Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,724cataloged exploits

35,724CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,455Referência 22,492GitHub PoC 14,286VulnCheck XDB 8,703Nuclei 4,314Metasploit 3,474✓ verified onlyrecent popular risk

24,455 exploits

Exploit-DB✓ VexDay Proof

Invision Power Board (IP.Board) 2.0.4 - Mail Action 'MID' Cross-Site Scripting

CVE-2006-1326—webappsphp17 Mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbit

23RISK

Exploit-DB✓ VexDay Proof

Invision Power Board (IP.Board) 2.0.4 - Calendar Action Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1326—webappsphp17 Mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbit

23RISK

Exploit-DB✓ VexDay Proof

Invision Power Board (IP.Board) 2.0.4 - Help Action 'HID' Cross-Site Scripting

CVE-2006-1326—webappsphp17 Mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbit

23RISK

Exploit-DB✓ VexDay Proof

Invision Power Board (IP.Board) 2.0.4 - Search Action Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1326—webappsphp17 Mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbit

23RISK

Exploit-DB✓ VexDay Proof

Invision Power Board (IP.Board) 2.0.4 - 'index.php?st' Cross-Site Scripting

CVE-2006-1326—webappsphp17 Mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbit

23RISK

Exploit-DB✓ VexDay Proof

Invision Power Board (IP.Board) 2.0.4 - Print Action 't' Cross-Site Scripting

CVE-2006-1326—webappsphp17 Mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbit

23RISK

Exploit-DB✓ VexDay Proof

Oxynews - 'index.php' SQL Injection

CVE-2006-1271—webappsphp16 Mar 2006

SQL injection vulnerability in index.php in OxyNews allows remote attackers to execute arbitrary SQL commands via the ox

23RISK

Exploit-DB✓ VexDay Proof

phpMyAdmin 2.8.1 - Set_Theme Cross-Site Scripting

CVE-2006-1258—webappsphp16 Mar 2006

Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.1 allows remote attackers to inject arbitrary web script or

23RISK

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 5.0.1 - Script Action Handler Buffer Overflow

CVE-2006-1245—doswindows16 Mar 2006

Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote a

35RISK

Exploit-DB

Zoo 2.10 - Parse.c Local Buffer Overflow

CVE-2006-1269—doslinux16 Mar 2006

Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long

23RISK

Exploit-DB✓ VexDay Proof

DSDownload 1.0 - Multiple SQL Injections

CVE-2006-1232—webappsphp15 Mar 2006

Multiple SQL injection vulnerabilities in DSDownload 1.0, with magic_quotes_gpc disabled, allow remote attackers to exec

23RISK

Exploit-DB✓ VexDay Proof

GGZ Gaming Zone 0.0.12 - Multiple Denial of Service Vulnerabilities

CVE-2006-1275—dosmultiple14 Mar 2006

GGZ Gaming Zone 0.0.12 allows remote attackers to cause a denial of service (client disconnect) via inputs that produce

23RISK

Exploit-DB✓ VexDay Proof

DSCounter 1.2 - 'index.php' SQL Injection

CVE-2006-1234—webappsphp14 Mar 2006

SQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc disabled, allows remote attackers to ex

23RISK

Exploit-DB✓ VexDay Proof

Microsoft Windows - Telephony Service Command Execution (MS05-040)

CVE-2005-0058—localwindows14 Mar 2006

Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windo

35RISK

Exploit-DB✓ VexDay Proof

ENet - Multiple Denial of Service Vulnerabilities

CVE-2006-1194—dosmultiple13 Mar 2006

Integer signedness error in the enet_protocol_handle_incoming_commands function in protocol.c for ENet library CVS versi

23RISK

Exploit-DB✓ VexDay Proof

Apple Mac OSX 10.4.5 Mail.app - Real Name Buffer Overflow

CVE-2006-0396—remoteosx13 Mar 2006

Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote a

28RISK

Exploit-DB✓ VexDay Proof

Firebird 1.5 - Inet_Server Local Buffer Overflow

CVE-2006-1240—doswindows13 Mar 2006

Buffer overflow in inet_server.cpp in (1) fb_inet_server and (2) fbserver in Firebird 1.5.2.4731 allows local users to g

23RISK

Exploit-DB✓ VexDay Proof

Ubuntu 5.10 Installer - Password Disclosure

CVE-2006-1183—locallinux12 Mar 2006

The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the

23RISK

Exploit-DB✓ VexDay Proof

Jupiter CMS 1.1.5 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1223—webappsphp11 Mar 2006

Cross-site scripting (XSS) vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject

23RISK

Exploit-DB✓ VexDay Proof

vCard 2.8/2.9 - 'create.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1230—webappsphp11 Mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in create.php in vCard 2.x allow remote attackers to inject arbitrar

23RISK

Exploit-DB✓ VexDay Proof

Dropbear / OpenSSH Server - 'MAX_UNAUTH_CLIENTS' Denial of Service

CVE-2006-1206—dosmultiple10 Mar 2006

Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating s

28RISK

Exploit-DB✓ VexDay Proof

QwikiWiki 1.4/1.5 - 'login.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1196—webappsphp10 Mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web scri

23RISK

Exploit-DB✓ VexDay Proof

QwikiWiki 1.4/1.5 - 'pageindex.php?help' Cross-Site Scripting

CVE-2006-1196—webappsphp10 Mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web scri

23RISK

Exploit-DB✓ VexDay Proof

QwikiWiki 1.4/1.5 - 'recentchanges.php?help' Cross-Site Scripting

CVE-2006-1196—webappsphp10 Mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web scri

23RISK

Exploit-DB✓ VexDay Proof

Guppy 4.5.11 - Delete Databases Remote Denial of Service

CVE-2006-1224—dosphp10 Mar 2006

Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via

23RISK

Exploit-DB✓ VexDay Proof

WMNews - 'wmcomments.php?ArtID' Cross-Site Scripting

CVE-2006-1233—webappsphp10 Mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in WMNews allow remote attackers to inject arbitrary web script or H

23RISK

Exploit-DB✓ VexDay Proof

Core News 2.0.1 - 'index.php' Remote Code Execution

CVE-2006-1212—webappsphp10 Mar 2006

Unspecified vulnerability in index.php in Core CoreNews 2.0.1 allows remote attackers to execute arbitrary commands via

23RISK

Exploit-DB✓ VexDay Proof

WMNews - 'wmview.php?ArtCat' Cross-Site Scripting

CVE-2006-1233—webappsphp10 Mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in WMNews allow remote attackers to inject arbitrary web script or H

23RISK

Exploit-DB✓ VexDay Proof

QwikiWiki 1.4/1.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1196—webappsphp10 Mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web scri

23RISK

Exploit-DB✓ VexDay Proof

WMNews - 'footer.php?ctrrowcol' Cross-Site Scripting

CVE-2006-1233—webappsphp10 Mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in WMNews allow remote attackers to inject arbitrary web script or H

23RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.