Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,900cataloged exploits

35,840CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,458Referência 22,600GitHub PoC 14,323VulnCheck XDB 8,722Nuclei 4,320Metasploit 3,477✓ verified onlyrecent popular risk

24,458 exploits

Exploit-DB✓ VexDay Proof

LHA 1.x - Remote Buffer Overflow / Directory Traversal

CVE-2005-0643—remoteunix30 Apr 2004

Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary cod

28RISK

open ↗

Exploit-DB✓ VexDay Proof

Coppermine Photo Gallery 1.2.2b - 'menu.inc.php' Cross-Site Scripting

CVE-2004-1985—webappsphp30 Apr 2004

Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to i

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Coppermine Photo Gallery 1.2.0 RC4 - 'init.inc.php' Remote File Inclusion

CVE-2004-1988—webappsphp30 Apr 2004

PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to

23RISK

open ↗

Exploit-DB✓ VexDay Proof

SquirrelMail 1.4.x - Folder Name Cross-Site Scripting

CVE-2004-0519—webappsphp30 Apr 2004

Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary sc

43RISK

open ↗

Exploit-DB✓ VexDay Proof

Moodle 1.1/1.2 - Cross-Site Scripting

CVE-2004-1978—webappsphp30 Apr 2004

Cross-site scripting (XSS) vulnerability in help.php in Moodle before 1.3 allows remote attackers to inject arbitrary HT

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Coppermine Photo Gallery 1.2.2b - 'theme.php' Remote File Inclusion

CVE-2004-1989—webappsphp30 Apr 2004

PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execu

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Coppermine Photo Gallery 1.2.0 RC4 - 'startdir' Traversal Arbitrary File Access

CVE-2004-1986—webappsphp30 Apr 2004

Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attacker

28RISK

open ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 6 - Meta Data Foreign Domain Spoofing

CVE-2004-0763—remotewindows30 Apr 2004

Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Jav

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows XP/2000 - 'Lsasrv.dll' Remote Universal (MS04-011)

CVE-2003-0533—remotewindows29 Apr 2004

Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority

60RISK

open ↗

Exploit-DB✓ VexDay Proof

Siemens S55 - Cellular Telephone Sms Confirmation Message Bypass

CVE-2004-2626—remotehardware27 Apr 2004

GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized SM

23RISK

open ↗

Exploit-DB✓ VexDay Proof

DiGi WWW Server 1 - Remote Denial of Service

CVE-2004-1973—dosmultiple27 Apr 2004

DiGi Web Server allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request that cont

23RISK

open ↗

Exploit-DB✓ VexDay Proof

OpenBB 1.0.x - 'member.php?redirect' Cross-Site Scripting

CVE-2004-1965—webappsphp26 Apr 2004

Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote atta

38RISK

open ↗

Exploit-DB✓ VexDay Proof

OpenBB 1.0.x - 'board.php?FID' SQL Injection

CVE-2004-1966—webappsphp26 Apr 2004

Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execu

23RISK

open ↗

Exploit-DB✓ VexDay Proof

OpenBB 1.0.x - 'index.php?redirect' Cross-Site Scripting

CVE-2004-1965—webappsphp26 Apr 2004

Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote atta

38RISK

open ↗

Exploit-DB✓ VexDay Proof

OpenBB 1.0.x - Private Message Disclosure

CVE-2004-1968—webappsphp26 Apr 2004

The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to read arbit

23RISK

open ↗

Exploit-DB✓ VexDay Proof

OpenBB 1.0.x - 'search.php?q' SQL Injection

CVE-2004-1966—webappsphp26 Apr 2004

Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execu

23RISK

open ↗

Exploit-DB✓ VexDay Proof

OpenBB 1.0.x - 'member.php' Multiple SQL Injections

CVE-2004-1966—webappsphp26 Apr 2004

Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execu

23RISK

open ↗

Exploit-DB✓ VexDay Proof

OpenBB 1.0.x - 'post.php' Multiple SQL Injections

CVE-2004-1966—webappsphp26 Apr 2004

Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execu

23RISK

open ↗

Exploit-DB✓ VexDay Proof

OpenBB 1.0.x - 'myhome.php?to' Cross-Site Scripting

CVE-2004-1965—webappsphp26 Apr 2004

Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote atta

38RISK

open ↗

Exploit-DB✓ VexDay Proof

PHP-Nuke 7.2 Multiple Video Gallery Module - SQL Injection

CVE-2004-1972—webappsphp26 Apr 2004

SQL injection vulnerability in modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to execut

23RISK

open ↗

Exploit-DB✓ VexDay Proof

OpenBB 1.0.x - 'post.php?TID' Cross-Site Scripting

CVE-2004-1965—webappsphp26 Apr 2004

Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote atta

38RISK

open ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows XP/2000/NT 4.0 - Shell Long Share Name Buffer Overrun

CVE-2004-0214—doswindows25 Apr 2004

Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me

35RISK

open ↗

Exploit-DB

OpenBB < 1.0.6 - Multiple Vulnerabilities

CVE-2004-1965—webappsphp24 Apr 2004

Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote atta

38RISK

open ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - 'Lsasrv.dll' RPC Remote Buffer Overflow (MS04-011)

CVE-2003-0533—remotewindows24 Apr 2004

Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority

60RISK

open ↗

Exploit-DB✓ VexDay Proof

PHProfession 2.5 - 'upload.php' Direct Request Full Path Disclosure

CVE-2004-1953—webappsphp23 Apr 2004

phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which re

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Protector System 1.15 b1 - 'index.php' SQL Injection

CVE-2004-1962—webappsphp23 Apr 2004

SQL injection vulnerability in index.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection filt

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Omnicron OmniHTTPd 2.x/3.0 - GET Buffer Overflow

CVE-2004-2299—remotewindows23 Apr 2004

Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GET

28RISK

open ↗

Exploit-DB✓ VexDay Proof

Advanced Guestbook 2.2 - 'Password' SQL Injection

CVE-2004-1952—webappsphp23 Apr 2004

SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain

23RISK

open ↗

Exploit-DB✓ VexDay Proof

TCP Connection Reset - Remote Denial of Service

CVE-2004-0230—doslinux23 Apr 2004

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial o

45RISK

open ↗

Exploit-DB✓ VexDay Proof

PHProfession 2.5 - 'modules.php?offset' SQL Injection

CVE-2004-1955—webappsphp23 Apr 2004

SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to execute arbitrary SQL code via

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.