Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
77,620cataloged exploits
35,647CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,429GitHub PoC 14,270VulnCheck XDB 8,693Nuclei 4,299Metasploit 3,474✓ verified onlyrecentpopularrisk
24,455 exploits
Exploit-DB✓ VexDay Proof
Genecys 0.2 - Buffer Overflow / NULL Pointer (Denial of Service)
Buffer overflow in the tell_player_surr_changes function in Genecys 0.2 and earlier might allow remote attackers to exec
28RISK
open ↗Exploit-DB✓ VexDay Proof
Empire 4.3.2 - 'strncat' Denial of Service
The client_cmd function in Empire 4.3.2 and earlier allows remote attackers to cause a denial of service (application cr
23RISK
open ↗Exploit-DB✓ VexDay Proof
raydium svn 309 - Multiple Vulnerabilities
raydium_network_netcall_exec function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to ca
23RISK
open ↗Exploit-DB✓ VexDay Proof
Gphotos 1.4/1.5 - 'diapo.php?rep' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrar
23RISK
open ↗Exploit-DB✓ VexDay Proof
Gphotos 1.4/1.5 - 'index.php?rep' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrar
23RISK
open ↗Exploit-DB✓ VexDay Proof
Gphotos 1.4/1.5 - 'affich.php?image' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrar
23RISK
open ↗Exploit-DB✓ VexDay Proof
Gphotos 1.4/1.5 - 'index.php?rep' Traversal Arbitrary Directory Listing
Directory traversal vulnerability in index.php in GPhotos 1.5 and earlier allows remote attackers to read arbitrary file
23RISK
open ↗Exploit-DB✓ VexDay Proof
Ipswitch WhatsUp Professional 2006 - '/NmConsole/Navigation.asp?sDeviceView' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006
23RISK
open ↗Exploit-DB✓ VexDay Proof
OZJournals 1.2 - 'Vname' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in OZJournals 1.2 allows remote attackers to inject arbitrary web script or HTM
23RISK
open ↗Exploit-DB✓ VexDay Proof
phpBB 2.0.20 - Unauthorized HTTP Proxy
usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web
23RISK
open ↗Exploit-DB✓ VexDay Proof
Foing 0.7.0 - 'phpBB' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing 0.2.0 through 0.7.0, as used with phpBB, allow r
23RISK
open ↗Exploit-DB✓ VexDay Proof
Ipswitch WhatsUp Professional 2006 - '/NmConsole/ToolResults.asp?sHostname' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006
23RISK
open ↗Exploit-DB✓ VexDay Proof
Vizra - 'A_Login.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in a_login.php in Vizra allows remote attackers to inject arbitrary web script
23RISK
open ↗Exploit-DB✓ VexDay Proof
phpBB Chart Mod 1.1 - 'charts.php?id' SQL Injection
SQL injection vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to execute arbitrary SQL co
23RISK
open ↗Exploit-DB✓ VexDay Proof
GNU BinUtils 2.1x - Buffer Overflow
Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU
46RISK
open ↗Exploit-DB✓ VexDay Proof
Unclassified NewsBoard 1.6.1 patch 1 - Local File Inclusion
Directory traversal vulnerability in bb_lib/abbc.css.php in Unclassified NewsBoard (UNB) 1.5.3-d and possibly earlier ve
23RISK
open ↗Exploit-DB✓ VexDay Proof
phpBB Chart Mod 1.1 - 'charts.php?id' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Unclassified NewsBoard 1.6.1 patch 1 - Local File Inclusion
Directory traversal vulnerability in unb_lib/abbc.conf.php in Unclassified NewsBoard (UNB) 1.6.1 patch 1 and earlier, wh
23RISK
open ↗Exploit-DB✓ VexDay Proof
Geeklog 1.4 - Multiple Input Validation Vulnerabilities
Cross-site scripting (XSS) vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to inje
23RISK
open ↗Exploit-DB✓ VexDay Proof
Symantec Enterprise Firewall / Gateway Security - HTTP Proxy Internal IP Leakage
The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being us
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Path Conversion
The RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly co
23RISK
open ↗Exploit-DB✓ VexDay Proof
MultiCalendars 3.0 - 'All_calendars.asp' SQL Injection
SQL injection vulnerability in all_calendars.asp in MultiCalendars 3.0 allows remote attackers to execute arbitrary SQL
23RISK
open ↗Exploit-DB✓ VexDay Proof
EDirectoryPro - 'Search_result.asp' SQL Injection
SQL injection vulnerability in search_result.asp in EDirectoryPro 2.0 and earlier allows remote attackers to execute arb
23RISK
open ↗Exploit-DB✓ VexDay Proof
EImagePro - 'subList.asp?CatID' SQL Injection
Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1)
23RISK
open ↗Exploit-DB✓ VexDay Proof
EImagePro - 'view.asp?Pic' SQL Injection
Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1)
23RISK
open ↗Exploit-DB✓ VexDay Proof
MyBB 1.1.1 - 'showthread.php' SQL Injection
SQL injection vulnerability in showthread.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote attackers to execute arb
23RISK
open ↗Exploit-DB✓ VexDay Proof
EPublisherPro 0.9.7 - 'Moreinfo.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in moreinfo.asp in EPublisherPro allows remote attackers to inject arbitrary we
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Infotech Storage Library - Heap Corruption
Heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) allows user-assisted attackers to exe
28RISK
open ↗Exploit-DB✓ VexDay Proof
Intel Wireless Service - 's24evmon.exe' Shared Memory
S24EvMon.exe in the Intel PROset/Wireless software, possibly 10.1.0.33, uses a S24EventManagerSharedMemory shared memory
23RISK
open ↗Exploit-DB✓ VexDay Proof
ISPConfig 2.2.2/2.2.3 - 'Session.INC.php' Remote File Inclusion
PHP remote file inclusion vulnerability in session.inc.php in ISPConfig 2.2.2 and earlier allows remote attackers to exe
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.