Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,724cataloged exploits
35,724CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,492GitHub PoC 14,286VulnCheck XDB 8,703Nuclei 4,314Metasploit 3,474✓ verified onlyrecentpopularrisk
24,455 exploits
Exploit-DB✓ VexDay Proof
MD News 1 - 'admin.php' SQL Injection
CVE-2006-1755—webappsphp06 Apr 2006
SQL injection vulnerability in admin.php in MD News 1 allows remote attackers to execute arbitrary SQL commands via the
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SKForum 1.x - 'area.View.action?areaID' Cross-Site Scripting
CVE-2006-1661—webappsphp06 Apr 2006
Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitrar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MAXDEV CMS 1.0.72/1.0.73 - 'PNuserapi.php' SQL Injection
CVE-2006-1676—webappsphp06 Apr 2006
SQL injection vulnerability in the display function in the Topics module for MAXdev MDPro (MD-Pro) 1.0.73 and 1.0.72, an
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SKForum 1.x - 'user.View.action?userID' Cross-Site Scripting
CVE-2006-1661—webappsphp06 Apr 2006
Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitrar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MySmartBB 1.1.2/1.1.3 - Multiple Input Validation Vulnerabilities
CVE-2006-2089—webappsphp04 Apr 2006
Multiple cross-site scripting (XSS) vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to inject arbi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
UltraVNC 1.0.1 - Multiple Remote Error Logging Buffer Overflow Vulnerabilities (2)
CVE-2006-1652—remotewindows04 Apr 2006
Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-ass
50RISK
open ↗
Exploit-DB✓ VexDay Proof
UltraVNC 1.0.1 - Multiple Remote Error Logging Buffer Overflow Vulnerabilities (1)
CVE-2006-1652—remotewindows04 Apr 2006
Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-ass
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5 - Address Bar Spoofing
CVE-2006-1626—remotewindows03 Apr 2006
Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Web-APP.net WebAPP 0.9.x - 'index.cgi' Multiple Cross-Site Scripting Vulnerabilities
CVE-2006-1427—webappscgi03 Apr 2006
Multiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and earlier allow remote attackers to inject arb
23RISK
open ↗
Exploit-DB✓ VexDay Proof
LucidCMS 2.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2006-1634—webappsphp03 Apr 2006
Cross-site scripting (XSS) vulnerability in index.php in LucidCMS 2.0.0 RC4 allows remote attackers to inject arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Bugzero 4.3.1 - 'edit.jsp' Multiple Cross-Site Scripting Vulnerabilities
CVE-2006-1580—webappsjsp03 Apr 2006
Multiple cross-site scripting (XSS) vulnerabilities in Bugzero 4.3.1 and other versions allow remote attackers to inject
23RISK
open ↗
Exploit-DB✓ VexDay Proof
aWebNews 1.2 - 'visview.php?_GET['cid']' SQL Injection
CVE-2006-1613—webappsphp03 Apr 2006
Multiple SQL injection vulnerabilities in aWebNews 1.0 allow remote attackers to execute arbitrary SQL commands via the
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Bugzero 4.3.1 - 'query.jsp?msg' Cross-Site Scripting
CVE-2006-1580—webappsjsp03 Apr 2006
Multiple cross-site scripting (XSS) vulnerabilities in Bugzero 4.3.1 and other versions allow remote attackers to inject
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Web-APP.net WebAPP 0.9.x - '/mods/calendar/index.cgi?vsSD' Cross-Site Scripting
CVE-2006-1427—webappscgi03 Apr 2006
Multiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and earlier allow remote attackers to inject arb
23RISK
open ↗
Exploit-DB✓ VexDay Proof
HP Color LaserJet 2500/4600 Toolbox - Directory Traversal
CVE-2006-1654—remotewindows03 Apr 2006
Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Win
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP 4.x/5.0/5.1 - PHPInfo Large Input Cross-Site Scripting
CVE-2006-0996—remotephp03 Apr 2006
Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject ar
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Total Commander 6.x - 'unacev2.dll' Buffer Overflow (PoC)
CVE-2005-2856—doswindows02 Apr 2006
Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multipl
28RISK
open ↗
Exploit-DB✓ VexDay Proof
ReloadCMS 1.2.5 - Cross-Site Scripting / Remote Code Execution
CVE-2006-1645—webappsphp02 Apr 2006
Cross-site scripting (XSS) vulnerability in Anton Vlasov and Rostislav Gaitkuloff ReloadCMS 1.2.5 and earlier allows rem
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SQuery 4.5 - 'libpath' Remote File Inclusion
CVE-2006-1688—webappsphp01 Apr 2006
Multiple PHP remote file inclusion vulnerabilities in SQuery 4.5 and earlier, as used in products such as Autonomous LAN
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - 'createTextRang' Remote (Metasploit)
CVE-2006-1359—remotewindows01 Apr 2006
Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arb
50RISK
open ↗
Exploit-DB✓ VexDay Proof
ISP Site Man - 'admin_login.asp' SQL Injection
CVE-2006-1586—webappsasp01 Apr 2006
SQL injection vulnerability in admin_login.asp in ISP of Egypt SiteMan allows remote attackers to execute arbitrary SQL
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SiteSearch Indexer 3.5 - 'searchresults.asp' Cross-Site Scripting
CVE-2006-1567—webappsasp31 Mar 2006
Cross-site scripting (XSS) vulnerability in searchresults.asp in SiteSearch Indexer 3.5 and earlier allows remote attack
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Blank'N'Berg 0.2 - Cross-Site Scripting
CVE-2006-1582—webappsphp31 Mar 2006
Cross-site scripting (XSS) vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to inject arbitrary we
23RISK
open ↗
Exploit-DB✓ VexDay Proof
RedCMS 0.1 - 'register.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2006-1568—webappsphp31 Mar 2006
Multiple cross-site scripting (XSS) vulnerabilities in register.php in RedCMS 0.1 allow remote attackers to inject arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
RedCMS 0.1 - 'login.php' Multiple SQL Injections
CVE-2006-1569—webappsphp31 Mar 2006
Multiple SQL injection vulnerabilities in RedCMS 0.1 allow remote attackers to execute arbitrary SQL commands via the (1
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SoftBiz Image Gallery - 'template.php?provided' SQL Injection
CVE-2006-1659—webappsphp31 Mar 2006
Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SoftBiz Image Gallery - 'images.php?cid' SQL Injection
CVE-2006-1659—webappsphp31 Mar 2006
Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SoftBiz Image Gallery - 'suggest_image.php?cid' SQL Injection
CVE-2006-1659—webappsphp31 Mar 2006
Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands
23RISK
open ↗
Exploit-DB✓ VexDay Proof
RedCMS 0.1 - 'profile.php?u' SQL Injection
CVE-2006-1569—webappsphp31 Mar 2006
Multiple SQL injection vulnerabilities in RedCMS 0.1 allow remote attackers to execute arbitrary SQL commands via the (1
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DbbS 2.0 - 'Topics.php' SQL Injection
CVE-2006-1579—webappsphp31 Mar 2006
SQL injection vulnerability in topics.php in Dynamic Bulletin Board System (DbbS) 2.0-alpha and earlier allows remote at
23RISK
open ↗
← previouspage 611 / 816next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.