Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,602cataloged exploits
34,985CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,899GitHub PoC 13,969VulnCheck XDB 8,571Nuclei 4,248Metasploit 3,472✓ verified onlyrecentpopularrisk
24,443 exploits
Exploit-DB✓ VexDay Proof
phptroubleticket 2.0 - 'id' SQL Injection
CVE-2010-1089—webappsphp01 Mar 2010
SQL injection vulnerability in vedi_faq.php in PHP Trouble Ticket 2.2 allows remote attackers to execute arbitrary SQL c
23RISK
open ↗
Exploit-DB✓ VexDay Proof
TRUC 0.11 - 'login_reset_password_page.php' Cross-Site Scripting
CVE-2010-1095—webappsphp28 Feb 2010
Cross-site scripting (XSS) vulnerability in login_reset_password_page.php in Tracking Requirements & Use Cases (TRUC) 0.
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Uiga Fan Club - 'index.php' SQL Injection
CVE-2010-1365—webappsphp28 Feb 2010
SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component com_yanc - SQL Injection
CVE-2007-2792—webappsphp28 Feb 2010
SQL injection vulnerability in the Yet another Newsletter Component (aka YaNC or com_yanc) component before 1.5 beta 3 f
23RISK
open ↗
Exploit-DB✓ VexDay Proof
HazelPress Lite 0.0.4 - Authentication Bypass
CVE-2010-2135—webappsphp28 Feb 2010
Multiple SQL injection vulnerabilities in login.php in HazelPress Lite 0.0.4 and earlier allow remote attackers to execu
23RISK
open ↗
Exploit-DB
RCA DCM425 Cable Modem - 'micro_httpd' Denial of Service (PoC)
CVE-2010-1544—doshardware28 Feb 2010
micro_httpd on the RCA DCM425 cable modem allows remote attackers to cause a denial of service (device reboot) via a lon
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Uiga Personal Portal - 'index.php' SQL Injection
CVE-2010-1364—webappsphp28 Feb 2010
SQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on 20100301, allows remote attackers to
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ProMan 0.1.1 - Multiple File Inclusions
CVE-2010-2137—webappsphp27 Feb 2010
PHP remote file inclusion vulnerability in _center.php in ProMan 0.1.1 and earlier allows remote attackers to execute ar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
phpCDB 1.0 - Local File Inclusion
CVE-2010-1537—webappsphp27 Feb 2010
Multiple directory traversal vulnerabilities in phpCDB 1.0 and earlier allow remote attackers to include and execute arb
23RISK
open ↗
Exploit-DB
phpRAINCHECK 1.0.1 - SQL Injection
CVE-2010-1538—webappsphp27 Feb 2010
SQL injection vulnerability in print_raincheck.php in phpRAINCHECK 1.0.1 and earlier allows remote attackers to execute
23RISK
open ↗
Exploit-DB
Pre Classified Listings - SQL Injection
CVE-2010-1369—webappsasp27 Feb 2010
SQL injection vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQ
23RISK
open ↗
Exploit-DB
phpMySite - Cross-Site Scripting / SQL Injection
CVE-2010-1091—webappsphp27 Feb 2010
Multiple cross-site scripting (XSS) vulnerabilities in contact.php in phpMySite allow remote attackers to inject arbitra
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Project Man 1.0 - Authentication Bypass
CVE-2010-2134—webappsphp27 Feb 2010
Multiple SQL injection vulnerabilities in login.php in Project Man 1.0 and earlier allow remote attackers to execute arb
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ProMan 0.1.1 - Multiple File Inclusions
CVE-2010-2138—webappsphp27 Feb 2010
Multiple directory traversal vulnerabilities in ProMan 0.1.1 and earlier allow remote attackers to include and execute a
23RISK
open ↗
Exploit-DB
Scripts Feed Business Directory - SQL Injection
CVE-2010-1092—webappsphp27 Feb 2010
Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to
23RISK
open ↗
Exploit-DB
phpMySite - Cross-Site Scripting / SQL Injection
CVE-2010-1090—webappsphp27 Feb 2010
SQL injection vulnerability in index.php in phpMySite allows remote attackers to execute arbitrary SQL commands via the
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Uiga Fan Club 1.0 - Authentication Bypass
CVE-2010-1366—webappsphp27 Feb 2010
Multiple SQL injection vulnerabilities in admin/admin_login.php in Uiga Fan Club 1.0 and earlier allow remote attackers
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DZ Erotik Auktionshaus 4.rgo - 'news.php' SQL Injection
CVE-2010-1094—webappsphp27 Feb 2010
SQL injection vulnerability in news.php in DZ EROTIK Auktionshaus V4rgo allows remote attackers to execute arbitrary SQL
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP 5.3.1 - LCG Entropy Security
CVE-2010-1128—dosphp26 Feb 2010
The Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected entropy, which makes it easie
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ARISg 5.0 - 'wflogin.jsp' Cross-Site Scripting
CVE-2010-2130—webappsjsp26 Feb 2010
Cross-site scripting (XSS) vulnerability in wflogin.jsp in Aris Global ARISg 5.0 allows remote attackers to inject arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Orbital Viewer 1.04 - '.orb' File Local Universal Overflow (SEH)
CVE-2010-0688—localwindows26 Feb 2010
Stack-based buffer overflow in Orbital Viewer 1.04 allows user-assisted remote attackers to execute arbitrary code via a
50RISK
open ↗
Exploit-DB✓ VexDay Proof
IBM (Multiple Products) - Login Page Cross-Site Scripting
CVE-2010-0714—webappsjsp25 Feb 2010
Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
GameScript 3.0 - SQL Injection
CVE-2010-1368—webappsphp25 Feb 2010
SQL injection vulnerability in index.php in GameScript (GS) 3.0 allows remote attackers to execute arbitrary SQL command
23RISK
open ↗
Exploit-DB✓ VexDay Proof
WikyBlog 1.7.3rc2 - Multiple Vulnerabilities
CVE-2010-0756—webappsphp24 Feb 2010
Session fixation vulnerability in WikyBlog 1.7.3 rc2 allows remote attackers to hijack web sessions by setting the jsess
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Web Server Creator Web Portal 0.1 - Multiple Vulnerabilities
CVE-2010-1114—webappsphp24 Feb 2010
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to exec
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Safari 4.0.4 / Google Chrome 4.0.249 - CSS style Stack Overflow Denial of Service (PoC)
CVE-2010-1029—dosmultiple24 Feb 2010
Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Saf
28RISK
open ↗
Exploit-DB✓ VexDay Proof
WikyBlog 1.7.3rc2 - Multiple Vulnerabilities
CVE-2010-0755—webappsphp24 Feb 2010
PHP remote file inclusion vulnerability in include/WBmap.php in WikyBlog 1.7.3 rc2 allows remote attackers to execute ar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
WikyBlog 1.7.3rc2 - Multiple Vulnerabilities
CVE-2010-0757—webappsphp24 Feb 2010
Unrestricted file upload vulnerability in index.php/Attach in WikyBlog 1.7.3rc2 allows remote authenticated users to exe
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Web Server Creator Web Portal 0.1 - Multiple Vulnerabilities
CVE-2010-1113—webappsphp24 Feb 2010
Cross-site scripting (XSS) vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remote attacker
23RISK
open ↗
Exploit-DB✓ VexDay Proof
WikyBlog 1.7.3rc2 - Multiple Vulnerabilities
CVE-2010-0754—webappsphp24 Feb 2010
Cross-site scripting (XSS) vulnerability in index.php/Special/Main/Templates in WikyBlog 1.7.2 and 1.7.3 rc2 allows remo
23RISK
open ↗
← previouspage 394 / 815next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.