Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
78,329cataloged exploits
36,057CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,458Referência 22,721GitHub PoC 14,482VulnCheck XDB 8,829Nuclei 4,350Metasploit 3,489✓ verified onlyrecentpopularrisk
24,458 exploits
Exploit-DB✓ VexDay Proof
Cisco Virtual Central Office 4000 (VCO/4K) 5.1.3 - Remote Username / Password Retrieval
Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which
23RISK
open ↗Exploit-DB✓ VexDay Proof
Cisco Catalyst 3500 XL - Arbitrary Command Execution
The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands with
60RISK
open ↗Exploit-DB✓ VexDay Proof
Sun HotJava Browser 3 - Arbitrary DOM Access
HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named wind
23RISK
open ↗Exploit-DB✓ VexDay Proof
Cisco IOS 12 - Software '?/' HTTP Request Denial of Service
The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Netscape Directory Server 4.12 - Directory Server Directory Traversal
Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote a
23RISK
open ↗Exploit-DB✓ VexDay Proof
iPlanet Certificate Management System 4.2 - Directory Traversal
Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Allaire JRun 3 - Directory Disclosure
Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request
23RISK
open ↗Exploit-DB✓ VexDay Proof
Avirt Mail 4.0/4.2 - 'Mail From:' / 'Rcpt to:' Denial of Service
Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via
23RISK
open ↗Exploit-DB✓ VexDay Proof
Allaire JRun 2.3 - Arbitrary Code Execution
Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scrip
28RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (2)
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
45RISK
open ↗Exploit-DB✓ VexDay Proof
David Bagley xlock 4.16 - User Supplied Format String (2)
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privile
23RISK
open ↗Exploit-DB✓ VexDay Proof
HP-UX 10.20/11.0 - crontab '/tmp' File
HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target fil
23RISK
open ↗Exploit-DB✓ VexDay Proof
Intel InBusiness eMail Station 1.4.87 - Denial of Service
Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of servi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Oracle Internet Directory 2.0.6 - oidldap
Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line param
23RISK
open ↗Exploit-DB✓ VexDay Proof
Hilgraeve HyperTerminal 6.0 - Telnet Buffer Overflow
Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (5)
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
45RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (1)
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
45RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (4)
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
45RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (3)
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
45RISK
open ↗Exploit-DB✓ VexDay Proof
anaconda Foundation 1.4 < 1.9 - Directory Traversal
Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitrar
23RISK
open ↗Exploit-DB✓ VexDay Proof
cURL 6.1 < 7.4 - Remote Buffer Overflow (2)
Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbi
28RISK
open ↗Exploit-DB✓ VexDay Proof
cURL 6.1 < 7.4 - Remote Buffer Overflow (1)
Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbi
28RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft NetMeeting 3.0.1 4.4.3385 - Remote Desktop Sharing Denial of Service
Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utili
28RISK
open ↗Exploit-DB✓ VexDay Proof
XFree86 3.3.5/3.3.6 - Xlib Display Buffer Overflow
Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY envi
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHP 3.0/4.0 - Error Logging Format String
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary com
28RISK
open ↗Exploit-DB✓ VexDay Proof
Oatmeal Studios Mail File 1.10 - Arbitrary File Disclosure
mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 9x/ME - Share Level Password Bypass (2)
File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file
35RISK
open ↗Exploit-DB✓ VexDay Proof
Netscape iCal 2.1 Patch2 - iPlanet iCal 'iplncal.sh' Permissions
iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal confi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 9x/ME - Share Level Password Bypass (1)
File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file
35RISK
open ↗Exploit-DB✓ VexDay Proof
Netscape iCal 2.1 Patch2 - iPlanet iCal 'csstart' Local Privilege Escalation
csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could a
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.