Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

78,958cataloged exploits

36,206CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,460Referência 22,832GitHub PoC 14,991VulnCheck XDB 8,829Nuclei 4,357Metasploit 3,489✓ verified onlyrecent popular risk

5,629 exploits

Referência✓ VexDay Proof

Extract Website - 'Filename' File Disclosure

CVE-2008-6334—webappsphp

Directory traversal vulnerability in download.php in eMetrix Extract Website allows remote attackers to read arbitrary f

23RISK

open ↗

Referência✓ VexDay Proof

MailBee WebMail Pro 4.1 - Remote File Disclosure

CVE-2008-0333—webappsasp

Directory traversal vulnerability in download_view_attachment.aspx in AfterLogic MailBee WebMail Pro 4.1 for ASP.NET all

28RISK

open ↗

Referência✓ VexDay Proof

Online Keyword Research Tool - 'download.php' File Disclosure

CVE-2008-6335—webappsphp

Directory traversal vulnerability in download.php in eMetrix Online Keyword Research Tool allows remote attackers to rea

23RISK

open ↗

Referência✓ VexDay Proof

Joomla! Component ProDesk 1.0/1.2 - Local File Inclusion

CVE-2008-6222—webappsphp

Directory traversal vulnerability in the Pro Desk Support Center (com_pro_desk) component 1.0 and 1.2 for Joomla! allows

43RISK

open ↗

Referência✓ VexDay Proof

Corel Paint Shop Pro Photo 11.20 - '.clp' Local Buffer Overflow

CVE-2007-2209—localwindows

Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.

28RISK

open ↗

Referência✓ VexDay Proof

Text Lines Rearrange Script - 'Filename' File Disclosure

CVE-2008-6336—webappsphp

Directory traversal vulnerability in download.php in Text Lines Rearrange Script 1.0, when register_globals is enabled,

23RISK

open ↗

Referência✓ VexDay Proof

Joomla! Component com_noticias 1.0 - SQL Injection

CVE-2008-0670—webappsphp

SQL injection vulnerability in index.php in the Noticias (com_noticias) 1.0 component for Joomla! allows remote attacker

23RISK

open ↗

Referência✓ VexDay Proof

SolarCMS 0.53.8 - 'Forum' Remote Cookies Disclosure

CVE-2008-6345—webappsphp

SQL injection vulnerability in Forum.php in SolarCMS 0.53.8 and 1.0 allows remote attackers to execute arbitrary SQL com

23RISK

open ↗

Referência✓ VexDay Proof

A-Blog 2.0 - Cross-Site Scripting / SQL Injection

CVE-2008-0677—webappsphp

SQL injection vulnerability in blog.php in A-Blog 2 allows remote attackers to execute arbitrary SQL commands via the id

23RISK

open ↗

Referência✓ VexDay Proof

Joomla! Component ongumatimesheet20 4b - Remote File Inclusion

CVE-2008-6347—webappsphp

PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet (com_ongumatimesheet20) 2.0 4b

28RISK

open ↗

Referência✓ VexDay Proof

DevelopItEasy Photo Gallery 1.2 - SQL Injection

CVE-2008-6348—webappsphp

Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary SQ

23RISK

open ↗

Referência✓ VexDay Proof

BlogPHP 2 - 'id' Cross-Site Scripting / SQL Injection

CVE-2008-0678—webappsphp

SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via th

23RISK

open ↗

Referência✓ VexDay Proof

Black Ice Software Annotation Plugin - 'BiAnno.ocx' Remote Buffer Overflow

CVE-2008-2745—remotewindows

Stack-based buffer overflow in BiAnno ActiveX Control (BiAnno.ocx) in Black Ice Software Annotation Plugin 10.95 allows

28RISK

open ↗

Referência✓ VexDay Proof

BXCP 0.2.9.9 - 'tid' SQL Injection

CVE-2006-0821—webappsphp

SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via the

23RISK

open ↗

Referência✓ VexDay Proof

TurnkeyForms Business Survey Pro 1.0 - 'id' SQL Injection

CVE-2008-6349—webappsphp

SQL injection vulnerability in survey_results_text.php in TurnkeyForms Business Survey Pro 1.0 allows remote attackers t

23RISK

open ↗

Referência✓ VexDay Proof

Online Media Technologies 'AVSMJPEGFILE.DLL 1.1' - Remote Buffer Overflow (PoC)

CVE-2007-6327—doswindows

Buffer overflow in a certain ActiveX control in Online Media Technologies AVSMJPEGFILE.DLL 1.1.1.102 allows remote attac

28RISK

open ↗

Referência✓ VexDay Proof

ASP-CMS 1.0 - 'cha' SQL Injection

CVE-2008-6353—webappsasp

SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via th

23RISK

open ↗

Referência✓ VexDay Proof

Oracle Internet Directory 10.1.4 - Remote Denial of Service

CVE-2008-2595—dosmultiple

Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and

28RISK

open ↗

Referência✓ VexDay Proof

WordPress Plugin st_newsletter - SQL Injection

CVE-2008-0683—webappsphp

SQL injection vulnerability in shiftthis-preview.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress al

23RISK

open ↗

Referência✓ VexDay Proof

evCal Events Calendar - Database Disclosure

CVE-2008-6356—webappsasp

evCal Events Calendar stores sensitive information under the web root with insufficient access control, which allows rem

23RISK

open ↗

Referência✓ VexDay Proof

MyCal Personal Events Calendar - Database Disclosure

CVE-2008-6357—webappsasp

MyCal Personal Events Calendar stores sensitive information under the web root with insufficient access control, which a

23RISK

open ↗

Referência✓ VexDay Proof

Social Groupie - 'id' SQL Injection

CVE-2008-6358—webappsphp

SQL injection vulnerability in group_index.php in Social Groupie allows remote attackers to execute arbitrary SQL comman

23RISK

open ↗

Referência✓ VexDay Proof

Bytehoard 2.1 - 'server.php' Remote File Inclusion

CVE-2006-2849—webappsphp

PHP remote file inclusion vulnerability in includes/webdav/server.php in Bytehoard 2.1 Epsilon/Delta allows remote attac

28RISK

open ↗

Referência✓ VexDay Proof

DesignWorks Professional 4.3.1 - '.CCT' File Local Stack Buffer Overflow (PoC)

CVE-2008-6363—doswindows

Stack-based buffer overflow in DesignWorks Professional 4.3.1 and 5.0.7 allows remote attackers to execute arbitrary cod

23RISK

open ↗

Referência✓ VexDay Proof

Site@School 2.4.02 - Arbitrary File Upload

CVE-2006-4920—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to exe

28RISK

open ↗

Referência✓ VexDay Proof

Joomla! Component NeoReferences 1.3.1 - 'catid' SQL Injection

CVE-2008-0686—webappsphp

SQL injection vulnerability in index.php in the NeoReferences (com_neoreferences) 1.3.1 and 1.3.3 component for Joomla!

23RISK

open ↗

Referência✓ VexDay Proof

Ad Management Java - Authentication Bypass

CVE-2008-6365—webappsasp

SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to e

23RISK

open ↗

Referência✓ VexDay Proof

ITechBids 5.0 - 'item_id' SQL Injection

CVE-2008-0692—webappsphp

SQL injection vulnerability in bidhistory.php in iTechBids 3 Gold and 5.0 allows remote attackers to execute arbitrary S

23RISK

open ↗

Referência✓ VexDay Proof

Affiliate Software Java 4.0 - Authentication Bypass

CVE-2008-6366—webappsasp

SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to e

23RISK

open ↗

Referência✓ VexDay Proof

Ocean12 Contact Manager Pro - SQL Injection / Cross-Site Scripting / File Disclosure

CVE-2008-6369—webappsphp

SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbitr

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.