Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

78,794cataloged exploits

36,057CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,459Referência 22,721GitHub PoC 14,946VulnCheck XDB 8,829Nuclei 4,350Metasploit 3,489✓ verified onlyrecent popular risk

4,350 exploits

Nucleihigh

Joomla! Component BeeHeard 1.0 - Local File Inclusion

CVE-2010-1952—

Directory traversal vulnerability in the BeeHeard (com_beeheard) and BeeHeard Lite (com_beeheardlite) component 1.0 for

43RISK

open ↗

Nucleihigh

Joomla! Component iNetLanka Multiple Map 1.0 - Local File Inclusion

CVE-2010-1953—

Directory traversal vulnerability in the iNetLanka Multiple Map (com_multimap) component 1.0 for Joomla! allows remote a

43RISK

open ↗

Nucleihigh

Joomla! Component iNetLanka Multiple root 1.0 - Local File Inclusion

CVE-2010-1954—

Directory traversal vulnerability in the iNetLanka Multiple root (com_multiroot) component 1.0 and 1.1 for Joomla! allow

43RISK

open ↗

Nucleihigh

Joomla! Component Deluxe Blog Factory 1.1.2 - Local File Inclusion

CVE-2010-1955—

Directory traversal vulnerability in the Deluxe Blog Factory (com_blogfactory) component 1.1.2 for Joomla! allows remote

43RISK

open ↗

Nucleihigh

Joomla! Component Gadget Factory 1.0.0 - Local File Inclusion

CVE-2010-1956—

Directory traversal vulnerability in the Gadget Factory (com_gadgetfactory) component 1.0.0 and 1.5.0 for Joomla! allows

43RISK

open ↗

Nucleihigh

Joomla! Component Joomla! Flickr 1.0 - Local File Inclusion

CVE-2010-1980—

Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr (com_joomlaflickr) component 1.0.3 for Joomla

43RISK

open ↗

Nucleimedium

Joomla! Component Fabrik 2.0 - Local File Inclusion

CVE-2010-1981—

Directory traversal vulnerability in the Fabrik (com_fabrik) component 2.0 for Joomla! allows remote attackers to read a

43RISK

open ↗

Nucleimedium

Joomla! Component JA Voice 2.0 - Local File Inclusion

CVE-2010-1982—

Directory traversal vulnerability in the JA Voice (com_javoice) component 2.0 for Joomla! allows remote attackers to rea

38RISK

open ↗

Nucleimedium

Joomla! Component simpledownload <=0.9.5 - Arbitrary File Retrieval

CVE-2010-2122—

Directory traversal vulnerability in the SimpleDownload (com_simpledownload) component before 0.9.6 for Joomla! allows r

43RISK

open ↗

Nucleihigh

Joomla! Component Visites 1.1 - MosConfig_absolute_path Remote File Inclusion

CVE-2010-2918—

PHP remote file inclusion vulnerability in core/include/myMailer.class.php in the Visites (com_joomla-visites) component

43RISK

open ↗

Nucleimedium

Joomla! Component JotLoader 2.2.1 - Local File Inclusion

CVE-2010-4617—

Directory traversal vulnerability in the JotLoader (com_jotloader) component 2.2.1 for Joomla! allows remote attackers t

38RISK

open ↗

Nucleihigh

Joomla! Component JRadio - Local File Inclusion

CVE-2010-4719—

Directory traversal vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to r

43RISK

open ↗

Nucleihigh

Joomla! Component Jimtawl 1.0.2 - Local File Inclusion

CVE-2010-4769—

Directory traversal vulnerability in the Jimtawl (com_jimtawl) component 1.0.2 Joomla! allows remote attackers to read a

38RISK

open ↗

Nucleihigh

Joomla! Component Canteen 1.0 - Local File Inclusion

CVE-2010-4977—

SQL injection vulnerability in menu.php in the Canteen (com_canteen) component 1.0 for Joomla! allows remote attackers t

43RISK

open ↗

Nucleihigh

Joomla! Component JE Job 1.0 - Local File Inclusion

CVE-2010-5028—

SQL injection vulnerability in the JExtensions JE Job (com_jejob) component 1.0 for Joomla! allows remote attackers to e

38RISK

open ↗

Nucleimedium

MODx manager - Local File Inclusion

CVE-2010-5278—

Directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl, and possi

43RISK

open ↗

Nucleicritical

Joomla! Component Jstore - 'Controller' Local File Inclusion

CVE-2010-5286—

Directory traversal vulnerability in Jstore (com_jstore) component for Joomla! allows remote attackers to read arbitrary

43RISK

open ↗

Nucleimedium

Majordomo2 - SMTP/HTTP Directory Traversal

CVE-2011-0049—

Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allo

60RISK

open ↗

Nucleimedium

Tiki Wiki CMS Groupware 7.0 Cross-Site Scripting

CVE-2011-4336—

Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.php.

38RISK

open ↗

Nucleimedium

Joomla! Component com_kp - 'Controller' Local File Inclusion

CVE-2011-4804—

Directory traversal vulnerability in the obSuggest (com_obsuggest) component before 1.8 for Joomla! allows remote attack

43RISK

open ↗

Nucleimedium

Adminimize 1.7.22 - Cross-Site Scripting

CVE-2011-4926—

Cross-site scripting (XSS) vulnerability in adminimize/adminimize_page.php in the Adminimize plugin before 1.7.22 for Wo

43RISK

open ↗

Nucleimedium

WordPress Plugin Flexible Custom Post Type < 0.1.7 - Cross-Site Scripting

CVE-2011-5106—

Cross-site scripting (XSS) vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for WordP

43RISK

open ↗

Nucleimedium

11in1 CMS 1.2.1 - Local File Inclusion (LFI)

CVE-2012-0996—

Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary f

38RISK

open ↗

Nucleimedium

AWStats 6.95/7.0 - 'awredir.pl' Cross-Site Scripting

CVE-2012-4547—

Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors.

18RISK

open ↗

Nucleimedium

WordPress Plugin Download Monitor < 3.3.5.9 - Cross-Site Scripting

CVE-2012-4768—

Cross-site scripting (XSS) vulnerability in the Download Monitor plugin before 3.3.5.9 for WordPress allows remote attac

43RISK

open ↗

Nucleimedium

FlatnuX CMS - Directory Traversal

CVE-2012-4878—

Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to r

38RISK

open ↗

Nucleimedium

WordPress Spreadsheet - Cross-Site Scripting

CVE-2013-6281—

Cross-site scripting (XSS) vulnerability in codebase/spreadsheet.php in the Spreadsheet (dhtmlxSpreadsheet) plugin 2.0 f

18RISK

open ↗

Nucleimedium

Zimbra Collaboration Server 7.2.2/8.0.2 Local File Inclusion

CVE-2013-7091—

Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zim

60RISK

open ↗

Nucleimedium

WordPress Plugin Advanced Dewplayer 1.2 - Directory Traversal

CVE-2013-7240—

Directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote

43RISK

open ↗

Nucleicritical

XStream <1.4.6/1.4.10 - Remote Code Execution

CVE-2013-7285—

Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a rem

60RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.