0day.today - Biggest Exploit Database in the World.
Things you should know about 0day.today:
Administration of this site uses the official contacts. Beware of impostors!
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!
Please, beware of scammers!
Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
[ private ]
0day.today Private exploits and 0day exploits Market
Zero-day exploits target zero-day vulnerabilities. Zero-day vulnerabilities are those for which no official patch has been released by the vendor. This means that no days [zero days] have elapsed between the time the vulnerability was discovered and the time an official patch was made available. Therefore, the administrators have had zero days to fix the flaw. It ceases to be a zero day once a fix is available.
Private category sells private Exploits and Vulnerabilities. Users can buy exploits using Gold [registered users] or using incognito mode [unregistered users], specify only mail to get material.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
Instagram bypass Access Account Private Method Exploit
Rate up:
0
Rate down:
0
Comments:
51
63 929
Security Risk Critical
D
Download
V
Contains video proof
Verified by 0day Admin
0.031
Open this exploit for 0.031 BTC
Open this exploit for 2 000 GOLD
smokzz
Exploits:
8
BusinessLevel:
6
Twitter reset account Private Method 0day Exploit
Rate up:
0
Rate down:
0
Comments:
19
28 356
Security Risk Critical
D
Download
-
Verified by 0day Admin
0.031
Open this exploit for 0.031 BTC
Open this exploit for 2 000 GOLD
0day Today Team
Exploits:
291
BusinessLevel:
31
WordPress 5.9.0 core Remote Code Execution 0day Exploit
Rate up:
0
Rate down:
0
Comments:
23
35 974
Security Risk Critical
D
Download
-
Verified by 0day Admin
0.11
Open this exploit for 0.11 BTC
Open this exploit for 7 000 GOLD
smokzz
Exploits:
8
BusinessLevel:
6
Hotmail.com reset account 0day Exploit
Rate up:
0
Rate down:
0
Comments:
28
26 462
Security Risk Critical
%
Open this exploit for 0.047 0.041 BTC
Open this exploit for 3 000 2 600 GOLD
-
Verified by 0day Admin
0.041
Open this exploit for 0.047 0.041 BTC
Open this exploit for 3 000 2 600 GOLD
0day Today Team
Exploits:
291
BusinessLevel:
31
VMware Cloud Director - Bypass identity verification Exploit
Rate up:
0
Rate down:
0
Comments:
0
10 547
Security Risk Critical
D
Download
C
CVE-2023-34060
Verified by 0day Admin
0.031
Open this exploit for 0.031 BTC
Open this exploit for 2 000 GOLD
absholi7ly
Exploits:
1
BusinessLevel:
0
Moodle 4.3 Remote Code Execution 0day Exploit
Rate up:
0
Rate down:
0
Comments:
0
10 896
Security Risk Critical
D
Download
-
Verified by 0day Admin
0.039
Open this exploit for 0.039 BTC
Open this exploit for 2 500 GOLD
smokzz
Exploits:
8
BusinessLevel:
6
TP-Link ER605 Unauthent LAN-side Remote Code Execution Exploit
Rate up:
0
Rate down:
0
Comments:
0
11 056
Security Risk Critical
D
Download
V
Contains video proof
Verified by 0day Admin
0.024
Open this exploit for 0.024 BTC
Open this exploit for 1 500 GOLD
lychain1337
Exploits:
1
BusinessLevel:
0
Microsoft Outlook Remote Code Execution 0day Exploit
Rate up:
0
Rate down:
0
Comments:
0
18 057
Security Risk Critical
D
Download
-
Verified by 0day Admin
0.125
Open this exploit for 0.125 BTC
Open this exploit for 8 000 GOLD
Protocol.8
Exploits:
5
BusinessLevel:
5
Powershell Code Arbitary Execution Builder FUD Exploit
Rate up:
0
Rate down:
0
Comments:
0
20 175
Security Risk Critical
D
Download
-
Verified by 0day Admin
0.016
Open this exploit for 0.016 BTC
Open this exploit for 1 000 GOLD
viper_8080
Exploits:
5
BusinessLevel:
1
Microsoft Office Excel Silent Builder Exploit
Rate up:
0
Rate down:
0
Comments:
0
21 123
Security Risk Critical
D
Download
-
Verified by 0day Admin
0.016
Open this exploit for 0.016 BTC
Open this exploit for 1 000 GOLD
viper_8080
Exploits:
5
BusinessLevel:
1
[ remote exploits ]
Remote exploits and vulnerabilities category
A "remote exploit" works over a network and exploits the security vulnerability without any prior access to the vulnerable system.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
370
Security Risk Critical
D
Download
C
CVE-2023-50386
Verified by 0day Admin
free
You can open this exploit for free
metasploit
Exploits:
1623
BusinessLevel:
92
288
Security Risk Critical
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
kai6u
Exploits:
2
BusinessLevel:
0
386
Security Risk Critical
D
Download
C
CVE-2023-48788
Verified by 0day Admin
free
You can open this exploit for free
metasploit
Exploits:
1623
BusinessLevel:
92
Visual Studio Code Execution Exploit
Comments:
0
396
Security Risk Critical
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
metasploit
Exploits:
1623
BusinessLevel:
92
304
Security Risk Critical
D
Download
C
CVE-2024-23759
Verified by 0day Admin
free
You can open this exploit for free
metasploit
Exploits:
1623
BusinessLevel:
92
350
Security Risk Critical
D
Download
C
CVE-2024-3400
Verified by 0day Admin
free
You can open this exploit for free
metasploit
Exploits:
1623
BusinessLevel:
92
662
Security Risk High
D
Download
C
CVE-2024-3400
Verified by 0day Admin
free
You can open this exploit for free
Kr0ff
Exploits:
4
BusinessLevel:
2
pgAdmin 8.3 Remote Code Execution Exploit
Comments:
0
989
Security Risk Critical
D
Download
C
CVE-2024-2044
Verified by 0day Admin
free
You can open this exploit for free
metasploit
Exploits:
1623
BusinessLevel:
92
CrushFTP Remote Code Execution Exploit
Comments:
0
1 111
Security Risk Critical
D
Download
C
CVE-2023-43177
Verified by 0day Admin
free
You can open this exploit for free
Ryan Emmons
Exploits:
1
BusinessLevel:
0
1 010
Security Risk High
D
Download
C
CVE-2024-24747
Verified by 0day Admin
free
You can open this exploit for free
Jenson Zhao
Exploits:
3
BusinessLevel:
1
[ local exploits ]
Local exploits and vulnerabilities category
A "local exploit" requires prior access to the vulnerable system and usually increases the privileges of the person running the exploit past those granted by the system administrator. Exploits against client applications also exist, usually consisting of modified servers that send an exploit if accessed with client application.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
352
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
dhteam
Exploits:
1
BusinessLevel:
0
327
Security Risk Critical
D
Download
C
CVE-2023-46944
Verified by 0day Admin
free
You can open this exploit for free
metasploit
Exploits:
1623
BusinessLevel:
92
909
Security Risk High
D
Download
C
CVE-2023-47268
Verified by 0day Admin
free
You can open this exploit for free
Kamil Breński
Exploits:
2
BusinessLevel:
2
869
Security Risk Medium
D
Download
C
CVE-2024-31804
Verified by 0day Admin
free
You can open this exploit for free
Joseph Kwabena Fiagbor
Exploits:
1
BusinessLevel:
0
1 430
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Milad karimi
Exploits:
27
BusinessLevel:
4
1 395
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Milad karimi
Exploits:
27
BusinessLevel:
4
1 322
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Alaa Kachouh
Exploits:
1
BusinessLevel:
0
1 585
Security Risk Critical
D
Download
C
CVE-2024-21338
Verified by 0day Admin
free
You can open this exploit for free
E1 Coders
Exploits:
2
BusinessLevel:
0
1 318
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Saud Alenazi
Exploits:
32
BusinessLevel:
3
1 292
Security Risk High
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Julian Horoszkiewicz
Exploits:
1
BusinessLevel:
0
[ web applications ]
Webapplication (webapps) exploits and vulnerabilities category
This category is full with vulnerabilities, which was found in web projects and web applications.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
Elber Wayber Analog/Digital Audio STL 4.00 Insecure Direct Object Reference Vulnerability
Comments:
0
485
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
LiquidWorm
Exploits:
730
BusinessLevel:
46
614
Security Risk High
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
LiquidWorm
Exploits:
730
BusinessLevel:
46
Elber ESE DVB-S/S2 Satellite Receiver 1.5.x Insecure Direct Object Reference Vulnerability
Comments:
0
458
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
LiquidWorm
Exploits:
730
BusinessLevel:
46
475
Security Risk High
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
LiquidWorm
Exploits:
730
BusinessLevel:
46
Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link Insecure Direct Object Reference Vulnerability
Comments:
0
456
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
LiquidWorm
Exploits:
730
BusinessLevel:
46
454
Security Risk High
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
LiquidWorm
Exploits:
730
BusinessLevel:
46
Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 Insecure Direct Object Reference Vulnerability
Comments:
0
452
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
LiquidWorm
Exploits:
730
BusinessLevel:
46
Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 Authentication Bypass Vulnerability
Comments:
0
456
Security Risk High
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
LiquidWorm
Exploits:
730
BusinessLevel:
46
Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Insecure Direct Object Reference Vulnerability
Comments:
0
452
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
LiquidWorm
Exploits:
730
BusinessLevel:
46
453
Security Risk High
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
LiquidWorm
Exploits:
730
BusinessLevel:
46
[ dos / poc ]
DOS exploits and vulnerabilities category
PoC DoS (denial of service exploit) it exploits remote steps to check the resistance on the affected server or software denial of service vulnerability. The purpose of these attacks is to check the server or the software for resistance.
PoC (Proof Of Concept exploit) An attack against a computer or network that is performed only to prove that it can be done. It generally does not cause any harm, but shows how a hacker can take advantage of a vulnerability in the software or possibly the hardware.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
2 050
Security Risk Medium
D
Download
C
CVE-2024-27686
Verified by 0day Admin
free
You can open this exploit for free
ice-wzl
Exploits:
1
BusinessLevel:
0
TP-Link TL-WR740N - Buffer Overflow DOS Exploit
Comments:
0
4 848
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Anish Feroz
Exploits:
3
BusinessLevel:
1
XAMPP - Buffer Overflow Exploit
Comments:
0
7 232
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Talson
Exploits:
2
BusinessLevel:
0
6 929
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
LiquidWorm
Exploits:
730
BusinessLevel:
46
SCHLIX 2.2.8-1 Denial Of Service Exploit
Comments:
0
6 947
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Diyar Saadi
Exploits:
4
BusinessLevel:
0
Elasticsearch - StackOverflow DoS Exploit
Comments:
0
7 028
Security Risk Medium
D
Download
C
CVE-2023-31419
Verified by 0day Admin
free
You can open this exploit for free
Touhami Kasbaoui
Exploits:
6
BusinessLevel:
2
glibc qsort() Out-Of-Bounds Read / Write Exploit
Comments:
0
6 999
Security Risk Medium
D
Download
C
CVE-2023-6246
Verified by 0day Admin
free
You can open this exploit for free
Qualys Security Advisory
Exploits:
8
BusinessLevel:
4
6 994
Security Risk Medium
D
Download
C
CVE-2023-6246
Verified by 0day Admin
free
You can open this exploit for free
Qualys Security Advisory
Exploits:
8
BusinessLevel:
4
Chrome 121 Javascript Fork Malloc Bomb Exploit
Comments:
0
7 218
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Georgi Guninski
Exploits:
16
BusinessLevel:
11
EzServer 6.4.017 Denial Of Service Exploit
Comments:
0
7 174
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Fernando Mengali
Exploits:
26
BusinessLevel:
3
[ shellcode ]
Shellcode category
In computer security, a shellcode is a small piece of code used as the payload in the exploitation of a software vulnerability. It is called "shellcode" because it typically starts a command shell from which the attacker can control the compromised machine, but any piece of code that performs a similar task can be called shellcode. Because the function of a payload is not limited to merely spawning a shell, some have suggested that the name shellcode is insufficient. Shellcode is commonly written in machine code.
Classification:
There are several methods of classifying exploits. The most common is by how the exploit contacts the vulnerable software. A remote exploit works over a network and exploits the security vulnerability without any prior access to the vulnerable system. A local exploit requires prior access to the vulnerable system and usually increases the privileges of the person running the exploit past those granted by the system administrator. Exploits against client applications also exist, usually consisting of modified servers that send an exploit if accessed with a client application. Exploits against client applications may also require some interaction with the user and thus may be used in combination with the social engineering method. Another classification is by the action against the vulnerable system; unauthorized data access, arbitrary code execution, and denial of service are examples. Many exploits are designed to provide superuser-level access to a computer system. However, it is also possible to use several exploits, first to gain low-level access, then to escalate privileges repeatedly until one reaches root. Normally a single exploit can only take advantage of a specific software vulnerability. Often, when an exploit is published, the vulnerability is fixed through a patch and the exploit becomes obsolete until newer versions of the software become available Shellcodes any types.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
Linux/x64 - create a shell with execve() sending argument using XOR (/bin//sh) Shellcode (55 bytes)
Comments:
0
9 492
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
0x177git
Exploits:
1
BusinessLevel:
0
10 769
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Senzee
Exploits:
2
BusinessLevel:
0
10 267
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Ivan Nikolsky
Exploits:
3
BusinessLevel:
2
10 768
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Senzee
Exploits:
2
BusinessLevel:
0
11 963
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Nayani
Exploits:
1
BusinessLevel:
1
11 778
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Jeenika Anadani
Exploits:
1
BusinessLevel:
1
Windows/x86 - Create Administrator User / Dynamic PEB & EDT method null-free Shellcode 373 bytes
Comments:
0
12 304
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Xavi Beltran
Exploits:
7
BusinessLevel:
3
11 585
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Eduardo Silva
Exploits:
2
BusinessLevel:
1
11 396
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Eduardo Silva
Exploits:
2
BusinessLevel:
1
13 043
Security Risk Medium
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Bobby Cooke
Exploits:
26
BusinessLevel:
3
Exploits in [ April ]: 91
Critical: 26
High: 39
Medium: 25
Low: 1
Best author of the month [ LiquidWorm ]
Exploits: 39367
Researchers: 47508