Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,620cataloged exploits
35,647CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,429GitHub PoC 14,270VulnCheck XDB 8,693Nuclei 4,299Metasploit 3,474✓ verified onlyrecentpopularrisk
24,455 exploits
Exploit-DB✓ VexDay Proof
free QBoard 1.1 - 'index.php?qb_path' Remote File Inclusion
CVE-2006-3475—webappsphp03 Jul 2006
Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP co
23RISK
open ↗
Exploit-DB✓ VexDay Proof
free QBoard 1.1 - 'faq.php?qb_path' Remote File Inclusion
CVE-2006-3475—webappsphp03 Jul 2006
Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP co
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Quake 3 Engine Client (Windows x86) - CS_ITEms Remote Overflow
CVE-2006-3325—doswindows_x8602 Jul 2006
client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier all
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Quake 3 Engine Client - 'CG_ServerCommand()' Remote Overflow
CVE-2006-3324—doswindows02 Jul 2006
The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine (ioquake3) before revision 804
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Quake 3 Engine Client - 'CG_ServerCommand()' Remote Overflow
CVE-2006-3325—doswindows02 Jul 2006
client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier all
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Plume CMS 1.1.3 - 'dbinstall.php' Remote File Inclusion
CVE-2006-7021—webappsphp01 Jul 2006
PHP remote file inclusion vulnerability in manager/tools/link/dbinstall.php in Plume CMS 1.1.3 allows remote attackers t
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SturGeoN Upload - Arbitrary File Upload
CVE-2006-3381—webappsphp01 Jul 2006
SturGeoN Upload allows remote attackers to execute arbitrary PHP code by uploading a file with a .php extension, then di
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Stud.IP 1.3.0-2 - Multiple Remote File Inclusions
CVE-2006-3361—webappsphp01 Jul 2006
PHP remote file inclusion vulnerability in Stud.IP 1.3.0-2 and earlier, when register_globals is enabled, allows remote
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SmartSite CMS 1.0 - 'root' Multiple Remote File Inclusions
CVE-2006-3421—webappsphp01 Jul 2006
PHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and earlier, when register_globals is enabled, allows remote
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Diesel Joke Site - 'Category.php' SQL Injection
CVE-2006-3763—webappsphp01 Jul 2006
SQL injection vulnerability in category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL command
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - TCP/IP Protocol Driver Remote Buffer Overflow
CVE-2006-2379—doswindows30 Jun 2006
Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and ear
35RISK
open ↗
Exploit-DB✓ VexDay Proof
SoftBiz Banner Exchange Script 1.0 - 'gen_confirm_mem.php?PHPSESSID' Cross-Site Scripting
CVE-2006-3607—webappsphp29 Jun 2006
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Scrip
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SoftBiz Banner Exchange Script 1.0 - 'index.php?PHPSESSID' Cross-Site Scripting
CVE-2006-3607—webappsphp29 Jun 2006
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Scrip
23RISK
open ↗
Exploit-DB✓ VexDay Proof
newsPHP 2006 PRO - '/inc/rss_feed.php?category' SQL Injection
CVE-2006-3359—webappsphp29 Jun 2006
Multiple SQL injection vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web s
23RISK
open ↗
Exploit-DB✓ VexDay Proof
newsPHP 2006 PRO - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2006-3358—webappsphp29 Jun 2006
Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject ar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - RRAS RASMAN Registry Stack Overflow (MS06-025) (Metasploit)
CVE-2006-2370—remotewindows29 Jun 2006
Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Serve
60RISK
open ↗
Exploit-DB✓ VexDay Proof
SoftBiz Banner Exchange Script 1.0 - 'lostpassword.php?PHPSESSID' Cross-Site Scripting
CVE-2006-3607—webappsphp29 Jun 2006
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Scrip
23RISK
open ↗
Exploit-DB✓ VexDay Proof
newsPHP 2006 PRO - 'index.php' Multiple SQL Injections
CVE-2006-3358—webappsphp29 Jun 2006
Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject ar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SoftBiz Banner Exchange Script 1.0 - 'insertmember.php?city' Cross-Site Scripting
CVE-2006-3607—webappsphp29 Jun 2006
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Scrip
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Blog:CMS 4.0.0k - SQL Injection
CVE-2006-3364—webappsphp28 Jun 2006
SQL injection vulnerability in index.php in the NP_SEO plugin in BLOG:CMS before 4.1.0 allows remote attackers to execut
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHPClassifieds.Info - Multiple Input Validation Vulnerabilities
CVE-2006-3329—webappsphp28 Jun 2006
SQL injection vulnerability in search.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MF Piadas 1.0 - 'admin.php' Cross-Site Scripting
CVE-2006-3323—webappsphp27 Jun 2006
PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote attackers to execute arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MF Piadas 1.0 - 'admin.php' Remote File Inclusion
CVE-2006-3323—webappsphp27 Jun 2006
PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote attackers to execute arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1 - OuterHTML redirection Handling Information Disclosure
CVE-2006-3280—remotewindows27 Jun 2006
Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information f
35RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - OpenLDAP Denial of Service
CVE-2006-1470—dososx27 Jun 2006
OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service (crash) via an invalid
23RISK
open ↗
Exploit-DB✓ VexDay Proof
CrisoftRicette 1.0 - 'Cookbook.php' Remote File Inclusion
CVE-2006-3343—webappsphp27 Jun 2006
PHP remote file inclusion vulnerability in recipe/cookbook.php in CrisoftRicette 1.0pre15b allows remote attackers to ex
23RISK
open ↗
Exploit-DB✓ VexDay Proof
cPanel 10 - Select.HTML Cross-Site Scripting
CVE-2006-3337—webappsphp26 Jun 2006
Cross-site scripting (XSS) vulnerability in frontend/x/files/select.html in cPanel 10.8.2-CURRENT 118 and earlier allows
23RISK
open ↗
Exploit-DB✓ VexDay Proof
OpenGuestbook 0.5 - 'header.php?title' Cross-Site Scripting
CVE-2006-3295—webappsphp26 Jun 2006
Cross-site scripting (XSS) vulnerability in header.php in Open Guestbook 0.5 allows remote attackers to inject arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
OpenGuestbook 0.5 - 'view.php?offset' SQL Injection
CVE-2006-3296—webappsphp26 Jun 2006
SQL injection vulnerability in view.php in Open Guestbook 0.5 allows remote attackers to execute arbitrary SQL commands
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MVNForum Activatemember 1.0 - Cross-Site Scripting
CVE-2006-3245—webappsphp26 Jun 2006
Multiple cross-site scripting (XSS) vulnerabilities in activatemember in mvnForum 1.0 GA and earlier allow remote attack
23RISK
open ↗
← previouspage 592 / 816next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.