Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

78,258cataloged exploits
36,019CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,458Referência 22,697GitHub PoC 14,455VulnCheck XDB 8,811Nuclei 4,349Metasploit 3,488✓ verified onlyrecentpopularrisk
24,458 exploits
Exploit-DB✓ VexDay Proof
Nullsoft SHOUTcast 1.8.9 - Remote Buffer Overflow
CVE-2002-0907—remotemultiple04 Jun 2002
Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
QNX RTOS 4.25/6.1 - su Password Hash Disclosure
CVE-2002-2039—locallinux03 Jun 2002
/bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from c
23RISK
open ↗
Exploit-DB✓ VexDay Proof
QNX RTOS 4.25/6.1 - 'phgrafx' Local Privilege Escalation
CVE-2002-2040—locallinux03 Jun 2002
The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly d
23RISK
open ↗
Exploit-DB✓ VexDay Proof
QNX 6.x - 'ptrace()' Arbitrary Process Modification
CVE-2002-2042—locallinux03 Jun 2002
ptrace in the QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows programs to attach to privileged processes, whi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
QNX RTOS 6.1 - 'PKG-Installer' Local Buffer Overflow
CVE-2002-2041—locallinux03 Jun 2002
Multiple buffer overflows in realtime operating system (RTOS) 6.1.0 allows local users to execute arbitrary code via (1)
23RISK
open ↗
Exploit-DB✓ VexDay Proof
QNX RTOS 6.1 - '/usr/photon/bin/phlocale' Environment Variable Buffer Overflow
CVE-2002-2041—locallinux03 Jun 2002
Multiple buffer overflows in realtime operating system (RTOS) 6.1.0 allows local users to execute arbitrary code via (1)
23RISK
open ↗
Exploit-DB✓ VexDay Proof
QNX RTOS 4.25/6.1 - 'phgrafx-startup' Local Privilege Escalation
CVE-2002-2040—locallinux03 Jun 2002
The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly d
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Teekai Tracking Online 1.0 - Cross-Site Scripting
CVE-2002-2055—webappsphp03 Jun 2002
Cross-site scripting (XSS) vulnerability in userlog.php in TeeKai Tracking Online 1.0 allows remote attackers to inject
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Evolvable Shambala Server 4.5 - Web Server Denial of Service
CVE-2002-0876—doswindows31 May 2002
Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.
23RISK
open ↗
Exploit-DB✓ VexDay Proof
QNX RTOS 4.25 - monitor Arbitrary File Modification
CVE-2002-0793—locallinux31 May 2002
Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
QNX RTOS 4.25 - dumper Arbitrary File Modification
CVE-2002-0793—locallinux31 May 2002
Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
QNX RTOS 4.25 - 'CRTTrap' File Disclosure
CVE-2002-0793—locallinux31 May 2002
Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
IBM Informix SE 7.25 sqlexec - Local Buffer Overflow (1)
CVE-2002-0905—locallinux30 May 2002
Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR enviro
23RISK
open ↗
Exploit-DB✓ VexDay Proof
IBM Informix SE 7.25 sqlexec - Local Buffer Overflow (2)
CVE-2002-0905—locallinux30 May 2002
Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR enviro
23RISK
open ↗
Exploit-DB✓ VexDay Proof
CGIScript.net - 'csPassword.cgi' 1.0 Information Disclosure
CVE-2002-0919—webappscgi30 May 2002
CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newl
23RISK
open ↗
Exploit-DB✓ VexDay Proof
CGIScript.net - 'csPassword.cgi' 1.0 HTAccess File Modification
CVE-2002-0919—webappscgi30 May 2002
CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newl
23RISK
open ↗
Exploit-DB✓ VexDay Proof
CGIScript.net - 'csPassword.cgi' 1.0 Information Disclosure
CVE-2002-0918—webappscgi30 May 2002
CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages that are p
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Netscape Enterprise Web Server for Netware 4/5 5.0 - Information Disclosure
CVE-2002-1634—remotenovell29 May 2002
Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndso
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Caldera OpenServer 5.0.5/5.0.6 - SCOAdmin Symbolic Link
CVE-2002-0887—localsco29 May 2002
scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apache Tomcat 3.2.3/3.2.4 - Example Files Web Root Full Path Disclosure
CVE-2002-2007—remotemultiple29 May 2002
The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system informatio
35RISK
open ↗
Exploit-DB✓ VexDay Proof
Apache Tomcat 3.2.3/3.2.4 - 'Source.jsp' Information Disclosure
CVE-2002-2007—remotemultiple29 May 2002
The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system informatio
35RISK
open ↗
Exploit-DB✓ VexDay Proof
Apache Tomcat 3.2.3/3.2.4 - 'RealPath.jsp' Information Disclosuree
CVE-2002-2007—remotemultiple29 May 2002
The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system informatio
35RISK
open ↗
Exploit-DB✓ VexDay Proof
Gafware CFXImage 1.6.4/1.6.6 - ShowTemp File Disclosure
CVE-2002-0879—webappscfm29 May 2002
showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via (1) a .. or (2) a C: style p
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Image Display System 0.8.1 - Directory Existence Disclosure
CVE-2002-1837—webappscgi28 May 2002
The getAlbumToDisplay function in idsShared.pm for Image Display System (IDS) 0.81 allows remote attackers to determine
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows 95/98/2000/NT 4.0 - WinHlp Item Buffer Overflow
CVE-2002-0823—remotewindows27 May 2002
Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HT
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Opera 6.0.1/6.0.2 - Arbitrary File Disclosure
CVE-2002-0898—remotewindows27 May 2002
Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the c
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Yahoo! Messenger 5.0 - Call Center Buffer Overflow
CVE-2002-0031—remotewindows27 May 2002
Buffer overflows in Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary code via a ymsg
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHPBB2 - Image Tag HTML Injection
CVE-2002-0902—webappsphp26 May 2002
Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft MSN Messenger 1 < 4 - Malformed Invite Request Denial of Service
CVE-2002-1831—doswindows24 May 2002
Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invi
28RISK
open ↗
Exploit-DB✓ VexDay Proof
OpenBB 1.0 - Unauthorized Moderator Access
CVE-2002-1830—webappsphp24 May 2002
Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via
23RISK
open ↗
← previouspage 754 / 816next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.