Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,313cataloged exploits
34,834CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,797GitHub PoC 13,885VulnCheck XDB 8,484Nuclei 4,237Metasploit 3,467✓ verified onlyrecentpopularrisk
24,443 exploits
Exploit-DB✓ VexDay Proof
Apple Safari Webkit - libxslt Arbitrary File Creation (Metasploit)
CVE-2011-1774—remotewindows18 Oct 2011
WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbi
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Safari Webkit - libxslt Arbitrary File Creation (Metasploit)
CVE-2011-1425—remotewindows18 Oct 2011
xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products, when XSLT is enabled, a
23RISK
open ↗
Exploit-DB
GNUBoard 4.33.02 - 'tp.php?PATH_INFO' SQL Injection
CVE-2011-4066—webappsphp17 Oct 2011
SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.02 and earlier allows remote attackers to execute arbitrary S
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Toshiba e-Studio (Multiple Devices) - Security Bypass
CVE-2012-1239—remotemultiple17 Oct 2011
The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral (MFP) devices with firmwa
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Safari - 'file://' Arbitrary Code Execution (Metasploit)
CVE-2011-3230—remoteosx17 Oct 2011
Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers
50RISK
open ↗
Exploit-DB✓ VexDay Proof
vTiger CRM 5.2 - 'onlyforuser' SQL Injection
CVE-2011-4559—webappsphp15 Oct 2011
SQL injection vulnerability in the Calendar module in vTiger CRM 5.2.1 and earlier allows remote attackers to execute ar
23RISK
open ↗
Exploit-DB
Microsoft Windows - TCP/IP Stack Denial of Service (MS11-064)
CVE-2011-1965—doswindows15 Oct 2011
Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properl
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsys PROMOTIC 8.1.4 - ActiveX GetPromoticSite Unitialized Pointer
CVE-2011-4518—doswindows13 Oct 2011
Directory traversal vulnerability in the PmWebDir object in the web server in MICROSYS PROMOTIC before 8.1.5 allows remo
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsys PROMOTIC 8.1.4 - ActiveX GetPromoticSite Unitialized Pointer
CVE-2011-4519—doswindows13 Oct 2011
Stack-based buffer overflow in an ActiveX component in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to cause a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - '.fon' Kernel-Mode Buffer Overrun (PoC) (MS11-077)
CVE-2011-2003—doswindows13 Oct 2011
Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, W
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsys PROMOTIC 8.1.4 - ActiveX GetPromoticSite Unitialized Pointer
CVE-2011-4520—doswindows13 Oct 2011
Heap-based buffer overflow in an ActiveX component in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to cause a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox - 'Array.reduceRight()' Integer Overflow (Metasploit) (2)
CVE-2011-2371—remotewindows13 Oct 2011
Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird bef
60RISK
open ↗
Exploit-DB✓ VexDay Proof
PcVue 10.0 SV.UIGrdCtrl.1 - 'LoadObject()'/'SaveObject()' Trusted DWORD (Metasploit)
CVE-2011-4044—remotewindows12 Oct 2011
An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox - 'Array.reduceRight()' Integer Overflow (1)
CVE-2011-2371—remotewindows12 Oct 2011
Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird bef
60RISK
open ↗
Exploit-DB✓ VexDay Proof
TugZip 3.5 Archiver - '.ZIP' File Parsing Buffer Overflow (Metasploit)
CVE-2008-4779—localwindows11 Oct 2011
Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary
50RISK
open ↗
Exploit-DB✓ VexDay Proof
SilverStripe CMS 2.4.5 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2011-4958—webappsphp11 Oct 2011
Cross-site scripting (XSS) vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 8 - Select Element Memory Corruption
CVE-2011-1999—remotewindows11 Oct 2011
Microsoft Internet Explorer 8 does not properly allocate and access memory, which allows remote attackers to execute arb
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Apache mod_proxy - Reverse Proxy Exposure
CVE-2011-3368—remotemultiple11 Oct 2011
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does
60RISK
open ↗
Exploit-DB✓ VexDay Proof
MyBB Advanced Forum Signatures - 'afsignatures-2.0.4' SQL Injection
CVE-2011-5278—webappsphp10 Oct 2011
SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin (aka afsignatures) 2.0.4 for MyBB allow
23RISK
open ↗
Exploit-DB✓ VexDay Proof
atvise webMI2ADS Web Server 1.0 - Multiple Vulnerabilities
CVE-2011-4883—doswindows10 Oct 2011
The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly validate values in HTTP requests, w
23RISK
open ↗
Exploit-DB✓ VexDay Proof
atvise webMI2ADS Web Server 1.0 - Multiple Vulnerabilities
CVE-2011-4880—doswindows10 Oct 2011
Directory traversal vulnerability in the web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 allows remote at
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MyBB Advanced Forum Signatures - 'afsignatures-2.0.4' SQL Injection
CVE-2011-5277—webappsphp10 Oct 2011
Multiple SQL injection vulnerabilities in signature.php in the Advanced Forum Signatures (aka afsignatures) plugin 2.0.4
23RISK
open ↗
Exploit-DB✓ VexDay Proof
atvise webMI2ADS Web Server 1.0 - Multiple Vulnerabilities
CVE-2011-4881—doswindows10 Oct 2011
The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly check return values from functions,
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ACDSee FotoSlate - '.PLP' File 'id' Local Overflow (Metasploit)
CVE-2011-2595—localwindows10 Oct 2011
Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code
50RISK
open ↗
Exploit-DB✓ VexDay Proof
MyBB Forum Userbar Plugin (Userbar 2.2) - SQL Injection
CVE-2011-4569—webappsphp10 Oct 2011
SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to e
23RISK
open ↗
Exploit-DB✓ VexDay Proof
GoAhead Web Server 2.18 - 'addlimit.asp?url' Cross-Site Scripting
CVE-2011-4273—remotewindows10 Oct 2011
Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
OPC Systems.NET 4.00.0048 - Denial of Service
CVE-2011-4871—doswindows10 Oct 2011
Open Automation Software OPC Systems.NET before 5.0 allows remote attackers to cause a denial of service via a malformed
23RISK
open ↗
Exploit-DB✓ VexDay Proof
GoAhead Web Server 2.18 - 'adduser.asp' Multiple Cross-Site Scripting Vulnerabilities
CVE-2011-4273—remotewindows10 Oct 2011
Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
atvise webMI2ADS Web Server 1.0 - Multiple Vulnerabilities
CVE-2011-4882—doswindows10 Oct 2011
The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 allows remote attackers to cause a denial of service
23RISK
open ↗
Exploit-DB✓ VexDay Proof
GoAhead Web Server 2.18 - 'addgroup.asp?group' Cross-Site Scripting
CVE-2011-4273—remotewindows10 Oct 2011
Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject arbitrary
23RISK
open ↗
← previouspage 314 / 815next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.