Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
78,958cataloged exploits
36,206CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,460Referência 22,832GitHub PoC 14,991VulnCheck XDB 8,829Nuclei 4,357Metasploit 3,489✓ verified onlyrecentpopularrisk
24,458 exploits
Exploit-DB✓ VexDay Proof
HP-UX 10/11/ IRIX 3/4/5/6 / OpenSolaris build snv / Solaris 8/9/10 / SunOS 4.1 - 'rpc.ypupdated' Command Execution (1)
rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
28RISK
open ↗Exploit-DB✓ VexDay Proof
HP-UX 10/11/ IRIX 3/4/5/6 / OpenSolaris build snv / Solaris 8/9/10 / SunOS 4.1 - 'rpc.ypupdated' Command Execution (2)
rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
28RISK
open ↗Exploit-DB✓ VexDay Proof
SGI IRIX 5.2/5.3 - 'serial_ports' Local Privilege Escalation
serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execut
23RISK
open ↗Exploit-DB✓ VexDay Proof
SunOS 4.1.4 - arp(8c) Memory Dump
Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse prope
23RISK
open ↗Exploit-DB✓ VexDay Proof
Digital Ultrix 4.0/4.1 - '/usr/bin/chroot' Local Privilege Escalation
chroot in Digital Ultrix 4.1 and 4.0 is insecurely installed, which allows local users to gain privileges.
23RISK
open ↗Exploit-DB✓ VexDay Proof
SunView (SunOS 4.1.1) - 'selection_svc' Remote File Read
The SunView (SunTools) selection_svc facility allows remote users to read files.
50RISK
open ↗Exploit-DB✓ VexDay Proof
Intel Corporation Express 8100 ISDN Router - Fragmented ICMP
The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICMP
23RISK
open ↗Exploit-DB✓ VexDay Proof
Berkeley Sendmail 5.58 - Debug
The debug command in Sendmail is enabled, allowing attackers to execute commands as root.
28RISK
open ↗← previouspage 816 / 816
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.