Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,231cataloged exploits

35,420CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,451Referência 22,266GitHub PoC 14,131VulnCheck XDB 8,635Nuclei 4,274Metasploit 3,474✓ verified onlyrecent popular risk

24,451 exploits

Exploit-DB✓ VexDay Proof

KwsPHP 1.0 ConcoursPhoto Module - 'VIEW' Cross-Site Scripting

CVE-2008-1757—webappsphp04 Apr 2008

Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers

23RISK

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'show.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 Apr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RISK

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'admin.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 Apr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RISK

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'detail.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 Apr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RISK

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'index.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 Apr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RISK

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'stats.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 Apr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RISK

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'resize.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 Apr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RISK

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'sess.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 Apr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RISK

Exploit-DB✓ VexDay Proof

Opera Web Browser 9.26 - Multiple Vulnerabilities

CVE-2008-1762—doslinux03 Apr 2008

Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a

23RISK

Exploit-DB✓ VexDay Proof

Joomla! / Mambo Component Showroom Joomlearn LMS - 'cat' SQL Injection

CVE-2008-4777—webappsphp03 Apr 2008

SQL injection vulnerability in the Showroom Joomlearn LMS (com_lms) component for Joomla! and Mambo allows remote attack

23RISK

Exploit-DB✓ VexDay Proof

Microsoft Visual InterDev 6.0 SP6 - '.sln' Local Buffer Overflow (PoC)

CVE-2008-0250—doswindows03 Apr 2008

Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a St

28RISK

Exploit-DB✓ VexDay Proof

Parallels Virtuozzo Containers 3.0.0-25.4.swsoft VZPP Interface Change Pass - Cross-Site Request Forgery

CVE-2008-6479—webappsphp03 Apr 2008

Cross-site request forgery (CSRF) vulnerability in the "change password" feature in the VZPP web interface for Parallels

23RISK

Exploit-DB✓ VexDay Proof

Parallels Virtuozzo Containers 3.0.0-25.4/4.0.0-365.6 VZPP Interface File Manger - Cross-Site Request Forgery

CVE-2008-6478—webappsphp03 Apr 2008

Cross-site request forgery (CSRF) vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 36

23RISK

Exploit-DB✓ VexDay Proof

LANDesk Management Suite 8.80.1.1 - PXE TFTP Service Directory Traversal

CVE-2008-6195—remotelinux02 Apr 2008

Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 and

23RISK

Exploit-DB✓ VexDay Proof

EasySite 2.0 - 'browser.php' Remote File Inclusion

CVE-2008-6196—webappsphp02 Apr 2008

Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute ar

23RISK

Exploit-DB✓ VexDay Proof

EasySite 2.0 - 'skin_chooser.php' Remote File Inclusion

CVE-2008-6196—webappsphp02 Apr 2008

Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute ar

23RISK

Exploit-DB✓ VexDay Proof

EasySite 2.0 - 'image_editor.php' Remote File Inclusion

CVE-2008-6196—webappsphp02 Apr 2008

Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute ar

23RISK

Exploit-DB✓ VexDay Proof

DivXDB 2002 0.94b - Multiple Cross-Site Scripting Vulnerabilities

CVE-2008-1800—webappsphp02 Apr 2008

Multiple cross-site scripting (XSS) vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attackers to inject a

23RISK

Exploit-DB✓ VexDay Proof

Terracotta - 'index.php' Local File Inclusion

CVE-2008-6522—webappsphp01 Apr 2008

Multiple directory traversal vulnerabilities in the RenderFile function in ContentRender.class.php in Terracotta (aka Op

23RISK

Exploit-DB✓ VexDay Proof

Jack (tR) Jax LinkLists 1.00 - 'jax_linklists.php' Cross-Site Scripting

CVE-2008-6562—webappsphp31 Mar 2008

Cross-site scripting (XSS) vulnerability in jax_linklists.php in Jack (tR) Jax LinkLists 1.00 allows remote attackers to

23RISK

Exploit-DB✓ VexDay Proof

Jax Guestbook 3.31/3.50 - 'jax_Guestbook.php' Cross-Site Scripting

CVE-2005-4879—webappsphp31 Mar 2008

Multiple cross-site scripting (XSS) vulnerabilities in jax_guestbook.php in Jax Guestbook 3.1 and 3.31 allow remote atta

23RISK

Exploit-DB✓ VexDay Proof

@lex Guestbook 4.0.5 - 'setup.php?language_setup' Cross-Site Scripting

CVE-2008-7140—webappsphp31 Mar 2008

Multiple cross-site scripting (XSS) vulnerabilities in @lex Guestbook 4.0.5 and earlier allow remote attackers to inject

23RISK

Exploit-DB✓ VexDay Proof

@lex Poll 1.2 - 'setup.php' Cross-Site Scripting

CVE-2008-7141—webappsphp31 Mar 2008

Cross-site scripting (XSS) vulnerability in setup.php in @lex Poll 2.1 allows remote attackers to inject arbitrary web s

23RISK

Exploit-DB✓ VexDay Proof

@lex Guestbook 4.0.5 - 'index.php?test' Cross-Site Scripting

CVE-2008-7140—webappsphp31 Mar 2008

Multiple cross-site scripting (XSS) vulnerabilities in @lex Guestbook 4.0.5 and earlier allow remote attackers to inject

23RISK

Exploit-DB✓ VexDay Proof

SLmail Pro 6.3.1.0 - Multiple Remote Denial of Service / Memory Corruption Vulnerabilities

CVE-2008-1690—doswindows31 Mar 2008

WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of se

23RISK

Exploit-DB✓ VexDay Proof

PHPGKit 0.9 - 'connexion.php' Remote File Inclusion

CVE-2008-6491—webappsphp31 Mar 2008

PHP remote file inclusion vulnerability in connexion.php in PHPGKit 0.9 allows remote attackers to execute arbitrary PHP

23RISK

Exploit-DB✓ VexDay Proof

EfesTECH Video 5.0 - 'catID' SQL Injection

CVE-2008-1641—webappsasp31 Mar 2008

SQL injection vulnerability in default.asp in EfesTECH Video 5.0 allows remote attackers to execute arbitrary SQL comman

23RISK

Exploit-DB✓ VexDay Proof

Microsoft Office XP SP3 - '.PPT' File Buffer Overflow (MS08-016)

CVE-2008-0113—localwindows30 Mar 2008

Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execu

35RISK

Exploit-DB✓ VexDay Proof

Microsoft Office XP SP3 - '.PPT' File Buffer Overflow (MS08-016)

CVE-2008-0118—localwindows30 Mar 2008

Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 f

35RISK

Exploit-DB✓ VexDay Proof

2X ThinClientServer 5.0 sp1-r3497 TFTP Service - Directory Traversal

CVE-2008-1620—remotewindows29 Mar 2008

Directory traversal vulnerability in 2X TFTP service (TFTPd.exe) 3.2.0.0 and earlier in 2X ThinClientServer 5.0_sp1-r349

23RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.