Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
78,325cataloged exploits
36,055CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,458Referência 22,721GitHub PoC 14,478VulnCheck XDB 8,829Nuclei 4,350Metasploit 3,489✓ verified onlyrecentpopularrisk
24,458 exploits
Exploit-DB✓ VexDay Proof
LBL Traceroute - Local Privilege Escalation
Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands
23RISK
open ↗Exploit-DB✓ VexDay Proof
Poll It CGI 2.0 - Multiple Vulnerabilities
pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the re
23RISK
open ↗Exploit-DB✓ VexDay Proof
News Update 1.1 - Change Admin Password
CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password
28RISK
open ↗Exploit-DB✓ VexDay Proof
Joe Kloss RobinHood 1.1 - Remote Buffer Overflow
RHConsole in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service vi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Small HTTP Server 2.0 1 - Non-Existent File Denial of Service
Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL t
23RISK
open ↗Exploit-DB✓ VexDay Proof
DCForum 1-6 - Arbitrary File Disclosure
DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a mal
23RISK
open ↗Exploit-DB✓ VexDay Proof
Linux modutils 2.3.9 - 'modprobe' Arbitrary Command Execution
modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell meta
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Indexing Service (Windows 2000) - File Verification
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a scr
28RISK
open ↗Exploit-DB✓ VexDay Proof
Computer Associates InoculateIT 4.53 - Microsoft Exchange Agent
Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP head
23RISK
open ↗Exploit-DB✓ VexDay Proof
Solaris 2.5/2.5.1/2.6/7.0 - 'sadmind' Remote Buffer Overflow (3)
Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.
28RISK
open ↗Exploit-DB✓ VexDay Proof
HP-UX 10.20 - registrar Local Arbitrary File Read
registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the origi
23RISK
open ↗Exploit-DB✓ VexDay Proof
YaBB 9.11.2000 - 'search.pl' Arbitrary Command Execution
Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a ..
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 - Executable File Parsing
IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name
35RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0 - ISAPI Buffer Overflow
Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to
23RISK
open ↗Exploit-DB✓ VexDay Proof
RedHat 0.4 b15 restore - Insecure Environment Variables
restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Solaris 2.6/7.0 /locale - Subsystem Format String
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which
28RISK
open ↗Exploit-DB✓ VexDay Proof
HP-UX 9.x/10.x/11.x - cu Buffer Overflow
Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument
23RISK
open ↗Exploit-DB✓ VexDay Proof
Samba 2.0.7 - SWAT Symlink (1)
Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack
23RISK
open ↗Exploit-DB✓ VexDay Proof
ManTrap 1.6.1 - Root Directory Inode Disclosure
Recourse ManTrap 1.6 sets up a chroot environment to hide the fact that it is running, but the inode number for the resu
23RISK
open ↗Exploit-DB✓ VexDay Proof
FreeBSD 3.5/4.x - '/usr/bin/top' Format String
Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" fun
23RISK
open ↗Exploit-DB✓ VexDay Proof
Samba 2.0.7 - SWAT Logging Failure
Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the
23RISK
open ↗Exploit-DB✓ VexDay Proof
Samba 2.0.7 - SWAT Logfile Permissions
Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, w
23RISK
open ↗Exploit-DB✓ VexDay Proof
Samba 2.0.7 - SWAT Symlink (2)
Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack
23RISK
open ↗Exploit-DB✓ VexDay Proof
ManTrap 1.6.1 - Hidden Process Disclosure
Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers to determine that they
23RISK
open ↗Exploit-DB✓ VexDay Proof
ISC BIND 8.2.2-P5 - Denial of Service
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone tran
28RISK
open ↗Exploit-DB✓ VexDay Proof
Unify eWave ServletExec 3.0 c - Denial of Service
eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of servi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Kootenay Web Inc whois 1.0 - Remote Command Execution
Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in
28RISK
open ↗Exploit-DB✓ VexDay Proof
Cat Soft Serv-U FTP Server 2.5.x - Brute Force
Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (poss
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Indexing Service (Windows 2000/NT 4.0) - '.htw' Cross-Site Scripting
The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross s
28RISK
open ↗Exploit-DB✓ VexDay Proof
ISC BIND 8.1 - Host Remote Buffer Overflow
Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR qu
28RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.