Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,900cataloged exploits
35,840CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,458Referência 22,600GitHub PoC 14,323VulnCheck XDB 8,722Nuclei 4,320Metasploit 3,477✓ verified onlyrecentpopularrisk
24,458 exploits
Exploit-DB✓ VexDay Proof
IBM Tivoli Directory Server 3.2.2/4.1 - LDACGI Directory Traversal
CVE-2004-2526—remotewindows02 Aug 2004
Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers t
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Citadel/UX - Remote Denial of Service (PoC)
CVE-2004-1705—doslinux02 Aug 2004
Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username.
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apache - Arbitrary Long HTTP Headers Denial of Service
CVE-2004-0493—doslinux02 Aug 2004
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memor
45RISK
open ↗
Exploit-DB✓ VexDay Proof
SoX - Local Buffer Overflow
CVE-2004-0557—locallinux01 Aug 2004
Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allo
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows XP - Task Scheduler '.job' Universal (MS04-022)
CVE-2004-0212—localwindows31 Jul 2004
Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, al
35RISK
open ↗
Exploit-DB✓ VexDay Proof
Fusionphp Fusion News 3.3/3.6 - Administrator Command Execution
CVE-2004-1703—webappsphp30 Jul 2004
Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that co
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle9i Database - Default Library Directory Privilege Escalation
CVE-2004-1707—localunix30 Jul 2004
The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default pa
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PowerPortal 1.1/1.3 - Private Message HTML Injection
CVE-2004-2514—webappsphp30 Jul 2004
Cross-site scripting (XSS) vulnerability in modules/private_messages/index.php in PowerPortal 1.x allows remote attacker
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Jaws 0.2/0.3/0.4 - 'ControlPanel.php' SQL Injection
CVE-2004-2067—webappsphp29 Jul 2004
SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attack
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Verylost LostBook 1.1 - Message Entry HTML Injection
CVE-2004-2064—webappsphp29 Jul 2004
Cross-site scripting (XSS) vulnerability in lostBook 1.1 and earlier allows remote attackers to inject arbitrary web scr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX - Panther Internet Connect Privilege Escalation
CVE-2004-0824—localosx28 Jul 2004
PPPDialer for Mac OS X 10.2.8 through 10.3.5 allows local users to overwrite system files via a symlink attack on PPPDia
23RISK
open ↗
Exploit-DB✓ VexDay Proof
AntiBoard 0.6/0.7 - 'antiboard.php?feedback' Cross-Site Scripting
CVE-2004-2063—webappsphp28 Jul 2004
Cross-site scripting (XSS) vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to inje
23RISK
open ↗
Exploit-DB✓ VexDay Proof
AntiBoard 0.6/0.7 - 'antiboard.php' Multiple SQL Injections
CVE-2004-2062—webappsphp28 Jul 2004
SQL injection vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to execute arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Phorum 5.0.7 - Search Script Cross-Site Scripting
CVE-2004-2242—webappsphp28 Jul 2004
Cross-site scripting (XSS) vulnerability in search.php in Phorum, possibly 5.0.7 beta and earlier, allows remote attacke
23RISK
open ↗
Exploit-DB✓ VexDay Proof
RiSearch 0.99 /RiSearch Pro 3.2.6 - show.pl Arbitrary File Access
CVE-2004-2061—remotecgi27 Jul 2004
RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Opera Web Browser 7.53 - Location Replace URI Obfuscation
CVE-2004-2491—remotemultiple27 Jul 2004
A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been l
23RISK
open ↗
Exploit-DB✓ VexDay Proof
RiSearch 0.99 /RiSearch Pro 3.2.6 - show.pl Open Proxy Relay
CVE-2004-2061—remotecgi27 Jul 2004
RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
XLineSoft ASPRunner 1.0/2.x - '[TABLE]_list.asp?searchFor' Cross-Site Scripting
CVE-2004-2059—webappsasp26 Jul 2004
Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or
23RISK
open ↗
Exploit-DB✓ VexDay Proof
XLineSoft ASPRunner 1.0/2.x - '[TABLE-NAME]_edit.asp?SQL' Cross-Site Scripting
CVE-2004-2059—webappsasp26 Jul 2004
Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Mozilla Browser 0.8/0.9/1.x - Refresh Security Property Spoofing
CVE-2004-0763—remotelinux26 Jul 2004
Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Jav
23RISK
open ↗
Exploit-DB✓ VexDay Proof
XLineSoft ASPRunner 1.0/2.x - '[TABLE-NAME]_search.asp?Typeen' Cross-Site Scripting
CVE-2004-2059—webappsasp26 Jul 2004
Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or
23RISK
open ↗
Exploit-DB✓ VexDay Proof
XLineSoft ASPRunner 1.0/2.x - 'export.asp?SQL' Cross-Site Scripting
CVE-2004-2059—webappsasp26 Jul 2004
Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or
23RISK
open ↗
Exploit-DB✓ VexDay Proof
XLineSoft ASPRunner 1.0/2.x - Database Direct Request Information Disclosure
CVE-2004-2060—webappsasp26 Jul 2004
ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows SMS 2.0 - Denial of Service
CVE-2004-0728—doswindows24 Jul 2004
The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to
28RISK
open ↗
Exploit-DB✓ VexDay Proof
EasyIns Stadtportal 4.0 - 'Site' Remote File Inclusion
CVE-2004-2053—webappsphp24 Jul 2004
PHP remote file inclusion vulnerability in index.php in EasyIns Stadtportal 4 allows remote attackers to execute arbitra
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - Denial of Service
CVE-2004-0484—doswindows23 Jul 2004
mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a ta
28RISK
open ↗
Exploit-DB✓ VexDay Proof
EasyWeb 1.0 FileManager Module - Directory Traversal
CVE-2004-2047—webappsphp23 Jul 2004
Directory traversal vulnerability in EasyWeb FileManager 1.0 RC-1 for PostNuke allows remote attackers to retrieve arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Lexmark Multiple HTTP Servers - Denial of Service
CVE-2004-0740—doshardware22 Jul 2004
The HTTP server in Lexmark T522 and possibly other models allows remote attackers to cause a denial of service (server c
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Conceptronic CADSLR1 Router - Denial of Service
CVE-2004-2045—doshardware22 Jul 2004
The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apache - Arbitrary Long HTTP Headers (Denial of Service)
CVE-2004-0493—dosmultiple22 Jul 2004
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memor
45RISK
open ↗
← previouspage 697 / 816next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.