Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
78,324cataloged exploits
36,054CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,458Referência 22,721GitHub PoC 14,477VulnCheck XDB 8,829Nuclei 4,350Metasploit 3,489✓ verified onlyrecentpopularrisk
24,458 exploits
Exploit-DB✓ VexDay Proof
Microburst uStorekeeper 1.x - Arbitrary Commands
Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. (dot dot
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 1.0/2.5/3.0/4.x - Remote Ad Banner URL Change
banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change
23RISK
open ↗Exploit-DB✓ VexDay Proof
Solaris 2.5/2.6/7.0/8 - 'mailx -F' Local Buffer Overflow (1)
Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F'
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apache Tomcat 3.0 - Directory Traversal
Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary '
28RISK
open ↗Exploit-DB✓ VexDay Proof
anaconda clipper 3.3 - Directory Traversal
Anaconda Partners Clipper 3.3 and earlier allows a remote attacker to read arbitrary files via a '..' (dot dot) attack i
23RISK
open ↗Exploit-DB✓ VexDay Proof
SCO OpenServer 5.0.6 - lpadmin Buffer Overflow
lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in
23RISK
open ↗Exploit-DB✓ VexDay Proof
SCO Open Server 5.0.6 - lpshut Buffer Overflow
Buffer overflow in lpshut in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a long fi
23RISK
open ↗Exploit-DB✓ VexDay Proof
SCO Open Server 5.0.6 - lpusers Buffer Overflow
lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a local attacker to gain additional privileges via a b
23RISK
open ↗Exploit-DB✓ VexDay Proof
SCO Open Server 5.0.6 - recon Buffer Overflow
recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow
23RISK
open ↗Exploit-DB✓ VexDay Proof
SCO Open Server 5.0.6 - lpforms Buffer Overflow
Buffer overflow in lpforms in SCO OpenServer 5.0-5.0.6 can allow a local attacker to gain additional privileges via a lo
23RISK
open ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.2.18 (RedHat 6.2/7.0 / 2.2.14/2.2.18/2.2.18ow4) - ptrace/execve Race Condition Privilege Escalation (1)
Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and
23RISK
open ↗Exploit-DB✓ VexDay Proof
Solaris 2.5/2.6/7.0/8 tip - Local Buffer Overflow
Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environ
23RISK
open ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.2.18 (RedHat 6.2/7.0 / 2.2.14/2.2.18/2.2.18ow4) - ptrace/execve Race Condition Privilege Escalation (2)
Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and
23RISK
open ↗Exploit-DB✓ VexDay Proof
Olicom XLT-F XL 80 IM V5.5BL2 - Undocumented Community String
Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via
23RISK
open ↗Exploit-DB✓ VexDay Proof
elron im Anti-Virus 3.0.3 - Directory Traversal
Directory traversal vulnerability in the web server for (1) Elron Internet Manager (IM) Message Inspector and (2) Anti-V
23RISK
open ↗Exploit-DB✓ VexDay Proof
Alt-N MDaemon 3.5.6/5.0.7/6.x - IMAP Denial of Service
IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SEL
23RISK
open ↗Exploit-DB✓ VexDay Proof
Junsoft JSparm 4.0 - Logging Output File
/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File opt
23RISK
open ↗Exploit-DB✓ VexDay Proof
SWSoft ASPSeek 1.0 - 's.cgi' Remote Buffer Overflow
Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
DG/UX 4.20 lpsched - 'Error Message' Local Buffer Overflow
Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long c
23RISK
open ↗Exploit-DB✓ VexDay Proof
MySQL 3.20.32 a/3.23.34 - Root Operation Symbolic Link File Overwriting
Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileg
23RISK
open ↗Exploit-DB✓ VexDay Proof
Qualcomm Eudora 5.0.2 - 'Use Microsoft Viewer' Code Execution
Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow executa
23RISK
open ↗Exploit-DB✓ VexDay Proof
OReilly Software WebSite Professional 2.5.4 - Path Disclosure
O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root direc
23RISK
open ↗Exploit-DB✓ VexDay Proof
Solaris 2.6/7.0/8 - snmpXdmid Buffer Overflow
Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via
45RISK
open ↗Exploit-DB✓ VexDay Proof
WU-FTPD 2.4/2.5/2.6 / Trolltech ftpd 1.2 / ProFTPd 1.2 / BeroFTPD 1.3.4 FTP - glob Expansion
The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of servic
35RISK
open ↗Exploit-DB✓ VexDay Proof
Solaris 2.6/7.0/8 - snmpXdmid Buffer Overflow (Metasploit)
Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via
45RISK
open ↗Exploit-DB✓ VexDay Proof
FTPFS 0.1.1/0.2.1/0.2.2 - mount Buffer Overflow
Buffer overflow in FTPFS allows local users to gain root privileges via a long user name.
23RISK
open ↗Exploit-DB✓ VexDay Proof
IkonBoard 2.1.7b - Remote File Disclosure
Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrary
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1/5.5/6.0 - Telnet Client File Overwrite
Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web si
28RISK
open ↗Exploit-DB✓ VexDay Proof
Free Online Dictionary of Computing 1.0 - Remote File Viewing
template.cgi in Free On-Line Dictionary of Computing (FOLDOC) allows remote attackers to read files and execute commands
23RISK
open ↗Exploit-DB✓ VexDay Proof
Rob Malda ASCDC 0.3 - Local Buffer Overflow (2)
Buffer overflows in ascdc Afterstep while running setuid allows local users to gain root privileges via a long (1) -d op
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.