Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,231cataloged exploits
35,420CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,266GitHub PoC 14,131VulnCheck XDB 8,635Nuclei 4,274Metasploit 3,474✓ verified onlyrecentpopularrisk
24,451 exploits
Exploit-DB✓ VexDay Proof
Simple Machines Forum (SMF) 1.1.4 - Multiple Remote File Inclusions
CVE-2008-6544—webappsphp28 Mar 2008
Multiple PHP remote file inclusion vulnerabilities in Simple Machines Forum (SMF) 1.1.4 allow remote attackers to execut
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Wireshark 0.99.8 - SCCP Dissector Decode As Feature Denial of Service
CVE-2008-1563—doslinux28 Mar 2008
The "decode as" feature in packet-bssap.c in the SCCP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.8 a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Wireshark 0.99.8 - X.509sat Dissector Denial of Service
CVE-2008-1561—doslinux28 Mar 2008
Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) 0.99.5 through 0.99.8 allow remote attackers to ca
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Wireshark 0.99.8 - LDAP Dissector Denial of Service
CVE-2008-1562—doslinux28 Mar 2008
The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of s
50RISK
open ↗
Exploit-DB✓ VexDay Proof
MySQL 6.0.4 - Empty Binary String Literal Remote Denial of Service
CVE-2008-3963—doslinux28 Mar 2008
MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-q
23RISK
open ↗
Exploit-DB✓ VexDay Proof
BSD (Multiple Distributions) - 'strfmon()' Integer Overflow
CVE-2008-1391—dosbsd27 Mar 2008
Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms
28RISK
open ↗
Exploit-DB✓ VexDay Proof
DigiDomain 2.2 - 'lookup_result.asp?domain' Cross-Site Scripting
CVE-2008-1560—webappsasp27 Mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in Digiappz DigiDomain 2.2 allow remote attackers to inject arbitrar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DigiDomain 2.2 - 'suggest_result.asp' Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-1560—webappsasp27 Mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in Digiappz DigiDomain 2.2 allow remote attackers to inject arbitrar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
GeeCarts - 'show.php?id' Cross-Site Scripting
CVE-2008-1621—webappsphp26 Mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script or
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Invision Power Board 2.x - 'Signature' iFrame Security
CVE-2008-6565—webappsphp26 Mar 2008
Cross-site scripting (XSS) vulnerability in Invision Power Board 2.3.1 and earlier allows remote attackers to inject arb
23RISK
open ↗
Exploit-DB✓ VexDay Proof
GeeCarts - 'search.php?id' Cross-Site Scripting
CVE-2008-1621—webappsphp26 Mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script or
23RISK
open ↗
Exploit-DB✓ VexDay Proof
BlackBoard Academic Suite 6/7 - '/bin/common/announcement.pl?data__announcements___pk1_pk2__subject' Cross-Site Scripting
CVE-2008-1795—webappscgi26 Mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0
23RISK
open ↗
Exploit-DB✓ VexDay Proof
BlackBoard Academic Suite 6/7 - '/webapps/BlackBoard/execute/viewCatalog?searchText' Cross-Site Scripting
CVE-2008-1795—webappscgi26 Mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHPAddressBook 2.0 - 'index.php' SQL Injection
CVE-2008-7145—webappsphp26 Mar 2008
Multiple SQL injection vulnerabilities in index.php in CoronaMatrix phpAddressBook 2.0 allow remote attackers to execute
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PECL 3.0.x - Alternative PHP Cache Extension 'apc_search_paths()' Remote Buffer Overflow
CVE-2008-1488—remotelinux26 Mar 2008
Stack-based buffer overflow in apc.c in Alternative PHP Cache (APC) 3.0.11 through 3.0.16 allows remote attackers to exe
23RISK
open ↗
Exploit-DB✓ VexDay Proof
GeeCarts - 'view.php?id' Cross-Site Scripting
CVE-2008-1621—webappsphp26 Mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script or
23RISK
open ↗
Exploit-DB✓ VexDay Proof
JAF CMS 4.0 RC2 - Multiple Remote File Inclusions
CVE-2006-7128—webappsphp26 Mar 2008
PHP remote file inclusion vulnerability in forum/forum.php JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Novell eDirectory 8.x - eMBox Utility 'edirutil' Command
CVE-2008-0926—remotenovell25 Mar 2008
The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on clien
50RISK
open ↗
Exploit-DB✓ VexDay Proof
phpBB PJIRC Module 0.5 - 'irc.php' Local File Inclusion
CVE-2008-1565—webappsphp25 Mar 2008
Directory traversal vulnerability in forum/irc/irc.php in the PJIRC 0.5 module for phpBB allows remote attackers to incl
23RISK
open ↗
Exploit-DB✓ VexDay Proof
LeadTools MultiMedia 15 - 'LTMM15.dll' ActiveX Control Arbitrary File Overwrite
CVE-2008-1605—remotewindows25 Mar 2008
The (1) ltmmCaptureCtrl Class, (2) ltmmConvertCtrl Class, and (3) ltmmPlayCtrl Class ActiveX controls (ltmm15.dll 15.1.0
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Bomba Haber 2.0 - 'haberoku.php' SQL Injection
CVE-2008-1607—webappsphp25 Mar 2008
SQL injection vulnerability in haberoku.php in Serbay Arslanhan Bomba Haber 2.0 allows remote attackers to execute arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'Classifieds/index.php3?DOCUMENT_ROOT' Remote File Inclusion
CVE-2008-6543—webappsphp24 Mar 2008
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'Classifieds/view.php3?DOCUMENT_ROOT' Remote File Inclusion
CVE-2008-6543—webappsphp24 Mar 2008
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'controlpannel/alterFeatured.php3?DOCUMENT_ROOT' Remote File Inclusion
CVE-2008-6543—webappsphp24 Mar 2008
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'controlpannel/createHomepage.php3?DOCUMENT_ROOT' Remote File Inclusion
CVE-2008-6543—webappsphp24 Mar 2008
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'controlpannel/createdb.php3?DOCUMENT_ROOT' Remote File Inclusion
CVE-2008-6543—webappsphp24 Mar 2008
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'style/default.scheme.inc?DOCUMENT_ROOT' Remote File Inclusion
CVE-2008-6543—webappsphp24 Mar 2008
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'controlcenter/index.php3?DOCUMENT_ROOT' Remote File Inclusion
CVE-2008-6543—webappsphp24 Mar 2008
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'include/adminHead.inc?DOCUMENT_ROOT' Remote File Inclusion
CVE-2008-6543—webappsphp24 Mar 2008
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'controlcenter/sign-up.php3?DOCUMENT_ROOT' Remote File Inclusion
CVE-2008-6543—webappsphp24 Mar 2008
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RISK
open ↗
← previouspage 491 / 816next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.