Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
77,533cataloged exploits
35,607CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,407GitHub PoC 14,247VulnCheck XDB 8,663Nuclei 4,287Metasploit 3,474✓ verified onlyrecentpopularrisk
24,455 exploits
Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'footer.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'bio_content.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'gbook_content.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'login_header.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'lyrics_content.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'member_content.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'pastshows_content.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'shows_content.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'merch_content.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'sendemail.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'reviews_content.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'news_content.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'interview_content.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'releases_content.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'photo_content.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apple QuickTime 7.1.3 PlugIn - Arbitrary Script Execution
Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly condu
28RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'header.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
Wili-CMS 0.1.1 - Remote File Inclusion / Cross-Site Scripting / Full Path Disclosure
Multiple cross-site scripting (XSS) vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to inject arbit
23RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'signgbook_content.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
Wili-CMS 0.1.1 - Remote File Inclusion / Cross-Site Scripting / Full Path Disclosure
Patrick Michaelis Wili-CMS allows remote attackers to obtain sensitive information via a direct request for (1) thumbnai
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.x - AirPort Wireless Driver Multiple Buffer Overflow Vulnerabilities
Multiple stack-based buffer overflows in the AirPort wireless driver on Apple Mac OS X 10.3.9 and 10.4.7 allow physicall
23RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'help_news.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
Wili-CMS 0.1.1 - Remote File Inclusion / Cross-Site Scripting / Full Path Disclosure
Multiple PHP remote file inclusion vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to execute arbit
23RISK
open ↗Exploit-DB✓ VexDay Proof
CA eSCC r8/1.0 / eTrust Audit r8/1.5 - Web Server Full Path Disclosure
The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running
23RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'help_merch.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'help_mp3.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'links_content.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1 - 'mp3_content.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
CA eSCC r8/1.0 / eTrust Audit r8/1.5 - Audit Event System Replay Attack
Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows re
28RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Kernel - Local Privilege Escalation (MS06-049)
Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to
28RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.