Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
78,056cataloged exploits
35,925CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,458Referência 22,640GitHub PoC 14,392VulnCheck XDB 8,755Nuclei 4,333Metasploit 3,478✓ verified onlyrecentpopularrisk
24,458 exploits
Exploit-DB✓ VexDay Proof
Vignette 4.x/5.0 - Memory Disclosure
Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to r
23RISK
open ↗Exploit-DB✓ VexDay Proof
Vignette 4/5 - Cross-Site Scripting
Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow rem
23RISK
open ↗Exploit-DB✓ VexDay Proof
Batalla Naval 1.0 4 - Remote Buffer Overflow (2)
Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long
28RISK
open ↗Exploit-DB✓ VexDay Proof
Batalla Naval 1.0 4 - Remote Buffer Overflow (1)
Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long
28RISK
open ↗Exploit-DB✓ VexDay Proof
Ultimate PHP Board 1.9 - 'admin_iplog.php' Arbitrary PHP Execution
Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via
23RISK
open ↗Exploit-DB✓ VexDay Proof
BLNews 2.1.3 - Remote File Inclusion
objects.inc.php4 in BLNews 2.1.3 allows remote attackers to execute arbitrary PHP code via a Server[path] parameter that
23RISK
open ↗Exploit-DB✓ VexDay Proof
IISProtect 2.1/2.2 - Web Administration Interface SQL Injection
SQL injection vulnerability in the web-based administration interface for iisPROTECT 2.2-r4, and possibly earlier versio
23RISK
open ↗Exploit-DB✓ VexDay Proof
AIX 4.3/5.1 - diagrpt Arbitrary Privileged Program Execution
diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allow
23RISK
open ↗Exploit-DB✓ VexDay Proof
Prishtina FTP Client 1.x - Remote Denial of Service
Buffer overflow in Prishtina FTP client 1.x allows remote FTP servers to cause a denial of service (crash) and possibly
23RISK
open ↗Exploit-DB✓ VexDay Proof
UML_NET - Integer Mismanagement Code Execution
uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users
23RISK
open ↗Exploit-DB✓ VexDay Proof
Maelstrom Server 3.0.x - Argument Buffer Overflow (2)
Buffer overflow in Maelstrom 3.0.6, 3.0.5, and earlier allows local users to execute arbitrary code via a long -server c
23RISK
open ↗Exploit-DB✓ VexDay Proof
WsMp3d 0.x - Remote Heap Overflow
Multiple heap-based buffer overflows in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allow remote attackers to execute arbit
23RISK
open ↗Exploit-DB✓ VexDay Proof
Nessus 2.0.x - LibNASL Arbitrary Code Execution
Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause
23RISK
open ↗Exploit-DB✓ VexDay Proof
Qualcomm Eudora 5.2.1/6.0 - File Attachment Spoofing Variant
Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by
23RISK
open ↗Exploit-DB✓ VexDay Proof
IISProtect 2.1/2.2 - Authentication Bypass
iisPROTECT 2.1 and 2.2 allows remote attackers to bypass authentication via an HTTP request containing URL-encoded chara
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apple QuickTime/Darwin Streaming MP3Broadcaster - ID3 Tag Handling
Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a
23RISK
open ↗Exploit-DB✓ VexDay Proof
WSMP3 0.0.x - Remote Command Execution
Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execut
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP - 'explorer.exe' Local Buffer Overflow
Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the XP user via a desktop.in
23RISK
open ↗Exploit-DB✓ VexDay Proof
Maelstrom Server 3.0.x - Argument Buffer Overflow (3)
Buffer overflow in Maelstrom 3.0.6, 3.0.5, and earlier allows local users to execute arbitrary code via a long -server c
23RISK
open ↗Exploit-DB✓ VexDay Proof
Working Resources BadBlue 1.7.x/2.x - Unauthorized HTS Access
The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a filen
23RISK
open ↗Exploit-DB✓ VexDay Proof
CUPS 1.1.x - Cupsd Request Method Denial of Service
CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port (
28RISK
open ↗Exploit-DB✓ VexDay Proof
Maelstrom Server 3.0.x - Argument Buffer Overflow (1)
Buffer overflow in Maelstrom 3.0.6, 3.0.5, and earlier allows local users to execute arbitrary code via a long -server c
23RISK
open ↗Exploit-DB✓ VexDay Proof
EJ3 TOPo 2.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in index.php for TOPo 2.2 (2.2.178) allows remote attackers to inject arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
ttCMS 2.2/2.3 - 'header.php' Remote File Inclusion
header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcms_user_admin
23RISK
open ↗Exploit-DB✓ VexDay Proof
Snowblind Web Server 1.0/1.1 - GET Buffer Overflow
Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary cod
23RISK
open ↗Exploit-DB✓ VexDay Proof
Snowblind Web Server 1.0/1.1 - Malformed HTTP Request Denial of Service
Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) via a URL that ends in a "</" sequ
23RISK
open ↗Exploit-DB✓ VexDay Proof
Snowblind 1.0/1.1 - Web Server File Disclosure
Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to read arbitrary files via a .. (
23RISK
open ↗Exploit-DB✓ VexDay Proof
EZ Publish 2.2 - 'index.php' IMG Tag Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitra
23RISK
open ↗Exploit-DB✓ VexDay Proof
OneOrZero Helpdesk 1.4 - 'install.php' Administrative Access
one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly callin
23RISK
open ↗Exploit-DB✓ VexDay Proof
OneOrZero Helpdesk 1.4 - 'TUpdate.php' SQL Injection
SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.