Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,772cataloged exploits
35,760CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,523GitHub PoC 14,289VulnCheck XDB 8,710Nuclei 4,319Metasploit 3,476✓ verified onlyrecentpopularrisk
24,455 exploits
Exploit-DB✓ VexDay Proof
GNU Mailutils imap4d 0.6 - 'Search' Remote Format String
CVE-2005-2878—remotelinux10 Sep 2005
Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to e
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - SCSI ProcFS Denial of Service
CVE-2005-2800—doslinux09 Sep 2005
Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Zebedee 2.4.1 - Remote Denial of Service
CVE-2005-2904—doslinux09 Sep 2005
Zebedee 2.4.1, when "allowed redirection port" is not set, allows remote attackers to cause a denial of service (applica
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Stylemotion WEB//NEWS 1.4 - 'startup.php' Cookie SQL Injection
CVE-2005-2896—webappsphp08 Sep 2005
SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_us
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Stylemotion WEB//NEWS 1.4 - 'print.php?id' SQL Injection
CVE-2005-2896—webappsphp08 Sep 2005
SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_us
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Stylemotion WEB//NEWS 1.4 - 'news.php' Multiple SQL Injections
CVE-2005-2896—webappsphp08 Sep 2005
SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_us
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PBLang 4.65 Bulletin Board System - 'SetCookie.php' Directory Traversal
CVE-2005-2892—webappsphp07 Sep 2005
Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attacker
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Cisco IOS 12.x - Firewall Authentication Proxy Buffer Overflow
CVE-2005-2841—doshardware07 Sep 2005
Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 an
28RISK
open ↗
Exploit-DB✓ VexDay Proof
BNBT BitTorrent EasyTracker 7.7r3 - Denial of Service
CVE-2004-2029—doswindows06 Sep 2005
The Util_DecodeHTTPAuth function in BNBT BitTorrent Tracker Beta 7.5 Release 2 and earlier allows remote attackers to ca
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Unclassified NewsBoard 1.5.3 - 'Description' HTML Injection
CVE-2005-2855—webappsphp06 Sep 2005
Cross-site scripting (XSS) vulnerability in Unclassified NewsBoard 1.5.3 allows remote attackers to inject arbitrary web
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MAXdev MD-Pro 1.0.73 - Arbitrary File Upload
CVE-2005-2885—webappsphp06 Sep 2005
The Downloads page in MAXdev MD-Pro 1.0.73, and possibly earlier versions, uses an incomplete blacklist to check for dan
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - CSRSS Privilege Escalation (MS05-018)
CVE-2005-0551—localwindows06 Sep 2005
Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000,
28RISK
open ↗
Exploit-DB✓ VexDay Proof
man2web 0.88 - Multiple Remote Command Executions (2)
CVE-2005-2812—webappscgi04 Sep 2005
man2web allows remote attackers to execute arbitrary commands via -P arguments.
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Free SMTP Server 2.2 - Spam Filter
CVE-2005-2857—remotewindows02 Sep 2005
Free SMTP Server 2.2 allows remote attackers to use the server as an open mail relay (spam proxy).
23RISK
open ↗
Exploit-DB✓ VexDay Proof
FileZilla 2.2.15 - FTP Client Hard-Coded Cipher Key
CVE-2005-2898—doswindows02 Sep 2005
NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Us
23RISK
open ↗
Exploit-DB✓ VexDay Proof
WhitSoft Development SlimFTPd 3.17 - Remote Denial of Service
CVE-2005-2850—doswindows02 Sep 2005
SlimFTPd 3.17 allows remote attackers to cause a denial of service (crash) via certain (1) USER and (2) PASS commands, p
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Frox 0.7.18 - Arbitrary Configuration File Access
CVE-2005-2807—locallinux01 Sep 2005
frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, which allows
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Simple PHP Blog 0.4.0 - Multiple Remote s
CVE-2005-2787—webappsphp01 Sep 2005
comment_delete_cgi.php in Simple PHP Blog allows remote attackers to delete arbitrary files via the comment parameter.
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Simple PHP Blog 0.4.0 - Multiple Remote s
CVE-2005-2192—webappsphp01 Sep 2005
SimplePHPBlog 0.4.0 stores password hashes in config/password.txt with insufficient access control, which allows remote
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Simple PHP Blog 0.4.0 - Multiple Remote s
CVE-2005-2733—webappsphp01 Sep 2005
upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which cou
50RISK
open ↗
Exploit-DB✓ VexDay Proof
CMS Made Simple 0.10 - 'Lang.php' Remote File Inclusion
CVE-2005-2846—webappsphp31 Aug 2005
PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to execu
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Indiatimes Messenger 6.0 - Remote Buffer Overflow
CVE-2005-2844—doswindows31 Aug 2005
Buffer overflow in MMClient.exe in Indiatimes Messenger 6.0 allows remote attackers to cause a denial of service (applic
23RISK
open ↗
Exploit-DB✓ VexDay Proof
FlatNuke 2.5.6 - 'ID' Directory Traversal
CVE-2005-2813—webappsphp31 Aug 2005
Directory traversal vulnerability in FlatNuke 2.5.6 and possibly earlier allows remote attackers to read arbitrary files
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DameWare Mini Remote Control 4.0 < 4.9 - Client Agent Remote Overflow
CVE-2005-2842—remotewindows31 Aug 2005
Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary c
28RISK
open ↗
Exploit-DB✓ VexDay Proof
FlatNuke 2.5.6 - 'USR' Cross-Site Scripting
CVE-2005-2814—webappsphp31 Aug 2005
Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTM
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Savant Web Server 3.1 - Remote Buffer Overflow (2)
CVE-2002-1120—remotewindows30 Aug 2005
Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP G
50RISK
open ↗
Exploit-DB✓ VexDay Proof
phpLDAPadmin 0.9.6/0.9.7 - 'welcome.php' Arbitrary File Inclusion
CVE-2005-2792—webappsphp30 Aug 2005
Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitra
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Adobe Version Cue 1.0/1.0.1 (OSX) - '-lib' Local Privilege Escalation
CVE-2005-1843—localosx30 Aug 2005
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with V
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Adobe Version Cue 1.0/1.0.1 (OSX) - Local Privilege Escalation
CVE-2005-1842—localosx30 Aug 2005
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with V
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Gopher 3.0.9 - '+VIEWS' Client-Side Buffer Overflow
CVE-2005-2772—locallinux30 Aug 2005
Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to e
28RISK
open ↗
← previouspage 653 / 816next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.