Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,772cataloged exploits
35,760CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,523GitHub PoC 14,289VulnCheck XDB 8,710Nuclei 4,319Metasploit 3,476✓ verified onlyrecentpopularrisk
24,455 exploits
Exploit-DB✓ VexDay Proof
vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/language.php?goto' Cross-Site Scripting
CVE-2005-3020—webappsphp19 Sep 2005
Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/user.php' Multiple SQL Injections
CVE-2005-3019—webappsphp19 Sep 2005
Multiple SQL injection vulnerabilities in vBulletin before 3.0.9 allow remote attackers to execute arbitrary SQL command
23RISK
open ↗
Exploit-DB✓ VexDay Proof
vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/index.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-3020—webappsphp19 Sep 2005
Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MCCS (Multi-Computer Control Systems) Command - Denial of Service
CVE-2005-3002—doswindows19 Sep 2005
Multi-Computer Control System (MCCS) 1.0 allows remote attackers to cause a denial of service via a malformed UDP packet
23RISK
open ↗
Exploit-DB✓ VexDay Proof
CuteNews 1.4.0 - Shell Injection / Remote Command Execution
CVE-2005-3010—webappsphp17 Sep 2005
Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php in CuteNews 1.4.0 and ea
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Safari 1.x/2.0.1 - Data URI Memory Corruption
CVE-2005-3018—dososx17 Sep 2005
Apple Safari allows remote attackers to cause a denial of service (application crash) via a crafted data:// URL.
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Fastream NETFile Web Server 7.1.2 - 'HEAD' Denial of Service
CVE-2004-2534—doswindows16 Sep 2005
Fastream NETFile Server 7.1.2 does not properly handle keep-alive connection timeouts and does not close the connection
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DeluxeBB 1.0 - 'misc.php' SQL Injection
CVE-2005-2989—webappsphp15 Sep 2005
Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL command
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DeluxeBB 1.0 - 'forums.php' SQL Injection
CVE-2005-2989—webappsphp15 Sep 2005
Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL command
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DeluxeBB 1.0 - 'pm.php' SQL Injection
CVE-2005-2989—webappsphp15 Sep 2005
Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL command
23RISK
open ↗
Exploit-DB✓ VexDay Proof
phpWebSite 0.10.0 - 'module' SQL Injection
CVE-2008-0092—webappsphp15 Sep 2005
Cross-site scripting (XSS) vulnerability in index.php in the search module in Appalachian State University phpWebSite 1.
23RISK
open ↗
Exploit-DB✓ VexDay Proof
phpWebSite 0.10.0 - 'module' SQL Injection
CVE-2005-4792—webappsphp15 Sep 2005
SQL injection vulnerability in index.php in Appalachian State University phpWebSite 0.10.1 and earlier allows remote att
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DeluxeBB 1.0 - 'newpost.php' SQL Injection
CVE-2005-2989—webappsphp15 Sep 2005
Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL command
23RISK
open ↗
Exploit-DB✓ VexDay Proof
AEwebworks aeDating 3.2/4.0 - 'search_result.php' SQL Injection
CVE-2005-2985—webappsphp15 Sep 2005
SQL injection vulnerability in search_result.php in AEwebworks aeDating Script 4.0 and earlier allows remote attackers t
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DeluxeBB 1.0 - 'topic.php' SQL Injection
CVE-2005-2989—webappsphp15 Sep 2005
Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL command
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Wireless Tools 26 (IWConfig) - Local Privilege Escalation
CVE-2003-0947—locallinux14 Sep 2005
Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environm
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MIVA Merchant 5 - Merchant.MVC Cross-Site Scripting
CVE-2005-2953—webappscgi14 Sep 2005
Cross-site scripting (XSS) vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Noah's Classifieds 1.2/1.3 - 'index.php' SQL Injection
CVE-2005-2979—webappsphp14 Sep 2005
SQL injection vulnerability in index.php in phpoutsourcing Noah's classifieds allows remote attackers to execute arbitra
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Noah's Classifieds 1.3 - 'index.php' Cross-Site Scripting
CVE-2005-2980—webappsphp14 Sep 2005
Cross-site scripting (XSS) vulnerability in index.php in phpoutsourcing Noah's classifieds 1.3 allows remote attackers t
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Wireless Tools 26 (IWConfig) - Local Privilege Escalation
CVE-2003-0948—locallinux14 Sep 2005
Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable.
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ATutor 1.5.1 - Chat Logs Remote Information Disclosure
CVE-2005-2956—webappsphp14 Sep 2005
ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient ac
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ATutor 1.5.1 - 'password_reminder.php' SQL Injection
CVE-2005-2954—webappsphp14 Sep 2005
SQL injection vulnerability in password_reminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
TWiki TWikiUsers - Arbitrary Command Execution
CVE-2005-2877—webappsphp14 Sep 2005
The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary co
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Linksys WRT54G < 4.20.7 / WRT54GS < 1.05.2 - 'apply.cgi' Remote Buffer Overflow (Metasploit)
CVE-2005-2799—remotecgi13 Sep 2005
Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Subscribe Me Pro 2.44 - S.pl Directory Traversal
CVE-2005-2952—webappsphp13 Sep 2005
Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
AzDGDatingLite 2.1.3 - Remote Code Execution
CVE-2005-2951—webappsphp13 Sep 2005
Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows rem
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Land Down Under 800/801 - 'auth.php?m' SQL Injection
CVE-2005-4821—webappsphp13 Sep 2005
Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Land Down Under 800/801 - 'plug.php?e' SQL Injection
CVE-2005-4821—webappsphp13 Sep 2005
Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Alt-N WebAdmin 2.0.4 - USER Buffer Overflow (Metasploit)
CVE-2003-0471—remotewindows11 Sep 2005
Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to We
50RISK
open ↗
Exploit-DB✓ VexDay Proof
PhpTagCool 1.0.3 - SQL Injection
CVE-2005-4724—webappsphp11 Sep 2005
SQL injection vulnerability in post.php in PhpTagCool 1.0.3 allows remote attackers to execute arbitrary SQL commands vi
23RISK
open ↗
← previouspage 652 / 816next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.