Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,813cataloged exploits
35,788CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,549GitHub PoC 14,290VulnCheck XDB 8,722Nuclei 4,320Metasploit 3,477✓ verified onlyrecentpopularrisk
24,455 exploits
Exploit-DB✓ VexDay Proof
PAFaq - Question Cross-Site Scripting
CVE-2005-2011—webappsphp20 Jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in paFAQ 1.0 Beta 4 allow remote attackers to inject arbitrary web s
23RISK
open ↗
Exploit-DB✓ VexDay Proof
UApplication Ublog Reload 1.0.5 - 'Trackback.asp' Cross-Site Scripting
CVE-2005-2010—webappsasp20 Jun 2005
Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inject arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Claroline E-Learning 1.6 - Remote Hash SQL Injection (2)
CVE-2005-1375—webappsphp19 Jun 2005
Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow re
23RISK
open ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.1/2.2 - Multiple HTTP Response Splitting Vulnerabilities
CVE-2005-1951—webappsphp17 Jun 2005
Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and earlier allow remote attackers to spo
23RISK
open ↗
Exploit-DB✓ VexDay Proof
JBoss 3.x/4.0.2 - HTTP Request Remote Information Disclosure
CVE-2005-2006—remotemultiple17 Jun 2005
JBOSS 3.2.2 through 3.2.7 and 4.0.2 allows remote attackers to obtain sensitive information via a GET request (1) with a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Claroline E-Learning 1.6 - Remote Hash SQL Injection (1)
CVE-2005-1375—webappsphp17 Jun 2005
Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow re
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'send_message.php?l' Cross-Site Scripting
CVE-2005-2044—webappsphp16 Jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Ultimate PHP Board 1.8/1.9 - Weak Password Encryption
CVE-2005-2030—webappsphp16 Jun 2005
Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'subscribe_forum.php?us' Cross-Site Scripting
CVE-2005-2044—webappsphp16 Jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-2044—webappsphp16 Jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - '/inbox/index.php?view' Cross-Site Scripting
CVE-2005-2044—webappsphp16 Jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'content.php?cid' Cross-Site Scripting
CVE-2005-2044—webappsphp16 Jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'Directory.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-2044—webappsphp16 Jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'tile.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-2044—webappsphp16 Jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'browse.php?show_course' Cross-Site Scripting
CVE-2005-2044—webappsphp16 Jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ATutor 1.4.3 - 'contact.php?subject' Cross-Site Scripting
CVE-2005-2044—webappsphp16 Jun 2005
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Cool Cafe Chat 1.2.1 - 'login.asp' SQL Injection
CVE-2005-2035—webappsasp16 Jun 2005
SQL injection vulnerability in login.asp for Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to execute arbitra
23RISK
open ↗
Exploit-DB✓ VexDay Proof
McGallery 1.0/1.1 - Lang Argument File Disclosure
CVE-2005-1998—webappsphp15 Jun 2005
Directory traversal vulnerability in admin.php in McGallery 1.1 allows remote attackers to read arbitrary files via a ..
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Adobe Acrobat 7.0 / Adobe Reader 7.0 - File Existence / File Disclosure
CVE-2005-1306—remotewindows15 Jun 2005
The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of
28RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP Arena 1.1.3 - 'pafiledb.php' Remote Change Password
CVE-2005-2000—webappsphp15 Jun 2005
Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary SQL comma
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Mambo 4.5.2.1 - Fetch Password Hash
CVE-2005-2002—webappsphp15 Jun 2005
SQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers to execute arbitrary SQL
23RISK
open ↗
Exploit-DB✓ VexDay Proof
eXtropia Shopping Cart - 'web_store.cgi' Remote Command Execution
CVE-2004-0734—webappscgi15 Jun 2005
Web_Store.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter.
23RISK
open ↗
Exploit-DB✓ VexDay Proof
AIX 5.2 - 'paginit' Local Privilege Escalation
CVE-2005-2236—localaix14 Jun 2005
Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users
23RISK
open ↗
Exploit-DB✓ VexDay Proof
AIX 5.2 - 'netpmon' Local Privilege Escalation
CVE-2005-0263—localaix14 Jun 2005
Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument.
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4 - launchd Race Condition
CVE-2005-1725—localosx14 Jun 2005
launchd 106 in Apple Mac OS X 10.4.x up to 10.4.1 allows local users to overwrite arbitrary files via a symlink attack o
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ViRobot Advanced Server 2.0 - 'addschup' Remote Cookie
CVE-2005-2041—remotelinux14 Jun 2005
Buffer overflow in addschup in HAURI ViRobot 2.0, and possibly other products, allows remote attackers to execute arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
AIX 5.2 - 'ipl_varyon' Local Privilege Escalation
CVE-2005-0262—localaix14 Jun 2005
Buffer overflow in ipl_varyon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argume
23RISK
open ↗
Exploit-DB✓ VexDay Proof
AIX 5.2 - 'paginit' Local Privilege Escalation
CVE-2005-2232—localaix14 Jun 2005
Buffer overflow in invscout in IBM AIX 5.1.0 through 5.3.0 might allow local users to execute arbitrary code via a long
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Singapore 0.9.11 Beta Image Gallery - 'index.php' Cross-Site Scripting
CVE-2005-1955—webappsphp13 Jun 2005
Cross-site scripting (XSS) vulnerability in index.php in singapore 0.9.11 allows remote attackers to inject arbitrary we
23RISK
open ↗
Exploit-DB✓ VexDay Proof
JamMail 1.8 - Jammail.pl Arbitrary Command Execution
CVE-2005-1959—webappscgi12 Jun 2005
jammail.pl in jamchen JamMail 1.8 allows remote attackers to execute arbitrary commands via shell metacharacters in the
23RISK
open ↗
← previouspage 662 / 816next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.