Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,589cataloged exploits

34,508CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,554GitHub PoC 13,689VulnCheck XDB 8,216Nuclei 4,223Metasploit 3,464✓ verified onlyrecent popular risk

21,534 exploits

Referência

CVE-2010-1219

CVE-2010-1219—

Directory traversal vulnerability in the JA News (com_janews) component 1.0 for Joomla! allows remote attackers to read

38RISK

open ↗

Referência

CVE-2010-4781

CVE-2010-4781—

index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attacke

23RISK

open ↗

Referência

CVE-2007-0122

CVE-2007-0122—

Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated adminis

23RISK

open ↗

Referência

CVE-2023-5009

CVE-2023-5009CRITICAL

Incorrect Authorization in GitLab

48RISK

open ↗

Referência✓ VexDay Proof

open NewsLetter 2.5 - Multiple Vulnerabilities (2)

CVE-2006-6786—webappsphp

Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting th

23RISK

open ↗

Referência✓ VexDay Proof

PHPFootball 1.6 - Remote Database Disclosure

CVE-2007-0638—webappsphp

show.php in Vlad Alexa Mancini PHPFootball 1.6 allows remote attackers to obtain sensitive information (database content

23RISK

open ↗

Referência✓ VexDay Proof

Xpression News 1.0.1 - 'archives.php' Remote File Disclosure

CVE-2007-1040—webappsphp

Directory traversal vulnerability in archives.php in Xpression News (X-News) 1.0.1 allows remote attackers to include ar

23RISK

open ↗

Referência✓ VexDay Proof

db Software Laboratory VImpX - 'VImpX.ocx' Multiple Vulnerabilities

CVE-2008-4749—remotewindows

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laborato

23RISK

open ↗

Referência✓ VexDay Proof

Ez Ringtone Manager - Multiple Remote File Disclosure Vulnerabilities

CVE-2008-6112—webappsphp

Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a

23RISK

open ↗

Referência✓ VexDay Proof

Campsite 3.3.0 RC1 - Multiple Remote File Inclusions

CVE-2009-2182—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP

23RISK

open ↗

Referência

CVE-2020-26808

CVE-2020-26808CRITICAL

SAP AS ABAP(DMIS), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 a

48RISK

open ↗

Referência

CVE-2023-28285

CVE-2023-28285HIGH

Microsoft Office Remote Code Execution Vulnerability

41RISK

open ↗

Referência

CVE-2018-4241

CVE-2018-4241—

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS b

23RISK

open ↗

Referência

CVE-2009-4251

CVE-2009-4251—

Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers

23RISK

open ↗

Referência

CVE-2016-8018

CVE-2016-8018—

Cross-site request forgery (CSRF) vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier)

23RISK

open ↗

Referência

CVE-2010-5025

CVE-2010-5025—

Cross-site scripting (XSS) vulnerability in manage/main.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote attackers to i

23RISK

open ↗

Referência

CVE-2018-17996

CVE-2018-17996—

LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_

23RISK

open ↗

Referência

CVE-2018-17996

CVE-2018-17996—

LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_

23RISK

open ↗

Referência

CVE-2017-8927

CVE-2017-8927—

Buffer overflow in Larson VizEx Reader 9.7.5 allows attackers to cause a denial of service or possibly have unspecified

23RISK

open ↗

Referência

CVE-2009-4542

CVE-2009-4542—

Cross-site scripting (XSS) vulnerability in newticket.php in IsolSoft Support Center 2.5 allows remote attackers to inje

23RISK

open ↗

Referência✓ VexDay Proof

Cartweaver 2.16.11 - 'ProdID' SQL Injection

CVE-2006-2046—webappscgi

Multiple SQL injection vulnerabilities in Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allow remote at

23RISK

open ↗

Referência✓ VexDay Proof

OPENi-CMS 1.0.1beta - 'config' Remote File Inclusion

CVE-2006-4750—webappsphp

PHP remote file inclusion vulnerability in openi-admin/base/fileloader.php in OPENi-CMS 1.0.1, and possibly earlier, all

23RISK

open ↗

Referência✓ VexDay Proof

KGB 1.9 - 'sesskglogadmin.php' Local File Inclusion

CVE-2007-0337—webappsphp

Directory traversal vulnerability in sesskglogadmin.php in KGB 1.9 and earlier allows remote attackers to include and ex

23RISK

open ↗

Referência✓ VexDay Proof

Aktueldownload Haber scripti - 'id' SQL Injection

CVE-2007-1015—webappsasp

SQL injection vulnerability in HaberDetay.asp in Aktueldownload Haber script allows remote attackers to execute arbitrar

23RISK

open ↗

Referência✓ VexDay Proof

F3Site 2.1 - Remote Code Execution

CVE-2007-0763—webappsphp

Cross-site scripting (XSS) vulnerability in the news comment functionality in F3Site 2.1 and earlier allows remote attac

23RISK

open ↗

Referência✓ VexDay Proof

PHP-Nuke Module AddressBook 1.2 - Local File Inclusion

CVE-2007-1720—webappsphp

Directory traversal vulnerability in addressbook.php in the Addressbook 1.2 module for PHP-Nuke allows remote attackers

23RISK

open ↗

Referência✓ VexDay Proof

public media manager 1.3 - Remote File Inclusion

CVE-2007-5149—webappsphp

PHP remote file inclusion vulnerability in NewsCMS/news/newstopic_inc.php in North Country Public Radio Public Media Man

23RISK

open ↗

Referência✓ VexDay Proof

mxBB Module mx_glance 2.3.3 - Remote File Inclusion

CVE-2007-5178—webappsphp

contrib/mx_glance_sdesc.php in the mx_glance 2.3.3 module for mxBB places a critical security check within a comment bec

23RISK

open ↗

Referência✓ VexDay Proof

IBM Director 5.20.3su2 CIM Server - Remote Denial of Service

CVE-2009-0879—doswindows

The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of se

23RISK

open ↗

Referência✓ VexDay Proof

Catviz 0.4.0 beta1 - Local File Inclusion / Cross-Site Scripting

CVE-2009-1749—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Catviz 0.4.0 beta 1 allow remote attackers to inject

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.