Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,449cataloged exploits
35,552CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,451Referência 22,367GitHub PoC 14,225VulnCheck XDB 8,649Nuclei 4,283Metasploit 3,474✓ verified onlyrecentpopularrisk
24,451 exploits
Exploit-DB✓ VexDay Proof
AnnonceScriptHP 2.0 - 'voirannonce.php?no' SQL Injection
CVE-2006-6478—webappsphp09 Dec 2006
Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands v
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - DNS Resolution Remote Denial of Service (PoC) (MS06-041)
CVE-2006-3441—doswindows09 Dec 2006
Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remo
35RISK
open ↗
Exploit-DB✓ VexDay Proof
ProNews 1.5 - 'lire-avis.php?aa' SQL Injection
CVE-2006-6519—webappsphp09 Dec 2006
SQL injection vulnerability in lire-avis.php in ProNews 1.5 allows remote attackers to execute arbitrary SQL commands vi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
AnnonceScriptHP 2.0 - '/admin/admin_config/Aide.php?email' Cross-Site Scripting
CVE-2006-6479—webappsphp09 Dec 2006
Multiple cross-site scripting (XSS) vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to inject arbitrary we
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Messageriescripthp 2.0 - 'existepseudo.php?pseudo' Cross-Site Scripting
CVE-2006-6520—webappsphp09 Dec 2006
Multiple cross-site scripting (XSS) vulnerabilities in Messageriescripthp 2.0 allow remote attackers to inject arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Messageriescripthp 2.0 - '/Contact/contact.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2006-6520—webappsphp09 Dec 2006
Multiple cross-site scripting (XSS) vulnerabilities in Messageriescripthp 2.0 allow remote attackers to inject arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Madwifi < 0.9.2.1 - SIOCGIWSCAN Buffer Overflow (Metasploit)
CVE-2006-6332—remotelinux08 Dec 2006
Stack-based buffer overflow in net80211/ieee80211_wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execut
28RISK
open ↗
Exploit-DB✓ VexDay Proof
CM68 News 12.02.06 - 'addpth' Remote File Inclusion
CVE-2006-6544—webappsphp08 Dec 2006
Cross-site scripting (XSS) vulnerability in CM68 News allows remote attackers to inject arbitrary web script or HTML via
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Cilem Haber Free Edition - 'hata.asp?hata' Cross-Site Scripting
CVE-2006-6536—webappsasp08 Dec 2006
Cross-site scripting (XSS) vulnerability in hata.asp in Cilem Haber Free Edition allows remote attackers to inject arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
cPanel 11 BoxTrapper - Manage.HTML Cross-Site Scripting
CVE-2006-6523—webappsphp08 Dec 2006
Cross-site scripting (XSS) vulnerability in mail/manage.html in BoxTrapper in cPanel 11 allows remote attackers to injec
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP 5.2 - Session.Save_Path() 'Safe_mode' / 'open_basedir' Restriction Bypass
CVE-2006-6383—localphp08 Dec 2006
PHP 5.2.0 and 4.4 allows local users to bypass safe_mode and open_basedir restrictions via a malicious path and a null b
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Dol Storye - 'Dettaglio.asp' Multiple SQL Injections
CVE-2006-6414—webappsasp06 Dec 2006
Multiple SQL injection vulnerabilities in dettaglio.asp in dol storye allow remote attackers to execute arbitrary SQL co
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 7 - CSS Width Element Denial of Service
CVE-2006-6311—doswindows06 Dec 2006
Microsoft Internet Explorer 6.0.2900.2180 allows remote attackers to cause a denial of service via a style attribute in
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Frame Src Denial of Service
CVE-2006-6310—doswindows05 Dec 2006
Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (crash) via an inva
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Inside Systems Mail 2.0 - 'error.php' Cross-Site Scripting
CVE-2006-6364—webappsphp04 Dec 2006
Cross-site scripting (XSS) vulnerability in error.php in Inside Systems Mail (ISMail) 2.0 and earlier allows remote atta
23RISK
open ↗
Exploit-DB✓ VexDay Proof
BlueSocket BSC 2100 5.0/5.1 - Admin.pl Cross-Site Scripting
CVE-2006-6363—webappscgi04 Dec 2006
Cross-site scripting (XSS) vulnerability in admin.pl in BlueSocket Secure Controller (BSC) before 5.2, or without 5.1.1-
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ac4p Mobile - 'up.php?Taaa' Cross-Site Scripting
CVE-2006-6389—webappsphp04 Dec 2006
Multiple cross-site scripting (XSS) vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ac4p Mobile - 'polls.php' Multiple Cross-Site Scripting Vulnerabilities (2)
CVE-2006-6389—webappsphp04 Dec 2006
Multiple cross-site scripting (XSS) vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Metyus Okul Yonetim 1.0 - 'Sistemi Uye_giris_islem.asp' SQL Injection
CVE-2006-6298—webappsasp04 Dec 2006
SQL injection vulnerability in uye_giris_islem.asp in Metyus Okul Yonetim Sistemi 1.0 allows remote attackers to execute
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Cerberus Helpdesk 2.x - 'Spellwin.php' Cross-Site Scripting
CVE-2006-6366—webappsphp04 Dec 2006
Cross-site scripting (XSS) vulnerability in includes/elements/spellcheck/spellwin.php in Cerberus Helpdesk 0.97.3, 2.0 t
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Vt-Forum Lite 1.3 - 'vf_info.asp?StrMes' Cross-Site Scripting
CVE-2006-6447—webappsasp04 Dec 2006
Multiple cross-site scripting (XSS) vulnerabilities in Vt-Forum Lite 1.3 and 1.5 allow remote attackers to inject arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Vt-Forum Lite 1.3 - 'vf_newtopic.asp' IFRAME Element Cross-Site Scripting
CVE-2006-6447—webappsasp04 Dec 2006
Multiple cross-site scripting (XSS) vulnerabilities in Vt-Forum Lite 1.3 and 1.5 allow remote attackers to inject arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP-revista 1.1.2 - 'adodb' Multiple Remote File Inclusions
CVE-2006-4605—webappsphp03 Dec 2006
PHP remote file inclusion vulnerability in index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to exec
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Allied Telesyn TFTP (AT-TFTP) Server/Daemon 1.9 - 'Filename' Remote Buffer Overflow
CVE-2006-6184—remotewindows03 Dec 2006
Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote at
50RISK
open ↗
Exploit-DB✓ VexDay Proof
PHPNews 1.3 - 'Link_Temp.php' Cross-Site Scripting
CVE-2006-6356—webappsphp02 Dec 2006
Multiple cross-site scripting (XSS) vulnerabilities in templates/link_temp.php in PHPNews 1.3.0 allow remote attackers t
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DUdownload 1.0/1.1 - 'detail.asp' Multiple SQL Injections
CVE-2006-6367—webappsasp02 Dec 2006
Multiple SQL injection vulnerabilities in detail.asp in DUware DUdownload 1.1, and possibly earlier, allow remote attack
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DUClassmate 1.x - 'ICity' SQL Injection
CVE-2006-6355—webappsasp02 Dec 2006
SQL injection vulnerability in default.asp in DuWare DuClassmate allows remote attackers to execute arbitrary SQL comman
23RISK
open ↗
Exploit-DB✓ VexDay Proof
CuteNews 1.3.6 - 'result' Cross-Site Scripting
CVE-2006-6300—webappsphp02 Dec 2006
Cross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject arbitrary web script or HTM
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DZCP (deV!L_z Clanportal) 1.3.6 - 'Show' SQL Injection
CVE-2006-6339—webappsphp01 Dec 2006
SQL injection vulnerability in sites/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows remote attackers to ex
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ContentServ 4.x - '/admin/FileServer.php' File Disclosure
CVE-2006-6277—webappsphp01 Dec 2006
Directory traversal vulnerability in admin/FileServer.php in ContentServ 4.x allows remote attackers to read arbitrary f
23RISK
open ↗
← previouspage 559 / 816next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.