Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
77,900cataloged exploits
35,840CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,458Referência 22,600GitHub PoC 14,323VulnCheck XDB 8,722Nuclei 4,320Metasploit 3,477✓ verified onlyrecentpopularrisk
24,458 exploits
Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (2)
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RISK
open ↗Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (3)
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RISK
open ↗Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (1)
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RISK
open ↗Exploit-DB✓ VexDay Proof
PSOProxy 0.91 (Windows 2000/XP) - Remote Buffer Overflow
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod
50RISK
open ↗Exploit-DB✓ VexDay Proof
Symantec Gateway Security 5400 Series 2.0 - Error Page Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attac
23RISK
open ↗Exploit-DB✓ VexDay Proof
Proxy-Pro Professional GateKeeper Pro 4.7 - Web proxy Remote Buffer Overflow
Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET
50RISK
open ↗Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3/4/5 - MDTM Command Time Argument Buffer Overflow (4)
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RISK
open ↗Exploit-DB✓ VexDay Proof
MTools 3.9.x - 'MFormat' Local Privilege Escalation
MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permission
23RISK
open ↗Exploit-DB✓ VexDay Proof
RedStorm Ghost Recon Game Engine - Remote Denial of Service
Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.
23RISK
open ↗Exploit-DB✓ VexDay Proof
GWeb HTTP Server 0.5/0.6 - Directory Traversal
Directory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view arbitrary files via a .. (dot
23RISK
open ↗Exploit-DB✓ VexDay Proof
RobotFTP Server 1.0/2.0 - Remote Denial of Service
PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP co
23RISK
open ↗Exploit-DB✓ VexDay Proof
Working Resources BadBlue Server 2.40 - 'PHPtest.php' Full Path Disclosure
BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apache Cygwin 1.3.x/2.0.x - Directory Traversal
Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, a
28RISK
open ↗Exploit-DB✓ VexDay Proof
Proxy-Pro Professional GateKeeper 4.7 Web Proxy - Buffer Overrun
Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET
50RISK
open ↗Exploit-DB✓ VexDay Proof
EZBoard 7.3 - Font Tag HTML Injection
Cross-site scripting (XSS) vulnerability in the font tag in ezBoard 7.3u allows remote attackers to execute arbitrary sc
23RISK
open ↗Exploit-DB✓ VexDay Proof
XMB Forum 1.8 - 'editprofile.php?user' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary scr
23RISK
open ↗Exploit-DB✓ VexDay Proof
XMB Forum 1.8 - 'u2uadmin.php?uid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary scr
23RISK
open ↗Exploit-DB✓ VexDay Proof
Samhain Labs 1.x - HSFTP Remote Format String
Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly ex
23RISK
open ↗Exploit-DB✓ VexDay Proof
XMB Forum 1.8 - BBcode align Tag Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary scr
23RISK
open ↗Exploit-DB✓ VexDay Proof
XMB Forum 1.8 - 'forumdisplay.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain priv
23RISK
open ↗Exploit-DB✓ VexDay Proof
phpNewsManager 1.36 - functions Script File Disclosure
Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
Dell TrueMobile 1300 WLAN System 3.10.39.0 Tray Applet - Local Privilege Escalation
Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started
23RISK
open ↗Exploit-DB✓ VexDay Proof
LGames LBreakout2 2.2.2 - Multiple Environment Variable Buffer Overflow Vulnerabilities
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable
23RISK
open ↗Exploit-DB✓ VexDay Proof
TYPSoft FTP Server 1.1 - Remote CPU Consumption (Denial of Service)
TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (CPU consumption) via "//../" arg
23RISK
open ↗Exploit-DB✓ VexDay Proof
PSOProxy 0.91 - Remote Buffer Overflow (1)
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod
50RISK
open ↗Exploit-DB✓ VexDay Proof
PSOProxy 0.91 - Remote Buffer Overflow (2)
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod
50RISK
open ↗Exploit-DB✓ VexDay Proof
PSOProxy 0.91 - Remote Buffer Overflow (3)
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod
50RISK
open ↗Exploit-DB✓ VexDay Proof
AOL Instant Messenger 4.x/5.x - Buddy Icon Predictable File Location
The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allo
23RISK
open ↗Exploit-DB✓ VexDay Proof
Fool's Workshop Owl's Workshop 1.0 - 'readings/index.php' Arbitrary File Access
OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /glossa
23RISK
open ↗Exploit-DB✓ VexDay Proof
Fool's Workshop Owl's Workshop 1.0 - 'resultsignore.php' Arbitrary File Access
OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /glossa
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.