Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
78,794cataloged exploits
36,057CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,459Referência 22,721GitHub PoC 14,946VulnCheck XDB 8,829Nuclei 4,350Metasploit 3,489✓ verified onlyrecentpopularrisk
24,458 exploits
Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 - FTP Denial of Service (MS01-026)
The Microsoft MS00-060 patch for IIS 5.0 and earlier introduces an error which allows attackers to cause a denial of ser
28RISK
open ↗Exploit-DB✓ VexDay Proof
John Donoghue Knapster 0.9/1.3.8 - File Access
The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote att
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Active Movie Control 1.0 - Filetype
The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded,
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 - Malformed Filename Request
ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large nu
35RISK
open ↗Exploit-DB✓ VexDay Proof
Mozilla Bugzilla 2.4/2.6/2.8/2.10 - Arbitrary Command Execution
Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 - Malformed File Extension Denial of Service
IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a l
35RISK
open ↗Exploit-DB✓ VexDay Proof
Netscape Communicator 4.5/4.51/4.6/4.61/4.7/4.72/4.73 - '/tmp' Symlink
Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite file
23RISK
open ↗Exploit-DB✓ VexDay Proof
Matt Wright FormMail 1.6/1.7/1.8 - Environmental Variables Disclosure
Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter
23RISK
open ↗Exploit-DB✓ VexDay Proof
Etype Eserv 2.9.2 - Logging Buffer Overflow
Buffer overflow in the logging feature of EServ 2.9.2 and earlier allows an attacker to execute arbitrary commands via a
23RISK
open ↗Exploit-DB✓ VexDay Proof
Intel Corporation NetStructure 7110 - Undocumented Password
NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable f
23RISK
open ↗Exploit-DB✓ VexDay Proof
FrontPage 2000 / IIS 4.0/5.0 - Server Extensions Full Path Disclosure
The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the ph
35RISK
open ↗Exploit-DB✓ VexDay Proof
UltraBoard 1.6 - Denial of Service
UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the S
23RISK
open ↗Exploit-DB✓ VexDay Proof
Gossamer Threads DBMan 2.0.4 - DBMan Information Leakage
The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup informati
23RISK
open ↗Exploit-DB✓ VexDay Proof
FreeBSD 3.4/4.0/5.0 / NetBSD 1.4 - Unaligned IP Option Denial of Service
NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP t
23RISK
open ↗Exploit-DB✓ VexDay Proof
Aladdin Knowledge Systems eToken 3.3.3 - eToken PIN Extraction
The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive info
23RISK
open ↗Exploit-DB✓ VexDay Proof
Cart32 3.0 - 'expdate' Administrative Information Disclosure
Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request.
23RISK
open ↗Exploit-DB✓ VexDay Proof
RedHat Linux 6.0/6.1/6.2 - 'pam_console' Monitor Activity After Logout
The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file desc
23RISK
open ↗Exploit-DB✓ VexDay Proof
ultrascripts ultraboard 1.6 - Directory Traversal
UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a path
23RISK
open ↗Exploit-DB✓ VexDay Proof
Brecht Claerhout Sniffit 0.3.6 HIP/0.3.7 Beta - Mail Logging Buffer Overflow (1)
Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary command
23RISK
open ↗Exploit-DB✓ VexDay Proof
Brecht Claerhout Sniffit 0.3.6 HIP/0.3.7 Beta - Mail Logging Buffer Overflow (2)
Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary command
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 95/98 - NetBIOS NULL Name
Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with
28RISK
open ↗Exploit-DB✓ VexDay Proof
Atrium Software Cassandra NNTP Server 1.10 - Buffer Overflow
ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.
23RISK
open ↗Exploit-DB✓ VexDay Proof
L-Soft Listserv 1.8 - Web Archives Buffer Overflow
Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary comman
23RISK
open ↗Exploit-DB✓ VexDay Proof
SuSE Linux 6.3/6.4 Gnomelib - Local Buffer Overflow
Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environme
23RISK
open ↗Exploit-DB✓ VexDay Proof
Qualcomm Eudora 4.2/4.3 - Warning Message Circumvention
Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by
23RISK
open ↗Exploit-DB✓ VexDay Proof
Qualcomm Eudora 4.2/4.3 - Warning Message Circumvention
Qualcomm Eudora 5.2.1 allows remote attackers to read arbitrary files via an email message with a carriage return (CR) c
23RISK
open ↗Exploit-DB✓ VexDay Proof
McMurtrey/Whitaker & Associates Cart32 2.6/3.0 - Remote Administration Password
A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.
23RISK
open ↗Exploit-DB✓ VexDay Proof
Cisco IOS 11.x/12.x - HTTP %%
The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a deni
50RISK
open ↗Exploit-DB✓ VexDay Proof
Symantec pcAnywhere 8.0.1/8.0.2/9.0/9.2 - Port Scan Denial of Service
pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap.
23RISK
open ↗Exploit-DB✓ VexDay Proof
Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (3)
Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.