Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
78,794cataloged exploits
36,057CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,459Referência 22,721GitHub PoC 14,946VulnCheck XDB 8,829Nuclei 4,350Metasploit 3,489✓ verified onlyrecentpopularrisk
24,458 exploits
Exploit-DB✓ VexDay Proof
Microsoft Virtual Machine 2000 - Series/3000 Series getSystemResource
Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.
28RISK
open ↗Exploit-DB✓ VexDay Proof
Check Point Software Firewall-1 3.0 Script - Tag Checking Bypass
Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restric
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Index Server 2.0 / Indexing Service (Windows 2000) - Directory Traversal
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed H
35RISK
open ↗Exploit-DB✓ VexDay Proof
FreeBSD 3.4 / NetBSD 1.4.1 / OpenBSD 2.6 - '/proc' FileSystem
procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified
23RISK
open ↗Exploit-DB✓ VexDay Proof
Inter7 vpopmail (vchkpw) 3.4.11 - Local Buffer Overflow
Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long
28RISK
open ↗Exploit-DB✓ VexDay Proof
PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (3)
PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissi
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Media Services 4.0/4.1 - Handshake Sequence Denial of Service
The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets t
28RISK
open ↗Exploit-DB✓ VexDay Proof
A-V Tronics InetServ 3.0 - WebMail GET
Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.
28RISK
open ↗Exploit-DB✓ VexDay Proof
Nosque Workshop MsgCore 1.9 - Denial of Service
Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a den
23RISK
open ↗Exploit-DB✓ VexDay Proof
Mirabilis ICQ 0.99b 1.1.1.1/3.19 - Remote Buffer Overflow
Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ
23RISK
open ↗Exploit-DB✓ VexDay Proof
Corel Linux OS 1.0 - get_it PATH
get_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp p
23RISK
open ↗Exploit-DB✓ VexDay Proof
RedHat 6.1 / IRIX 6.5.18 - 'lpd' Command Execution
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reve
28RISK
open ↗Exploit-DB✓ VexDay Proof
PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (1)
PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissi
23RISK
open ↗Exploit-DB✓ VexDay Proof
PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (2)
PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissi
23RISK
open ↗Exploit-DB✓ VexDay Proof
NullSoft Winamp 2.10 - Playlist
Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file.
23RISK
open ↗Exploit-DB✓ VexDay Proof
Qualcomm qpopper 3.0 - 'LIST' Remote Buffer Overflow
Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.
23RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 4.0/4.0.1/5.0/5.0.1/5.5 - preview Security Zone Settings Lag
Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security d
28RISK
open ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 4.0/4.0.1/5.0/5.0.1/5.5 - preview Security Zone Settings Lag
Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the
28RISK
open ↗Exploit-DB✓ VexDay Proof
Phorum 3.0.7 - 'admin.php3' Unverified Administrative Password Change
Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for
23RISK
open ↗Exploit-DB✓ VexDay Proof
Phorum 3.0.7 - 'auth.php3' Backdoor Access
Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with th
23RISK
open ↗Exploit-DB✓ VexDay Proof
Ipswitch IMail 5.0.8/6.0/6.1 - IMonitor 'status.cgi' Denial of Service
IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi.
23RISK
open ↗Exploit-DB✓ VexDay Proof
PHP 3.0.13 - 'Safe_mode' Failure
PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, whic
28RISK
open ↗Exploit-DB✓ VexDay Proof
Allaire ColdFusion Server 4.0/4.0.1 - 'CFCACHE' Information Disclosure
Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain s
23RISK
open ↗Exploit-DB✓ VexDay Proof
Mandrake 6.x / RedHat 6.x / Turbolinux 3.5 b2/4.x/6.0.2 userhelper/PAM - Path (1)
Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) att
23RISK
open ↗Exploit-DB✓ VexDay Proof
Solution Scripts Home Free 1.0 - 'search.cgi' Directory Traversal
search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attac
23RISK
open ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10 / HP-UX 9/10/11 / Mandriva 6/7 / RedHat 5/6 / SCO 5 / IRIX 6 - Shell Redirection Race Condition
Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when
23RISK
open ↗Exploit-DB✓ VexDay Proof
IRIX 6.5.x - '/usr/lib/InPerson/inpview' Race Condition
inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on th
23RISK
open ↗Exploit-DB✓ VexDay Proof
Phorum 3.0.7 - 'violation.php3' Arbitrary Email Relay
violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as
23RISK
open ↗Exploit-DB✓ VexDay Proof
Ascend CascadeView/UX 1.0 tftpd - Symbolic Link
CascadeView TFTP server allows local users to gain privileges via a symlink attack.
23RISK
open ↗Exploit-DB✓ VexDay Proof
SGI IRIX 6.2 - 'midikeys'/'soundplayer' Local Privilege Escalation
IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which i
23RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.