Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,772cataloged exploits

35,760CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,455Referência 22,523GitHub PoC 14,289VulnCheck XDB 8,710Nuclei 4,319Metasploit 3,476✓ verified onlyrecent popular risk

24,455 exploits

Exploit-DB✓ VexDay Proof

WIDCOMM Bluetooth Software < 3.0 - Remote Buffer Overflow

CVE-2005-4417—remotewindows04 Dec 2005

The default configuration of Widcomm Bluetooth for Windows (BTW) 4.0.1.1500 and earlier, as installed on Belkin Bluetoot

23RISK

open ↗

Exploit-DB✓ VexDay Proof

DoceboLms 2.0.4 - 'connector.php' Arbitrary File Upload

CVE-2005-4095—webappsphp04 Dec 2005

Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers

23RISK

open ↗

Exploit-DB✓ VexDay Proof

ASPS Shopping Cart Lite 2.1/Professional 2.9 d - 'bsearch.asp?b_search' Cross-Site Scripting

CVE-2005-4003—webappsasp03 Dec 2005

Multiple SQL injection vulnerabilities in Absolute Shopping Package Solutions (ASPS) Shopping Cart Professional 2.9d and

23RISK

open ↗

Exploit-DB✓ VexDay Proof

sobexsrv 1.0.0_pre3 Bluetooth - 'syslog()' Remote Format String

CVE-2005-3995—remotelinux03 Dec 2005

Format string vulnerability in the dosyslog function in the OBEX server (obexsrv.c) for Sobexsrv before 1.0.0-pre4, when

23RISK

open ↗

Exploit-DB✓ VexDay Proof

ASPS Shopping Cart Lite 2.1/Professional 2.9 d - 'adv_search.asp?srch_product_name' Cross-Site Scripting

CVE-2005-4003—webappsasp03 Dec 2005

Multiple SQL injection vulnerabilities in Absolute Shopping Package Solutions (ASPS) Shopping Cart Professional 2.9d and

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Solupress News 1.0 - 'search.asp' Cross-Site Scripting

CVE-2005-3998—webappsasp03 Dec 2005

Cross-site scripting (XSS) vulnerability in search.asp in Solupress News 1.0 and earlier allows remote attackers to inje

23RISK

open ↗

Exploit-DB✓ VexDay Proof

PHP-Fusion 6.0.109 - 'messages.php' SQL Injection

CVE-2005-4005—webappsphp03 Dec 2005

SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information an

23RISK

open ↗

Exploit-DB✓ VexDay Proof

SiteBeater News 4.0 - 'Archive.asp' Cross-Site Scripting

CVE-2005-4000—webappsasp03 Dec 2005

Cross-site scripting (XSS) vulnerability in archive.asp in SiteBeater News System 4.00 and earlier allows remote attacke

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Alisveristr E-Commerce Login - Multiple SQL Injections

CVE-2005-4081—webappsphp03 Dec 2005

Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and pos

23RISK

open ↗

Exploit-DB✓ VexDay Proof

PHPYellowTM 5.33 - 'print_me.php?ckey' SQL Injection

CVE-2005-4001—webappsphp03 Dec 2005

Multiple SQL injection vulnerabilities in phpYellowTM Pro Edition and Lite Edition 5.33 allow remote attackers to execut

23RISK

open ↗

Exploit-DB✓ VexDay Proof

PHPYellowTM 5.33 - 'search_result.php?haystack' SQL Injection

CVE-2005-4001—webappsphp03 Dec 2005

Multiple SQL injection vulnerabilities in phpYellowTM Pro Edition and Lite Edition 5.33 allow remote attackers to execut

23RISK

open ↗

Exploit-DB✓ VexDay Proof

WinEggDropShell 1.7 - Multiple Remote Stack Overflows (PoC)

CVE-2005-3992—doswindows02 Dec 2005

Multiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote attackers to execute arbitrary

23RISK

open ↗

Exploit-DB✓ VexDay Proof

NetClassifieds Standard 1.9/Professional 1.5/Premium 1.0 - 'ViewItem.php?ItemNum' SQL Injection

CVE-2005-3978—webappsphp02 Dec 2005

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edi

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Zen Cart 1.2.6d - 'password_forgotten.php' SQL Injection

CVE-2005-3996—webappsphp02 Dec 2005

SQL injection vulnerability in admin/password_forgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to ex

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Java Search Engine 0.9.34 - search.jsp Cross-Site Scripting

CVE-2005-3966—webappsjsp02 Dec 2005

Cross-site scripting (XSS) vulnerability in search.jsp in Java Search Engine (JSE) 0.9.34 allows remote attackers to inj

23RISK

open ↗

Exploit-DB✓ VexDay Proof

NetClassifieds Standard 1.9/Professional 1.5/Premium 1.0 - 'gallery.php?CatID' SQL Injection

CVE-2005-3978—webappsphp02 Dec 2005

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edi

23RISK

open ↗

Exploit-DB✓ VexDay Proof

DotClear 1.2.1/1.2.2 - 'Session.php' SQL Injection

CVE-2005-3963—webappsphp01 Dec 2005

SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL com

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Extreme Corporate 6.0 - 'Extremesearch.php' Cross-Site Scripting

CVE-2005-3972—webappsphp01 Dec 2005

Cross-site scripting (XSS) vulnerability in extremesearch.php in Extreme Search Corporate Edition 6.0 and earlier allows

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - DTC Remote (MS05-051) (2)

CVE-2005-1979—remotewindows01 Dec 2005

Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC servic

35RISK

open ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows XP/2000/2003 - CreateRemoteThread Local Denial of Service

CVE-2005-3981—doswindows01 Dec 2005

NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000, and 2003 allows local users to kill a

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - DTC Remote (MS05-051) (2)

CVE-2005-1978—remotewindows01 Dec 2005

COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attac

35RISK

open ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - DTC Remote (MS05-051) (2)

CVE-2005-2119—remotewindows01 Dec 2005

The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) alloca

35RISK

open ↗

Exploit-DB✓ VexDay Proof

PHPMyChat 0.14.6 - 'start_page.css.php?medium' Cross-Site Scripting

CVE-2005-3991—webappsphp01 Dec 2005

Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbitrary web s

23RISK

open ↗

Exploit-DB✓ VexDay Proof

PHPMyChat 0.14.6 - 'style.css.php?medium' Cross-Site Scripting

CVE-2005-3991—webappsphp01 Dec 2005

Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbitrary web s

23RISK

open ↗

Exploit-DB✓ VexDay Proof

WebCalendar 1.0.1 - 'Layers_Toggle.php' HTTP Response Splitting

CVE-2005-3982—webappsphp01 Dec 2005

CRLF injection vulnerability in layers_toggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP heade

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - DTC Remote (MS05-051) (2)

CVE-2005-1980—remotewindows01 Dec 2005

Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC servic

35RISK

open ↗

Exploit-DB✓ VexDay Proof

PHPMyChat 0.14.6 - 'users_popupL.php?From' Cross-Site Scripting

CVE-2005-3991—webappsphp01 Dec 2005

Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbitrary web s

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Lore 1.5.4/1.5.6 - 'article.php' SQL Injection

CVE-2005-3988—webappsphp01 Dec 2005

SQL injection vulnerability in article.php in Pineapple Technologies Lore 1.5.4 allows remote attackers to execute arbit

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Edgewall Software Trac 0.9 Ticket Query Module - SQL Injection

CVE-2005-3980—webappsphp01 Dec 2005

SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers

23RISK

open ↗

Exploit-DB✓ VexDay Proof

SoftBiz FAQ 1.1 - 'refer_friend.php?id' SQL Injection

CVE-2005-3938—webappsphp30 Nov 2005

SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL comman

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.