Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,230cataloged exploits
36,424CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,465Referência 23,022GitHub PoC 15,031VulnCheck XDB 8,860Nuclei 4,361Metasploit 3,491✓ verified onlyrecentpopularrisk
24,695 exploits
Exploit-DB✓ VexDay Proof
GNUBoard 4.34.20 - 'download.php' HTML Injection
CVE-2012-4873—webappsphp20 Mar 2012
Cross-site scripting (XSS) vulnerability in the file_download function in GNUBoard before 4.34.21 allows remote attacker
23RISK
open ↗
Exploit-DB✓ VexDay Proof
LANDesk Lenovo ThinkManagement Suite 9.0.3 - Core Server Remote Code Execution
CVE-2012-1195—remotewindows19 Mar 2012
Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup
50RISK
open ↗
Exploit-DB✓ VexDay Proof
LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server - Arbitrary File Deletion
CVE-2012-1196—remotewindows19 Mar 2012
Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagemen
50RISK
open ↗
Exploit-DB✓ VexDay Proof
2X ApplicationServer 10.1 - TuxSystem Class ActiveX Control Remote File Overwrite
CVE-2012-1065—remotewindows19 Mar 2012
Insecure method vulnerability in TuxScripting.dll in the TuxSystem ActiveX control in 2X ApplicationServer 10.1 Build 12
23RISK
open ↗
Exploit-DB✓ VexDay Proof
TYPSoft FTP Server 1.1 - 'APPE' Remote Buffer Overflow
CVE-2012-5329—doswindows19 Mar 2012
Buffer overflow in TYPSoft FTP Server 1.1 allows remote authenticated users to cause a denial of service (application cr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
WebGlimpse 2.x - 'wgarcmin.cgi' Full Path Disclosure
CVE-2009-5112—webappscgi18 Mar 2012
wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted requ
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Pre Printing Press - 'product_desc.php?pid' SQL Injection
CVE-2012-5334—webappsphp18 Mar 2012
SQL injection vulnerability in product_desc.php in Pre Printing Press allows remote attackers to execute arbitrary SQL c
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PRE PRINTING STUDIO - SQL Injection
CVE-2012-5333—webappsphp17 Mar 2012
SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands
23RISK
open ↗
Exploit-DB✓ VexDay Proof
FlexCMS 3.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities
CVE-2012-1901—webappsphp16 Mar 2012
Multiple cross-site request forgery (CSRF) vulnerabilities in FlexCMS 3.2.1 and earlier allow remote attackers to (1) hi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Terminal Services - Use-After-Free (MS12-020)
CVE-2012-0002—doswindows16 Mar 2012
The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows V
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Tiny Server 1.1.5 - Arbitrary File Disclosure
CVE-2012-5335—remotewindows16 Mar 2012
Directory traversal vulnerability in Tiny Server 1.1.5 allows remote authenticated users to read arbitrary files via a .
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Netmechanica NetDecision HTTP Server 4.5.1 - Remote Buffer Overflow (Metasploit)
CVE-2012-1465—remotewindows15 Mar 2012
Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause
43RISK
open ↗
Exploit-DB✓ VexDay Proof
LightDM 1.0.6 - Arbitrary File Deletion
CVE-2012-0943—locallinux13 Mar 2012
debian/guest-account in Light Display Manager (lightdm) 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Lin
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Wikidforum 2.10 - Search Field Cross-Site Scripting
CVE-2012-2099—webappsphp12 Mar 2012
Multiple cross-site scripting (XSS) vulnerabilities in Wikidforum 2.10 allow remote attackers to inject arbitrary web sc
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Wikidforum 2.10 - Advanced Search Multiple Cross-Site Scripting Vulnerabilities
CVE-2012-2099—webappsphp12 Mar 2012
Multiple cross-site scripting (XSS) vulnerabilities in Wikidforum 2.10 allow remote attackers to inject arbitrary web sc
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Litespeed Web Server - 'gtitle' Cross-Site Scripting
CVE-2012-4871—remotemultiple12 Mar 2012
Cross-site scripting (XSS) vulnerability in service/graph_html.php in the administrator panel in LiteSpeed Web Server 4.
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Wikidforum 2.10 - Advanced Search Multiple Field SQL Injections
CVE-2012-6520—webappsphp12 Mar 2012
Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote attackers to execute arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Synology Photo Station 5 DSM 3.2 - 'photo_one.php' Script Cross-Site Scripting
CVE-2012-1556—webappsphp12 Mar 2012
Cross-site scripting (XSS) vulnerability in Synology Photo Station 5 for DiskStation Manager (DSM) 3.2-1955 allows remot
23RISK
open ↗
Exploit-DB✓ VexDay Proof
CreateVision CMS - 'id' SQL Injection
CVE-2012-1778—webappsphp11 Mar 2012
SQL injection vulnerability in artykul_print.php in CreateVision CMS allows remote attackers to execute arbitrary SQL co
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Adobe Flash Player - '.mp4 cprt' Remote Overflow (Metasploit)
CVE-2012-0754HIGHunder attackremotewindows08 Mar 2012
Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.
100RISK
open ↗
Exploit-DB✓ VexDay Proof
HomeSeer HS2 and HomeSeer PRO - Multiple Vulnerabilities
CVE-2011-4837—webappswindows07 Mar 2012
Cross-site request forgery (CSRF) vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5.0.20 allows remote att
23RISK
open ↗
Exploit-DB✓ VexDay Proof
OSClass 2.3.x - Directory Traversal / Arbitrary File Upload
CVE-2012-1617—webappsphp07 Mar 2012
Directory traversal vulnerability in combine.php in OSClass before 2.3.6 allows remote attackers to read and write arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
HomeSeer HS2 and HomeSeer PRO - Multiple Vulnerabilities
CVE-2011-4835—webappswindows07 Mar 2012
Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to access arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Etano 1.20/1.22 - 'photo_view.php?return' Cross-Site Scripting
CVE-2012-1110—webappsphp05 Mar 2012
Multiple cross-site scripting (XSS) vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Etano 1.20/1.22 - 'photo_search.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2012-1110—webappsphp05 Mar 2012
Multiple cross-site scripting (XSS) vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Open Realty 2.5.x - 'select_users_template' Local File Inclusion
CVE-2012-1112—webappsphp05 Mar 2012
Directory traversal vulnerability in Open-Realty CMS 2.5.8 and earlier allows remote attackers to include and execute ar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! 2.5.1 - 'redirect.php' Blind SQL Injection
CVE-2012-1116—webappsphp05 Mar 2012
SQL injection vulnerability in Joomla! 1.7.x and 2.5.x before 2.5.2 allows remote attackers to execute arbitrary SQL com
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Etano 1.20/1.22 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2012-1110—webappsphp05 Mar 2012
Multiple cross-site scripting (XSS) vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
VideoLAN VLC Media Player 0.9.5 - RealText Subtitle Overflow (Metasploit)
CVE-2008-5036—localwindows02 Mar 2012
Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execu
50RISK
open ↗
Exploit-DB✓ VexDay Proof
DJ Studio Pro 5.1 - '.pls' Local Stack Buffer Overflow (Metasploit)
CVE-2009-4656—localwindows02 Mar 2012
Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-as
50RISK
open ↗
← previouspage 134 / 824next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.