Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,542cataloged exploits
34,971CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,899GitHub PoC 13,947VulnCheck XDB 8,542Nuclei 4,243Metasploit 3,468✓ verified onlyrecentpopularrisk
24,443 exploits
Exploit-DB✓ VexDay Proof
Oracle MySQL < 5.1.49 - 'DDL' Statements Denial of Service
CVE-2010-3676—doslinux09 Jul 2010
storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause
23RISK
open ↗
Exploit-DB
Joomla! Component QuickFAQ 1.0.3 - Blind SQL Injection
CVE-2010-2845—webappsphp09 Jul 2010
SQL injection vulnerability in the QuickFAQ (com_quickfaq) component 1.0.3 for Joomla! allows remote attackers to execut
23RISK
open ↗
Exploit-DB
Sun Java Web Server 7.0 u7 - Remote Overflow (DEP Bypass)
CVE-2010-0361—remotewindows09 Jul 2010
Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update
60RISK
open ↗
Exploit-DB✓ VexDay Proof
SimpNews 2.47.3 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2010-2858—webappsphp09 Jul 2010
Multiple cross-site scripting (XSS) vulnerabilities in news.php in SimpNews 2.47.03 and earlier allow remote attackers t
23RISK
open ↗
Exploit-DB✓ VexDay Proof
BadBlue 2.72b - PassThru Buffer Overflow (Metasploit)
CVE-2007-6377—remotewindows08 Jul 2010
Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attacker
50RISK
open ↗
Exploit-DB✓ VexDay Proof
osCSS 1.2.2 - 'page' Cross-Site Scripting
CVE-2010-2856—webappsphp08 Jul 2010
Cross-site scripting (XSS) vulnerability in admin/currencies.php in osCSS 1.2.2, and probably earlier versions, allows r
23RISK
open ↗
Exploit-DB✓ VexDay Proof
FathFTP 1.7 - ActiveX Buffer Overflow
CVE-2010-2701—remotewindows08 Jul 2010
Multiple buffer overflows in the FathFTP ActiveX control 1.7 allow remote attackers to execute arbitrary code via (1) th
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Music Manager - Local File Inclusion
CVE-2010-2857—webappsphp08 Jul 2010
Directory traversal vulnerability in the Music Manager component for Joomla! allows remote attackers to read arbitrary f
38RISK
open ↗
Exploit-DB✓ VexDay Proof
BEA Weblogic - Transfer-Encoding Buffer Overflow (Metasploit)
CVE-2008-4008—remotewindows08 Jul 2010
Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA Product Suite 10.3, 10.0 MP1, 9.2 M
50RISK
open ↗
Exploit-DB✓ VexDay Proof
EA Battlefield 2 / Battlefield 2142 - Multiple Arbitrary File Upload Vulnerabilities
CVE-2010-2627—remotewindows08 Jul 2010
Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Outlook Web Access 2007 - Cross-Site Request Forgery
CVE-2010-3213—webappswindows08 Jul 2010
Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows rem
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Qt 4.6.3 - 'QSslSocketBackendPrivate::transmit()' Denial of Service
CVE-2010-2621—dosmultiple08 Jul 2010
The QSslSocketBackendPrivate::transmit function in src_network_ssl_qsslsocket_openssl.cpp in Qt 4.6.3 and earlier allows
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Linux PAM 1.1.0 (Ubuntu 9.10/10.04) - MOTD File Tampering Privilege Escalation (1)
CVE-2010-0832—locallinux08 Jul 2010
pam_motd (aka the MOTD module) in libpam-modules before 1.1.0-2ubuntu1.1 in PAM on Ubuntu 9.10 and libpam-modules before
23RISK
open ↗
Exploit-DB
KMSoft GB - SQL Injection
CVE-2010-4987—webappsasp08 Jul 2010
SQL injection vulnerability in default.asp in KMSoft Guestbook (aka GBook) allows remote attackers to execute arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DD-WRT HTTPd Daemon/Service - Arbitrary Command Execution (Metasploit)
CVE-2009-2765—webappscgi07 Jul 2010
httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component ArtForms 2.1b7.2 rc2 - Multiple Vulnerabilities
CVE-2010-2846—webappsphp07 Jul 2010
Cross-site scripting (XSS) vulnerability in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! al
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component ArtForms 2.1b7.2 rc2 - Multiple Vulnerabilities
CVE-2010-2848—webappsphp07 Jul 2010
Directory traversal vulnerability in assets/captcha/includes/alikon/playcode.php in the InterJoomla ArtForms (com_artfor
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Simple Document Management System - SQL Injection
CVE-2010-4986—webappsphp07 Jul 2010
SQL injection vulnerability in detail.php in Simple Document Management System (SDMS) allows remote attackers to execute
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Sijio Community Software - SQL Injection / Persistent Cross-Site Scripting
CVE-2010-2698—webappsphp07 Jul 2010
Multiple cross-site scripting (XSS) vulnerabilities in Sijio Community Software allow remote authenticated users to inje
23RISK
open ↗
Exploit-DB
Joomla! Component PaymentsPlus 2.1.5 - Blind SQL Injection
CVE-2010-4992—webappsphp07 Jul 2010
SQL injection vulnerability in the Payments Plus component 2.1.5 for Joomla! allows remote attackers to execute arbitrar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
BadBlue 2.5 - 'ext.dll' Remote Buffer Overflow (Metasploit)
CVE-2005-0595—remotewindows07 Jul 2010
Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand
50RISK
open ↗
Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) 7.53 - 'ovwebsnmpsrv.exe' Local Buffer Overflow (SEH)
CVE-2010-1964—localwindows07 Jul 2010
Buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers t
50RISK
open ↗
Exploit-DB✓ VexDay Proof
MailEnable - Authorisation Header Buffer Overflow (Metasploit)
CVE-2005-1348—remotewindows07 Jul 2010
Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote at
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component ArtForms 2.1b7.2 rc2 - Multiple Vulnerabilities
CVE-2010-2847—webappsphp07 Jul 2010
Multiple SQL injection vulnerabilities in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! allo
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Exponent CMS 0.97 - 'Slideshow.js.php' Cross-Site Scripting
CVE-2010-5002—webappsphp07 Jul 2010
Cross-site scripting (XSS) vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remot
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Sijio Community Software - SQL Injection / Persistent Cross-Site Scripting
CVE-2010-2696—webappsphp07 Jul 2010
SQL injection vulnerability in gallery/index.php in Sijio Community Software allows remote attackers to execute arbitrar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Alt-N SecurityGateway 1.0.1 - 'Username' Remote Buffer Overflow (Metasploit)
CVE-2008-4193—remotewindows07 Jul 2010
Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers t
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft IIS - ISAPI 'w3who.dll' Query String Overflow (Metasploit)
CVE-2004-1134—remotewindows07 Jul 2010
Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possib
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Sijio Community Software - SQL Injection / Persistent Cross-Site Scripting
CVE-2010-2697—webappsphp07 Jul 2010
Cross-site scripting (XSS) vulnerability in Sijio Community Software allows remote authenticated users to inject arbitra
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apache (Windows x86) - Chunked Encoding (Metasploit)
CVE-2002-0392—remotewindows_x8607 Jul 2010
Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possi
60RISK
open ↗
← previouspage 363 / 815next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.