attackers to cause a denial of service (applica
23RISK
open ↗Exploit-DB✓ VexDay Proof
FileZilla FTP Server 0.9.21 - 'LIST/NLST' Denial of Service
FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a malformed argument to
23RISK
open ↗Exploit-DB✓ VexDay Proof
CMS Made Simple 1.0.2 - 'SearchInput' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitra
23RISK
open ↗Exploit-DB✓ VexDay Proof
Sophos AntiVirus - '.CHM' Chunk Name Length Memory Corruption (PoC)
Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.1
28RISK
open ↗Exploit-DB✓ VexDay Proof
Sophos AntiVirus - '.CHM' File Heap Overflow (PoC)
Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10,
28RISK
open ↗Exploit-DB✓ VexDay Proof
Sophos / Trend Micro AntiVirus - '.RAR' File Denial of Service (PoC)
Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.1
28RISK
open ↗Exploit-DB✓ VexDay Proof
FileZilla FTP Server 0.9.20b/0.9.21 - 'STOR' Denial of Service
FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a malformed argument to
23RISK
open ↗Exploit-DB✓ VexDay Proof
KDPics 1.11/1.16 - 'galeries.inc.php3?categories' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in KDPics 1.16 and earlier allow remote attackers to inject arbitrar
23RISK
open ↗Exploit-DB✓ VexDay Proof
AnnonceScriptHP 2.0 - '/admin/admin_config/Aide.php?email' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to inject arbitrary we
23RISK
open ↗Exploit-DB✓ VexDay Proof
AnnonceScriptHP 2.0 - 'email.php?id' SQL Injection
Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands v
28RISK
open ↗Exploit-DB✓ VexDay Proof
AnnonceScriptHP 2.0 - '/Templates/admin.dwt.php?email' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to inject arbitrary we
23RISK
open ↗Exploit-DB✓ VexDay Proof
AnnonceScriptHP 2.0 - '/Templates/commun.dwt.php?email' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to inject arbitrary we
23RISK
open ↗Exploit-DB✓ VexDay Proof
AnnonceScriptHP 2.0 - 'erreurinscription.php?email' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to inject arbitrary we
23RISK
open ↗Exploit-DB✓ VexDay Proof
Messageriescripthp 2.0 - 'existepseudo.php?pseudo' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Messageriescripthp 2.0 allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
Messageriescripthp 2.0 - 'existeemail.php?email' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Messageriescripthp 2.0 allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
AnnonceScriptHP 2.0 - '/admin/admin_membre/fiche_membre.php?idmembre' SQL Injection
Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands v
28RISK
open ↗Exploit-DB✓ VexDay Proof
Messageriescripthp 2.0 - '/Contact/contact.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Messageriescripthp 2.0 allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
ProNews 1.5 - 'lire-avis.php?aa' SQL Injection
SQL injection vulnerability in lire-avis.php in ProNews 1.5 allows remote attackers to execute arbitrary SQL commands vi
23RISK
open ↗Exploit-DB✓ VexDay Proof
AnnonceScriptHP 2.0 - 'membre.dwt.php?email' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to inject arbitrary we
23RISK
open ↗Exploit-DB✓ VexDay Proof
AnnonceScriptHP 2.0 - 'voirannonce.php?no' SQL Injection
Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands v
28RISK
open ↗Exploit-DB✓ VexDay Proof
ProNews 1.5 - '/admin/change.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in ProNews 1.5 allow remote attackers to inject arbitrary web script
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.