Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,230cataloged exploits
36,424CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,465Referência 23,022GitHub PoC 15,031VulnCheck XDB 8,860Nuclei 4,361Metasploit 3,491✓ verified onlyrecentpopularrisk
24,695 exploits
Exploit-DB✓ VexDay Proof
Openfire Server 3.6.0a - Admin Console Authentication Bypass (Metasploit)
CVE-2008-6508—webappsjsp28 Jun 2012
Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows rem
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities
CVE-2012-3815—doswindows27 Jun 2012
Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 al
50RISK
open ↗
Exploit-DB✓ VexDay Proof
symantec Web gateway 5.0.2.8 - Multiple Vulnerabilities
CVE-2012-0298—webappslinux27 Jun 2012
The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to (
23RISK
open ↗
Exploit-DB✓ VexDay Proof
symantec Web gateway 5.0.2.8 - Multiple Vulnerabilities
CVE-2012-0297—webappslinux27 Jun 2012
The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts,
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities
CVE-2012-4354—doswindows27 Jun 2012
TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote at
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities
CVE-2012-4356—doswindows27 Jun 2012
Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA bef
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities
CVE-2012-4355—doswindows27 Jun 2012
TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote at
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities
CVE-2012-4357—doswindows27 Jun 2012
Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow rem
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities
CVE-2012-4353—doswindows27 Jun 2012
Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA befor
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Symantec pcAnywhere 12.5.0 - 'Login' / 'Password' Remote Buffer Overflow
CVE-2011-3478—remotewindows27 Jun 2012
The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.
35RISK
open ↗
Exploit-DB✓ VexDay Proof
SugarCRM CE 6.3.1 - 'Unserialize()' PHP Code Execution (Metasploit)
CVE-2012-0694—webappsphp26 Jun 2012
SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Google Chrome 19.0.1084.52 - 'metro_driver.dll' DLL Loading Arbitrary Code Execution
CVE-2012-2764—remotewindows26 Jun 2012
Untrusted search path vulnerability in Google Chrome before 20.0.1132.43 on Windows might allow local users to gain priv
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Able2Extract and Able2Extract Server 6.0 - Memory Corruption
CVE-2011-4221—doswindows25 Jun 2012
Unspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote attackers to cause a deni
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Slimpdf Reader 1.0 - Memory Corruption
CVE-2011-4221—doswindows25 Jun 2012
Unspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote attackers to cause a deni
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Kingview Touchview 6.53 - Multiple Heap Overflow Vulnerabilities
CVE-2012-1831—doswindows25 Jun 2012
Heap-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted p
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple iTunes 10 - Extended M3U Stack Buffer Overflow (Metasploit)
CVE-2012-0677—remotewindows25 Jun 2012
Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a de
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Able2Doc and Able2Doc Professional 6.0 - Memory Corruption
CVE-2011-4222—doswindows25 Jun 2012
Unspecified vulnerability in Investintech.com Able2Extract and Able2Extract Server allows remote attackers to cause a de
23RISK
open ↗
Exploit-DB✓ VexDay Proof
FCKEditor Core - 'Editor 'spellchecker.php' Cross-Site Scripting
CVE-2012-4000—webappsphp25 Jun 2012
Cross-site scripting (XSS) vulnerability in the print_textinputs_var function in editor/dialog/fck_spellerpages/spellerp
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Kingview Touchview 6.53 - EIP Overwrite
CVE-2012-1830—doswindows25 Jun 2012
Stack-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Adobe Flash Player - Object Type Confusion (Metasploit)
CVE-2012-0779—remotewindows25 Jun 2012
Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Slimpdf Reader 1.0 - Memory Corruption
CVE-2011-4220—doswindows25 Jun 2012
Investintech.com SlimPDF Reader does not properly restrict the arguments to unspecified function calls, which allows rem
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Parodia 6.8 - 'employer-profile.asp' SQL Injection
CVE-2011-2751—webappsasp25 Jun 2012
SQL injection vulnerability in Parodia before 6.809 allows remote attackers to execute arbitrary SQL commands via unspec
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Slimpdf Reader 1.0 - Memory Corruption
CVE-2011-4222—doswindows25 Jun 2012
Unspecified vulnerability in Investintech.com Able2Extract and Able2Extract Server allows remote attackers to cause a de
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Able2Doc and Able2Doc Professional 6.0 - Memory Corruption
CVE-2011-4220—doswindows25 Jun 2012
Investintech.com SlimPDF Reader does not properly restrict the arguments to unspecified function calls, which allows rem
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Able2Extract and Able2Extract Server 6.0 - Memory Corruption
CVE-2011-4220—doswindows25 Jun 2012
Investintech.com SlimPDF Reader does not properly restrict the arguments to unspecified function calls, which allows rem
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Able2Doc and Able2Doc Professional 6.0 - Memory Corruption
CVE-2011-4221—doswindows25 Jun 2012
Unspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote attackers to cause a deni
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Able2Extract and Able2Extract Server 6.0 - Memory Corruption
CVE-2011-4222—doswindows25 Jun 2012
Unspecified vulnerability in Investintech.com Able2Extract and Able2Extract Server allows remote attackers to cause a de
23RISK
open ↗
Exploit-DB✓ VexDay Proof
XnView 1.98.8 - '.tiff' Image Processing Heap Overflow (2)
CVE-2012-0276—doswindows22 Jun 2012
Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (applicat
23RISK
open ↗
Exploit-DB✓ VexDay Proof
XnView 1.98.8 - '.tiff' Image Processing Heap Overflow (1)
CVE-2012-0276—doswindows22 Jun 2012
Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (applicat
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Lattice Diamond Programmer 1.4.2 - Buffer Overflow (PoC)
CVE-2012-2614—doswindows22 Jun 2012
Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a d
23RISK
open ↗
← previouspage 123 / 824next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.