Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
77,545cataloged exploits
35,609CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,407GitHub PoC 14,247VulnCheck XDB 8,663Nuclei 4,299Metasploit 3,474✓ verified onlyrecentpopularrisk
24,455 exploits
Exploit-DB✓ VexDay Proof
Solaris 10 - 'sysinfo()' Local Kernel Memory Disclosure (1)
systeminfo.c for Sun Solaris allows local users to read kernel memory via a 0 variable count argument to the sysinfo sys
23RISK
open ↗Exploit-DB✓ VexDay Proof
MusicBox 2.3.4 - 'page' SQL Injection
SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to execute arbitrary SQL comma
23RISK
open ↗Exploit-DB✓ VexDay Proof
Lussumo Vanilla 1.0 - RootDirectory Remote File Inclusion
PHP remote file inclusion vulnerability in upgrader.php in Vanilla CMS 1.0.1 and earlier, when /conf/old_settings.php ex
23RISK
open ↗Exploit-DB✓ VexDay Proof
Cheese Tracker 0.9.9 - Local Buffer Overflow
Buffer overflow in the Loader_XM::load_instrument_internal function in loader_xm.cpp for Cheese Tracker 0.9.9 and earlie
23RISK
open ↗Exploit-DB✓ VexDay Proof
Mambo Component multibanners 1.0.1 - Remote File Inclusion
PHP remote file inclusion vulnerability in extadminmenus.class.php in the MultiBanners 1.0.1 for Mambo allows remote att
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Multiple Object ListWidth Property Denial of Service Vulnerabilities
Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via a (1) F
28RISK
open ↗Exploit-DB✓ VexDay Proof
GnuPG 1.4/1.9 - Parse_Comment Remote Buffer Overflow
Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial of service (segmentatio
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Internet.HHCtrl Click Denial of Service
Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application cras
28RISK
open ↗Exploit-DB✓ VexDay Proof
Apache Tomcat 5 - Information Disclosure
Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with
35RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Mailslot Ring0 Memory Corruption (MS06-035)
The Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other prod
35RISK
open ↗Exploit-DB✓ VexDay Proof
Chameleon LE 1.203 - 'index.php' Directory Traversal
Directory traversal vulnerability in index.php in UNIDOmedia Chameleon LE 1.203 and earlier, and possibly Chameleon PRO,
23RISK
open ↗Exploit-DB✓ VexDay Proof
Advanced Poll 2.0.2 - 'common.inc.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Advanced Poll 2.0.2 allow remote attackers to execute arbitrary PH
23RISK
open ↗Exploit-DB✓ VexDay Proof
LoudBlog 0.5 - SQL Injection / Admin Credentials Disclosure
SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Mailslot Ring0 Memory Corruption (MS06-035)
The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a de
60RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft IIS - ASP Stack Overflow (MS06-034)
Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows local and possibly remote atta
45RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Mailslot Ring0 Memory Corruption (MS06-035)
Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server
35RISK
open ↗Exploit-DB✓ VexDay Proof
Sendmail 8.13.5 - Remote Signal Handling (PoC)
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by trig
28RISK
open ↗Exploit-DB✓ VexDay Proof
IDevSpot PHPHostBot 1.0 - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in order/index.php in IDevSpot (1) PhpHostBot 1.0 and (2) AutoHost 3.0 allows re
23RISK
open ↗Exploit-DB✓ VexDay Proof
IDevSpot PHPLinkExchange 1.0 - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - String To Binary Function Denial of Service
Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application cras
28RISK
open ↗Exploit-DB✓ VexDay Proof
Geodesic Solutions (Multiple Products) - 'index.php?b' SQL Injection
SQL injection vulnerability in index.php in GeodesicSolutions (1) GeoAuctions Premier 2.0.3 and (2) GeoClassifieds Basic
23RISK
open ↗Exploit-DB✓ VexDay Proof
MiniBB 1.5 - 'news.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP
23RISK
open ↗Exploit-DB✓ VexDay Proof
SiteDepth CMS 3.0.1 - 'SD_DIR' Remote File Inclusion
PHP remote file inclusion vulnerability in constants.php in SiteDepth CMS 3.01 and earlier allows remote attackers to ex
23RISK
open ↗Exploit-DB✓ VexDay Proof
Cisco/Protego CS-MARS < 4.2.1 - 'JBoss' Remote Code Execution
Multiple unspecified vulnerabilities in the Command Line Interface (CLI) for Cisco Security Monitoring, Analysis and Res
23RISK
open ↗Exploit-DB✓ VexDay Proof
GeoAuctions 1.0.6 Enterprise - 'index.php?d' SQL Injection
SQL injection vulnerability in index.php in GeodesicSolutions GeoAuctions Enterprise 1.0.6 allows remote attackers to ex
23RISK
open ↗Exploit-DB✓ VexDay Proof
Dumb 0.9.3 - 'it_read_envelope' Remote Heap Overflow (PoC)
Heap-based buffer overflow in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and ear
28RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - OVCtl Denial of Service
Internet Explorer 6 on Windows XP SP2, when Outlook is installed, allows remote attackers to cause a denial of service (
28RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - DataSourceControl Denial of Service
DataSourceControl in Internet Explorer 6 on Windows XP SP2 with Office installed allows remote attackers to cause a deni
28RISK
open ↗Exploit-DB✓ VexDay Proof
Cisco Security Monitoring Analysis and Response System JBoss - Command Execution
jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitorin
28RISK
open ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.13 < 2.6.17.4 - 'logrotate prctl()' Local Privilege Escalation
The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a l
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.