Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,542cataloged exploits
34,971CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,899GitHub PoC 13,947VulnCheck XDB 8,542Nuclei 4,243Metasploit 3,468✓ verified onlyrecentpopularrisk
24,443 exploits
Exploit-DB✓ VexDay Proof
PhotoPost PHP 4.6.5 - 'ecard.php' SQL Injection
CVE-2004-0239—webappsphp23 Jul 2010
SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unauth
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Golf Course Guide 0.9.6.0 - SQL Injection
CVE-2010-2921—webappsphp23 Jul 2010
SQL injection vulnerability in the Golf Course Guide (com_golfcourseguide) component 0.9.6.0 beta and 1 beta for Joomla!
23RISK
open ↗
Exploit-DB
Free PHP Photo Gallery Script - Remote File Inclusion
CVE-2010-4948—webappsphp22 Jul 2010
PHP remote file inclusion vulnerability in libs/adodb/adodb.inc.php in PHP Free Photo Gallery script allows remote attac
23RISK
open ↗
Exploit-DB✓ VexDay Proof
AJ HYIP PRIME - 'welcome.php?id' Blind SQL Injection
CVE-2010-2915—webappsphp22 Jul 2010
SQL injection vulnerability in welcome.php in AJ Square AJ HYIP PRIME allows remote attackers to execute arbitrary SQL c
23RISK
open ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin myLDlinker - SQL Injection
CVE-2010-2924—webappsphp22 Jul 2010
SQL injection vulnerability in myLDlinker.php in the myLinksDump Plugin 1.2 for WordPress allows remote attackers to exe
23RISK
open ↗
Exploit-DB✓ VexDay Proof
AJ HYIP MERIDIAN - 'news.php?id' Blind SQL Injection
CVE-2010-2916—webappsphp22 Jul 2010
SQL injection vulnerability in news.php in AJ Square AJ HYIP MERIDIAN allows remote attackers to execute arbitrary SQL c
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ZipCentral - '.zip' Local Buffer Overflow (SEH)
CVE-2006-2439—localwindows21 Jul 2010
Stack-based buffer overflow in ZipCentral 4.01 allows remote user-assisted attackers to execute arbitrary code via a ZIP
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Office Web Components (OWC) Spreadsheet - msDataSourceObject Memory Corruption (MS09-043) (Metasploit)
CVE-2009-1136—remotewindows20 Jul 2010
The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 an
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox and SeaMonkey Plugin Parameters - Remote Buffer Overflow
CVE-2010-1214—remotelinux20 Jul 2010
Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remot
23RISK
open ↗
Exploit-DB✓ VexDay Proof
libpng 1.4.2 - Denial of Service
CVE-2010-1205—dosmultiple20 Jul 2010
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might
35RISK
open ↗
Exploit-DB✓ VexDay Proof
OpenLDAP 2.4.22 - 'modrdn' Multiple Vulnerabilities
CVE-2010-0211—doslinux19 Jul 2010
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normal
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Ghostscript - '.PostScript' File Stack Overflow
CVE-2010-1869—localbsd18 Jul 2010
Stack-based buffer overflow in the parser function in GhostScript 8.70 and 8.64 allows context-dependent attackers to ex
23RISK
open ↗
Exploit-DB
Kayako eSupport 3.70.02 - 'functions.php' SQL Injection
CVE-2010-2911—webappsphp18 Jul 2010
SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL com
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Automatic .LNK Shortcut File Code Execution
CVE-2010-2568HIGHunder attacklocalwindows18 Jul 2010
Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 all
100RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Automatic .LNK Shortcut File Code Execution
CVE-2015-0096—localwindows18 Jul 2010
Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and
60RISK
open ↗
Exploit-DB
Kayako eSupport 3.70.02 - 'functions.php' SQL Injection
CVE-2010-2912—webappsphp18 Jul 2010
SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL com
23RISK
open ↗
Exploit-DB✓ VexDay Proof
rpc.pcnfsd - Remote Format String
CVE-2010-1039—remoteaix18 Jul 2010
Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, a
28RISK
open ↗
Exploit-DB✓ VexDay Proof
AIX5l with FTP-Server - Hash Disclosure
CVE-2010-3187—remoteaix18 Jul 2010
Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST com
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Kayako eSupport 3.70.02 - SQL Injection
CVE-2010-2911—webappsphp17 Jul 2010
SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL com
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MoreAmp - Local Buffer Overflow (SEH) (Metasploit)
CVE-2010-2439—localwindows17 Jul 2010
Stack-based buffer overflow in MoreAmp allows remote attackers to execute arbitrary code via a long line in a song list
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component StaticXT - SQL Injection
CVE-2010-2919—webappsphp17 Jul 2010
SQL injection vulnerability in the StaticXT (com_staticxt) component for Joomla! allows remote attackers to execute arbi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Kayako eSupport 3.70.02 - SQL Injection
CVE-2010-2912—webappsphp17 Jul 2010
SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL com
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Novell Groupwise Internet Agent - Stack Overflow
CVE-2010-2777—dosmultiple16 Jul 2010
Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise 7.x befo
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Pre Podcast Portal - Authentication Bypass
CVE-2010-4959—webappsphp16 Jul 2010
SQL injection vulnerability in the login feature in Pre Projects Pre Podcast Portal allows remote attackers to execute a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SAP DB 7.4 - WebTools Buffer Overflow (Metasploit)
CVE-2007-3614—remotewindows16 Jul 2010
Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 through 7.5, all
60RISK
open ↗
Exploit-DB✓ VexDay Proof
BS Scripts Directory - 'articlesdetails.php' SQL Injection
CVE-2010-2906—webappsphp16 Jul 2010
SQL injection vulnerability in articlesdetails.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory allows remot
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Mini-stream RM-MP3 Converter 3.1.2.1 - '.pls' Local Stack Buffer Overflow Universal
CVE-2010-5081—localwindows_x8616 Jul 2010
Stack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to execute arbitrary code vi
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - Daxctle.OCX KeyFrame Method Heap Buffer Overflow (MS06-067) (Metasploit)
CVE-2006-4777—remotewindows16 Jul 2010
Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) fo
60RISK
open ↗
Exploit-DB✓ VexDay Proof
BS Scripts Directory - 'info.php' SQL Injection
CVE-2010-2905—webappsphp15 Jul 2010
SQL injection vulnerability in info.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory allows remote attackers
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Nagios3 - 'statuswml.cgi' 'Ping' Command Execution (Metasploit)
CVE-2009-2288—webappscgi14 Jul 2010
statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in t
60RISK
open ↗
← previouspage 361 / 815next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.