Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

78,258cataloged exploits
36,019CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,458Referência 22,697GitHub PoC 14,455VulnCheck XDB 8,811Nuclei 4,349Metasploit 3,488✓ verified onlyrecentpopularrisk
24,458 exploits
Exploit-DB✓ VexDay Proof
Sun Solaris 2.5/2.6/7.0/8/9 AT Command - Arbitrary File Deletion
CVE-2003-1073—localsolaris27 Jan 2003
A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r arg
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apache Tomcat 3.x - Null Byte Directory / File Disclosure
CVE-2003-0042—remotelinux26 Jan 2003
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with
35RISK
open ↗
Exploit-DB✓ VexDay Proof
FTLS Guestbook 1.1 - Script Injection
CVE-2003-1348—webappsphp25 Jan 2003
Cross-site scripting (XSS) vulnerability in guestbook.cgi in ftls.org Guestbook 1.1 allows remote attackers to inject ar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
GNU Mailman 2.1 - 'email' Cross-Site Scripting
CVE-2003-0038—webappscgi24 Jan 2003
Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML
23RISK
open ↗
Exploit-DB✓ VexDay Proof
slocate 2.5/2.6 - Local Buffer Overrun
CVE-2003-0056—doslinux24 Jan 2003
Buffer overflow in secure locate (slocate) before 2.7 allows local users to execute arbitrary code via a long (1) -c or
23RISK
open ↗
Exploit-DB✓ VexDay Proof
GNU Mailman 2.1 - Error Page Cross-Site Scripting
CVE-2003-0038—webappscgi24 Jan 2003
Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML
23RISK
open ↗
Exploit-DB✓ VexDay Proof
List Site Pro 2.0 - User Database Delimiter Injection
CVE-2003-1350—remotemultiple24 Jan 2003
List Site Pro 2.0 allows remote attackers to hijack user accounts by inserting a "|" (pipe), which is used as a field de
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2000/NT 4.0 - Locator Service Buffer Overflow
CVE-2003-0003—remotewindows22 Jan 2003
Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows
35RISK
open ↗
Exploit-DB✓ VexDay Proof
MTink 0.9.x - Printer Status Monitor Environment Variable Buffer Overflow
CVE-2003-0034—locallinux21 Jan 2003
Buffer overflow in the mtink status monitor, as included in the printer-drivers package in Mandrake Linux, allows local
23RISK
open ↗
Exploit-DB✓ VexDay Proof
CVS 1.11.x - Directory Request Double-Free Heap Corruption
CVE-2003-0015—remotelinux20 Jan 2003
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly ex
28RISK
open ↗
Exploit-DB✓ VexDay Proof
phpBB 2.0.3 - 'privmsg.php' SQL Injection
CVE-2003-1530—webappsphp17 Jan 2003
SQL injection vulnerability in privmsg.php in phpBB 2.0.3 and earlier allows remote attackers to execute arbitrary SQL c
23RISK
open ↗
Exploit-DB✓ VexDay Proof
GameSpy 3D 2.62 - Packet Amplification Denial of Service
CVE-2003-1354—doslinux17 Jan 2003
Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows rem
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Trend Micro OfficeScan 3.x - CGI Directory Insufficient Permissions
CVE-2003-1341—remotewindows15 Jan 2003
The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentica
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Trend Micro Virus Control System 1.8 - Information Disclosure
CVE-2003-1344—remotewindows15 Jan 2003
Trend Micro Virus Control System (TVCS) Log Collector allows remote attackers to obtain usernames, encrypted passwords,
23RISK
open ↗
Exploit-DB✓ VexDay Proof
GLIBC locale - Format Strings
CVE-2000-0844—locallinux15 Jan 2003
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Trend Micro ScanMail For Exchange 3.8 - Authentication Bypass
CVE-2003-1343—remotewindows15 Jan 2003
Trend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.ex
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Trend Micro Virus Control System 1.8 - Denial of Service
CVE-2003-1342—doswindows15 Jan 2003
Trend Micro Virus Control System (TVCS) 1.8 running with IIS allows remote attackers to cause a denial of service (memor
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Geeklog 1.3.7 - 'Homepage User' HTML Injection
CVE-2003-1347—webappsphp14 Jan 2003
Multiple cross-site scripting (XSS) vulnerabilities in Geeklog 1.3.7 allow remote attackers to inject arbitrary web scri
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Geeklog 1.3.7 - 'profiles.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2003-1347—webappsphp14 Jan 2003
Multiple cross-site scripting (XSS) vulnerabilities in Geeklog 1.3.7 allow remote attackers to inject arbitrary web scri
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Geeklog 1.3.7 - 'comment.php?cid' Cross-Site Scripting
CVE-2003-1347—webappsphp14 Jan 2003
Multiple cross-site scripting (XSS) vulnerabilities in Geeklog 1.3.7 allow remote attackers to inject arbitrary web scri
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Geeklog 1.3.7 - 'users.php?uid' Cross-Site Scripting
CVE-2003-1347—webappsphp14 Jan 2003
Multiple cross-site scripting (XSS) vulnerabilities in Geeklog 1.3.7 allow remote attackers to inject arbitrary web scri
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Opera 6.0/7.0 - opera.PluginContext Native Method Denial of Service
CVE-2003-1397—doswindows13 Jan 2003
The PluginContext object of Opera 6.05 and 7.0 allows remote attackers to cause a denial of service (crash) via an HTTP
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHPPass 2 - 'AccessControl.php' SQL Injection
CVE-2003-1533—webappsphp13 Jan 2003
SQL injection vulnerability in accesscontrol.php in PhpPass 2 allows remote attackers to execute arbitrary SQL commands
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Solaris 2.x/7.0/8 - Derived 'login' Remote Buffer Overflow
CVE-2001-0797—remotesolaris09 Jan 2003
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary comman
60RISK
open ↗
Exploit-DB✓ VexDay Proof
TANne 0.6.17 - Session Manager SysLog Format String
CVE-2003-1236—remotelinux07 Jan 2003
Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allows remote attackers to ex
28RISK
open ↗
Exploit-DB✓ VexDay Proof
E-theni - Remote File Inclusion Command Execution
CVE-2003-1256—webappsphp06 Jan 2003
aff_liste_langue.php in E-theni allows remote attackers to execute arbitrary PHP code by modifying the rep_include param
23RISK
open ↗
Exploit-DB✓ VexDay Proof
S8Forum 3.0 - Remote Command Execution
CVE-2003-1252—webappsphp06 Jan 2003
register.php in S8Forum 3.0 allows remote attackers to execute arbitrary PHP commands by creating a user whose name ends
23RISK
open ↗
Exploit-DB✓ VexDay Proof
H-Sphere WebShell 2.4 - Remote Command Execution
CVE-2003-1247—remotelinux06 Jan 2003
Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via (1) a long URL c
23RISK
open ↗
Exploit-DB✓ VexDay Proof
AN HTTPD 1.41 e - Cross-Site Scripting
CVE-2003-1271—remotemultiple06 Jan 2003
Cross-site scripting vulnerability (XSS) in AN HTTP 1.41e allows remote attackers to execute arbitrary web script or HTM
23RISK
open ↗
Exploit-DB✓ VexDay Proof
OpenTopic 2.3.1 - Private Message HTML Injection
CVE-2003-1278—webappsphp06 Jan 2003
Cross-site scripting vulnerability (XSS) in OpenTopic 2.3.1 allows remote attackers to execute arbitrary script as other
23RISK
open ↗
← previouspage 738 / 816next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.