Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

78,258cataloged exploits
36,019CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,458Referência 22,697GitHub PoC 14,455VulnCheck XDB 8,811Nuclei 4,349Metasploit 3,488✓ verified onlyrecentpopularrisk
24,458 exploits
Exploit-DB✓ VexDay Proof
Mollensoft Software Enceladus Server Suite 3.9 - 'FTP' Buffer Overflow
CVE-2002-2232—doswindows09 Dec 2002
Buffer overflow in Enceladus Server Suite 3.9 allows remote attackers to execute arbitrary code via a long CD (CWD) comm
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Cobalt RaQ4 - Administrative Interface Command Execution
CVE-2002-1361—remotelinux05 Dec 2002
overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Exim Internet Mailer 3.35/3.36/4.10 - Format String
CVE-2002-1381—locallinux04 Dec 2002
Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative user
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apache 1.3.x + Tomcat 4.0.x/4.1.x mod_jk - Chunked Encoding Denial of Service
CVE-2002-2272—dosunix04 Dec 2002
Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a de
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SAP DB 7.3.00 - Symbolic Link
CVE-2002-1576—localunix04 Dec 2002
lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
phpBB 2.0.3 - 'search.php' Cross-Site Scripting
CVE-2002-2255—webappsphp03 Dec 2002
Cross-site scripting (XSS) vulnerability in search.php in phpBB 2.0.3 and possibly earlier versions allows remote attack
23RISK
open ↗
Exploit-DB✓ VexDay Proof
3Com SuperStack 3 NBX 4.0/4.1 - FTPD Denial of Service
CVE-2002-2300—doshardware02 Dec 2002
Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Cyrus IMAPD 1.4/1.5.19/2.0.12/2.0.16/2.1.9/2.1.10 - Pre-Login Heap Corruption
CVE-2002-1580—doslinux02 Dec 2002
Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code v
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Pserv 2.0 - HTTP Version Specifier Buffer Overflow
CVE-2002-2295—doslinux30 Nov 2002
Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (c
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Moby NetSuite 1.0/1.2 - POST Handler Buffer Overflow
CVE-2002-2258—dosmultiple29 Nov 2002
Moby NetSuite allows remote attackers to cause a denial of service (crash) via an HTTP POST request with a (1) large int
23RISK
open ↗
Exploit-DB✓ VexDay Proof
YaBB 1 Gold SP 1 - 'YaBB.pl' Cross-Site Scripting
CVE-2002-2296—webappscgi28 Nov 2002
Cross-site scripting (XSS) vulnerability in YaBB.pl in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 allows remote attac
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Lib CGI 0.1 - Include Buffer Overflow
CVE-2002-2251—remoteunix27 Nov 2002
Buffer overflow in the changevalue function in libcgi.h for Marcos Luiz Onisto Lib CGI 0.1 allows remote attackers to ex
23RISK
open ↗
Exploit-DB✓ VexDay Proof
BizDesign ImageFolio 2.x/3.0.1 - 'imageFolio.cgi?direct' Cross-Site Scripting
CVE-2002-1334—webappscgi27 Nov 2002
Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arb
23RISK
open ↗
Exploit-DB✓ VexDay Proof
BizDesign ImageFolio 2.x/3.0.1 - 'nph-build.cgi' Cross-Site Scripting
CVE-2002-1334—webappscgi27 Nov 2002
Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arb
23RISK
open ↗
Exploit-DB✓ VexDay Proof
News Evolution 1.0/2.0 - Include Undefined Variable Command Execution
CVE-2002-2249—webappsphp26 Nov 2002
PHP remote file inclusion vulnerability in News Evolution 2.0 allows remote attackers to execute arbitrary PHP commands
23RISK
open ↗
Exploit-DB✓ VexDay Proof
vBulletin 2.0.x/2.2.x - 'members2.php' Cross-Site Scripting
CVE-2002-2235—webappsphp25 Nov 2002
member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which caus
23RISK
open ↗
Exploit-DB✓ VexDay Proof
XFree86 X11R6 3.3.x - Font Server Remote Buffer Overrun
CVE-2002-1317—remoteunix25 Nov 2002
Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers t
28RISK
open ↗
Exploit-DB✓ VexDay Proof
acFTP 1.4 - Invalid Password Weak Authentication
CVE-2002-2417—remotewindows25 Nov 2002
acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows
23RISK
open ↗
Exploit-DB✓ VexDay Proof
vBulletin 2.0/2.2.x - 'memberlist.php' Cross-Site Scripting
CVE-2004-1824—webappsphp22 Nov 2002
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary web
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Rational ClearCase 4.1 - Portscan Denial of Service
CVE-2002-1322—dosunix22 Nov 2002
Rational ClearCase 4.1, 2002.05, and possibly other versions allows remote attackers to cause a denial of service (crash
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Zeroo HTTP Server 1.5 - Directory Traversal (1)
CVE-2002-2416—remotelinux22 Nov 2002
Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. (dot
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Zeroo HTTP Server 1.5 - Directory Traversal (2)
CVE-2002-2416—remotelinux22 Nov 2002
Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. (dot
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Java Virtual Machine 3802 Series - Bytecode Verifier
CVE-2003-0111—remotewindows21 Nov 2002
The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Int
35RISK
open ↗
Exploit-DB✓ VexDay Proof
Symantec Java! JustInTime Compiler 210.65 - Command Execution
CVE-2002-2281—remotewindows21 Nov 2002
Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Mhonarc 2.5.x - Mail Header HTML Injection
CVE-2002-1307—remotelinux19 Nov 2002
Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML
23RISK
open ↗
Exploit-DB✓ VexDay Proof
TFTPD32 2.50 - 'Filename' Remote Buffer Overflow
CVE-2002-2226—remotewindows19 Nov 2002
Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote attackers to execute arbitrary code via a long filenam
50RISK
open ↗
Exploit-DB✓ VexDay Proof
TFTPD32 2.50 - Arbitrary File Download/Upload
CVE-2002-2353—remotewindows18 Nov 2002
tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full pathname in GET and PUT requ
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MailEnable 1.501x - Email Server Buffer Overflow
CVE-2002-2357—remotewindows18 Nov 2002
MailEnable 1.5 015 through 1.5 018 allows remote attackers to cause a denial of service (crash) via a long USER string,
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Lonerunner Zeroo HTTP Server 1.5 - Remote Buffer Overflow
CVE-2002-1823—remotelinux16 Nov 2002
Buffer overflow in the HttpGetRequest function in Zeroo HTTP server 1.5 allows remote attackers to execute arbitrary cod
28RISK
open ↗
Exploit-DB✓ VexDay Proof
IISPop 1.161/1.181 - Remote Buffer Overflow (Denial of Service) (PoC)
CVE-2002-2404—doswindows14 Nov 2002
Buffer overflow in IISPop email server 1.161 and 1.181 allows remote attackers to cause a denial of service (crash) via
23RISK
open ↗
← previouspage 740 / 816next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.