Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,813cataloged exploits
35,788CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,455Referência 22,549GitHub PoC 14,290VulnCheck XDB 8,722Nuclei 4,320Metasploit 3,477✓ verified onlyrecentpopularrisk
24,455 exploits
Exploit-DB✓ VexDay Proof
Microsoft Jet Database - 'msjet40.dll' Code Execution (Reverse Shell) (2)
CVE-2005-0944—localwindows22 Apr 2005
Unknown vulnerability in Microsoft Jet DB engine (msjet40.dll) 4.00.8618.0, related to insufficient data validation, all
35RISK
open ↗
Exploit-DB✓ VexDay Proof
RaidenFTPd 2.4 - Unauthorized File Access
CVE-2005-1480—remotewindows21 Apr 2005
Directory traversal vulnerability in RaidenFTPD before 2.4.2241 allows remote attackers to read arbitrary files via a ".
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DUportal 3.1.2 - 'channel.asp?iChannel' SQL Injection
CVE-2005-1236—webappsasp20 Apr 2005
Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Logwatch 2.6 Secure Script - Denial of Service
CVE-2005-1061—doslinux20 Apr 2005
The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via ce
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Neslo Desktop Rover 3.0 - Malformed Packet Remote Denial of Service
CVE-2005-1204—dosmultiple20 Apr 2005
Desktop Rover 3.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application cras
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP Labs - '.proFile' Dir URI Cross-Site Scripting
CVE-2005-1233—webappsphp20 Apr 2005
Cross-site scripting (XSS) vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary we
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DUportal 3.1.2 - 'inc_poll_voting.asp?DAT_PARENT' SQL Injection
CVE-2005-1236—webappsasp20 Apr 2005
Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP Labs - '.proFile' File URI Cross-Site Scripting
CVE-2005-1233—webappsphp20 Apr 2005
Cross-site scripting (XSS) vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary we
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Netref 4.2 - 'Cat_for_gen.php' Remote PHP Script Injection
CVE-2005-1222—webappsphp20 Apr 2005
cat_for_gen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the ad_direct pa
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DUportal Pro 3.4 - 'detail.asp' Multiple SQL Injections
CVE-2005-1224—webappsasp20 Apr 2005
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL comman
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DUportal 3.1.2 - 'type.asp?iCat' SQL Injection
CVE-2005-1236—webappsasp20 Apr 2005
Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DUportal Pro 3.4 - 'inc_vote.asp' Multiple SQL Injections
CVE-2005-1224—webappsasp20 Apr 2005
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL comman
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DUportal Pro 3.4 - 'result.asp' Multiple SQL Injections
CVE-2005-1224—webappsasp20 Apr 2005
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL comman
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DUportal Pro 3.4 - 'search.asp?iChannel' SQL Injection
CVE-2005-1224—webappsasp20 Apr 2005
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL comman
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DUportal Pro 3.4 - 'cat.asp' Multiple SQL Injections
CVE-2005-1224—webappsasp20 Apr 2005
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL comman
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ECommPro 3.0 - 'Admin/login.asp' SQL Injection
CVE-2005-1412—webappsasp20 Apr 2005
SQL injection vulnerability in verify.asp for Ecomm Professional Guestbook 3.x allows remote attackers to execute arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DUportal Pro 3.4 - 'default.asp' Multiple SQL Injections
CVE-2005-1224—webappsasp20 Apr 2005
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL comman
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PMSoftware Simple Web Server 1.0 - Remote Stack Overflow
CVE-2005-1173—remotewindows20 Apr 2005
Buffer overflow in PMSoftware Simple Web Server 1.0 allows remote attackers to execute arbitrary code via a long GET req
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Multiple OS (Win32/Aix/Cisco) - Crafted ICMP Messages Denial of Service (MS05-019)
CVE-2004-0790—dosmultiple20 Apr 2005
Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via
45RISK
open ↗
Exploit-DB✓ VexDay Proof
Ocean12 Calendar Manager 1.0 - Admin Form SQL Injection
CVE-2005-1223—webappsphp20 Apr 2005
Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DUportal 3.1.2 - 'inc_rating.asp' Multiple SQL Injections
CVE-2005-1236—webappsasp20 Apr 2005
Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
CityPost PHP LNKX 52.0 - 'message.php' Cross-Site Scripting
CVE-2005-4670—webappsphp19 Apr 2005
Cross-site scripting (XSS) vulnerability in message.php in CityPost Automated Link Exchange (LNKX) allows remote attacke
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows 98/2000 Explorer - Preview Pane Script Injection
CVE-2005-1191—remotewindows19 Apr 2005
The Web View DLL (webvw.dll), as used in Windows Explorer on Windows 2000 systems, does not properly filter an apostroph
28RISK
open ↗
Exploit-DB✓ VexDay Proof
CityPost Simple PHP Upload - 'Simple-upload-53.php' Cross-Site Scripting
CVE-2005-4671—webappsphp19 Apr 2005
Cross-site scripting (XSS) vulnerability in simple-upload-53.php in CityPost Simple PHP Upload 5.3 allows remote attacke
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Exchange Server - Remote Code Execution (MS05-021)
CVE-2005-0560—remotewindows19 Apr 2005
Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server
35RISK
open ↗
Exploit-DB✓ VexDay Proof
MVNForum 1.0 - Search Cross-Site Scripting
CVE-2005-1183—webappsphp18 Apr 2005
Cross-site scripting (XSS) vulnerability in mvnForum 1.0 RC4 allows remote attackers to inject arbitrary web script or H
23RISK
open ↗
Exploit-DB✓ VexDay Proof
eGroupWare 1.0 - '/tts/index.php?filter' SQL Injection
CVE-2005-1203—webappsphp18 Apr 2005
Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote attackers to execute arb
23RISK
open ↗
Exploit-DB✓ VexDay Proof
eGroupWare 1.0 - '/sitemgr-site/index.php?category_id' Cross-Site Scripting
CVE-2005-1202—webappsphp18 Apr 2005
Multiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arbi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
eGroupWare 1.0 - 'index.php?cats_app' SQL Injection
CVE-2005-1203—webappsphp18 Apr 2005
Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote attackers to execute arb
23RISK
open ↗
Exploit-DB✓ VexDay Proof
eGroupWare 1.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-1202—webappsphp18 Apr 2005
Multiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arbi
23RISK
open ↗
← previouspage 671 / 816next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.