Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,587cataloged exploits
35,644CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,428GitHub PoC 14,268VulnCheck XDB 8,663Nuclei 4,299Metasploit 3,474✓ verified onlyrecentpopularrisk
24,455 exploits
Exploit-DB✓ VexDay Proof
BT Voyager 2091 (Wireless ADSL) - Multiple Vulnerabilities
CVE-2006-3561—remotehardware18 Jul 2006
BT Voyager 2091 Wireless firmware 2.21.05.08m_A2pB018c1.d16d and earlier, and 3.01m and earlier, allow remote attackers
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Invision Power Board 2.1 < 2.1.6 - SQL Injection (2)
CVE-2006-7071—webappsphp18 Jul 2006
SQL injection vulnerability in classes/class_session.php in Invision Power Board (IPB) 2.1 up to 2.1.6 allows remote att
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.13 < 2.6.17.4 - 'logrotate prctl()' Local Privilege Escalation
CVE-2006-2451—locallinux18 Jul 2006
The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a l
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MySQL 4.x/5.x - Server Date_Format Denial of Service
CVE-2006-3469—doslinux18 Jul 2006
Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authe
28RISK
open ↗
Exploit-DB✓ VexDay Proof
ListMessenger 0.9.3 - 'LM_Path' Remote File Inclusion
CVE-2006-3692—webappsphp17 Jul 2006
PHP remote file inclusion vulnerability in enduser/listmessenger.php in ListMessenger 0.9.3 allows remote attackers to e
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Mambo Component perForms 1.0 - Remote File Inclusion
CVE-2006-3774—webappsphp17 Jul 2006
PHP remote file inclusion vulnerability in performs.php in the perForms component (com_performs) 1.0 and earlier for Joo
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Mambo Module Calendar 1.5.7 - 'Com_Calendar.php' Remote File Inclusion
CVE-2006-3843—webappsphp17 Jul 2006
PHP remote file inclusion vulnerability in com_calendar.php in Calendar Mambo Module 1.5.7 and earlier allows remote att
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Agnitum Outpost Firewall 3.5.631 - 'FiltNT.SYS' Local Denial of Service
CVE-2006-3696—doswindows17 Jul 2006
filtnt.sys in Outpost Firewall Pro before 3.51.759.6511 (462) allows local users to cause a denial of service (crash) vi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Mambo Component pollxt 1.22.07 - Remote File Inclusion
CVE-2006-5045—webappsphp17 Jul 2006
Unspecified vulnerability in PollXT component (com_pollxt) 1.22.07 and earlier for Joomla! has unspecified impact and at
23RISK
open ↗
Exploit-DB✓ VexDay Proof
D-Link Routers - UPNP Buffer Overflow
CVE-2006-3687—doshardware17 Jul 2006
Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI-
28RISK
open ↗
Exploit-DB✓ VexDay Proof
FlushCMS 1.0.0-pre2 - 'class.rich.php' Remote File Inclusion
CVE-2006-3755—webappsphp16 Jul 2006
PHP remote file inclusion vulnerability in Include/editor/class.rich.php in FlushCMS 1.0.0-pre2 and earlier allows remot
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection
CVE-2011-4084—webappsphp15 Jul 2006
20RISK
open ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection
CVE-2011-5035—webappsphp15 Jul 2006
Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 a
50RISK
open ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection
CVE-2011-5034—webappsphp15 Jul 2006
Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger ha
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Rocks Clusters 4.1 - 'umount-loop' Local Privilege Escalation
CVE-2006-3693—locallinux15 Jul 2006
Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks (\`) i
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection
CVE-2011-4885—webappsphp15 Jul 2006
PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions pre
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Rocks Clusters 4.1 - 'mount-loop' Local Privilege Escalation
CVE-2006-3693—locallinux15 Jul 2006
Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks (\`) i
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Sunbelt Kerio Personal Firewall 4.3.426 - CreateRemoteThread Denial of Service
CVE-2006-3787—doshardware15 Jul 2006
kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API fun
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection
CVE-2006-3775—webappsphp15 Jul 2006
SQL injection vulnerability in the init function in class_session.php in MyBB (aka MyBulletinBoard) 1.1.5 allows remote
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure
CVE-2006-3392—remotemultiple15 Jul 2006
Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote
60RISK
open ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection
CVE-2011-4858—webappsphp15 Jul 2006
Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without r
60RISK
open ↗
Exploit-DB✓ VexDay Proof
KDE Konqueror 3.5.x - ReplaceChild Denial of Service
CVE-2006-3672—doslinux14 Jul 2006
KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application crash) by calling the
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft PowerPoint 2003 - '.ppt' File Closure Memory Corruption
CVE-2006-3656—remotewindows14 Jul 2006
Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a c
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Subberz Lite - UserFunc Remote File Inclusion
CVE-2006-3689—webappsphp14 Jul 2006
PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia SubberZ[Lite] allows remote attackers to
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft PowerPoint 2003 - 'powerpnt.exe' Remote Overflow
CVE-2006-3660—remotewindows14 Jul 2006
Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to po
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft PowerPoint 2003 - 'mso.dll' '.PPT' Processing Code Execution
CVE-2006-3655—remotewindows14 Jul 2006
Unspecified vulnerability in mso.dll in Microsoft PowerPoint 2003 allows user-assisted attackers to execute arbitrary co
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (4)
CVE-2006-2451—locallinux14 Jul 2006
The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a l
23RISK
open ↗
Exploit-DB✓ VexDay Proof
FlatNuke 2.5.7 - 'index.php' Remote File Inclusion
CVE-2006-3608—webappsphp13 Jul 2006
The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Dream4 Koobi Pro 5.6 - 'showtopic' SQL Injection
CVE-2006-3621—webappsphp13 Jul 2006
SQL injection vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to execute arbitrary SQ
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (3)
CVE-2006-2451—locallinux13 Jul 2006
The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a l
23RISK
open ↗
← previouspage 589 / 816next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.