Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,305cataloged exploits

36,465CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,466Referência 23,051GitHub PoC 15,051VulnCheck XDB 8,883Nuclei 4,361Metasploit 3,493✓ verified onlyrecent popular risk

5,629 exploits

Referência✓ VexDay Proof

BookmarkX script 2007 - 'topicid' SQL Injection

CVE-2008-0695—webappsphp

SQL injection vulnerability in index.php in BookmarkX script 2007 allows remote attackers to execute arbitrary SQL comma

23RISK

open ↗

Referência✓ VexDay Proof

ImageStation - 'SonyISUpload.cab 1.0.0.38' ActiveX Buffer Overflow (PoC)

CVE-2008-0748—doswindows

Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyIS

28RISK

open ↗

Referência✓ VexDay Proof

Joomla! Component MCQuiz 0.9 Final - 'tid' SQL Injection

CVE-2008-0800—webappsphp

SQL injection vulnerability in index.php in the McQuiz (com_mcquiz) 0.9 Final component for Joomla! allows remote attack

23RISK

open ↗

Referência✓ VexDay Proof

phpArcadeScript 3.0RC2 - 'userid' SQL Injection

CVE-2008-1163—webappsphp

SQL injection vulnerability in index.php in phpArcadeScript 1.0 through 3.0 RC2 allows remote attackers to execute arbit

23RISK

open ↗

Referência✓ VexDay Proof

PhpBlock a8.4 - 'PATH_TO_CODE' Remote File Inclusion

CVE-2008-1776—webappsphp

PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock A8.4 allows remote att

28RISK

open ↗

Referência✓ VexDay Proof

Prozilla Forum Service - 'forum' SQL Injection

CVE-2008-1789—webappsphp

SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via

23RISK

open ↗

Referência✓ VexDay Proof

1024 CMS 1.4.2 - Local File Inclusion / Blind SQL Injection

CVE-2008-1911—webappsphp

SQL injection vulnerability in includes/system.php in 1024 CMS 1.4.2 beta and earlier, when magic_quotes_gpc is disabled

23RISK

open ↗

Referência✓ VexDay Proof

Dream4 Koobi Pro 6.25 Poll - 'poll_id' SQL Injection

CVE-2008-2036—webappsphp

SQL injection vulnerability in index.php in dream4 Koobi Pro 6.25 allows remote attackers to execute arbitrary SQL comma

23RISK

open ↗

Referência✓ VexDay Proof

Smeego 1.0 - 'Cookie lang' Local File Inclusion

CVE-2008-2352—webappsphp

Directory traversal vulnerability in index.php in Smeego 1.0, when magic_quotes_gpc is disabled, allows remote attackers

23RISK

open ↗

Referência✓ VexDay Proof

Archangel Weblog 0.90.02 - 'post_id' SQL Injection

CVE-2008-2356—webappsphp

SQL injection vulnerability in index.php in Archangel Weblog 0.90.02 and earlier allows remote attackers to execute arbi

23RISK

open ↗

Referência✓ VexDay Proof

Flatnuke 3 - Remote Cookie Manipulation / Privilege Escalation

CVE-2007-5771—webappsphp

Flatnuke 3 (aka FlatnuX) allows remote attackers to obtain administrative access via a myforum%00 cookie.

23RISK

open ↗

Referência✓ VexDay Proof

Flatnuke 3 - Remote Command Execution / Privilege Escalation

CVE-2007-5773—webappsphp

Cross-site request forgery (CSRF) vulnerability in index.php in the File Manager module in Flatnuke 3 allows remote atta

23RISK

open ↗

Referência✓ VexDay Proof

AlkalinePHP 0.80.00 Beta - 'thread.php' SQL Injection

CVE-2008-2395—webappsphp

SQL injection vulnerability in thread.php in AlkalinePHP 0.80.00 beta and earlier allows remote attackers to execute arb

23RISK

open ↗

Referência✓ VexDay Proof

FicHive 1.0 - 'category' Blind SQL Injection

CVE-2008-2416—webappsphp

SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via th

23RISK

open ↗

Referência✓ VexDay Proof

1Book Guestbook Script 1.0.1 - Code Execution

CVE-2008-2638—webappsphp

Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitr

23RISK

open ↗

Referência✓ VexDay Proof

emagiC CMS.Net 4.0 - 'emc.asp' SQL Injection

CVE-2007-5783—webappsasp

SQL injection vulnerability in emc.asp in emagiC CMS.Net 4.0 allows remote attackers to execute arbitrary SQL commands v

23RISK

open ↗

Referência✓ VexDay Proof

CaupoShop Pro 2.x - 'action' Remote File Inclusion

CVE-2007-5784—webappsphp

PHP remote file inclusion vulnerability in index.php in CaupoShop Pro 2.x allows remote attackers to execute arbitrary P

23RISK

open ↗

Referência✓ VexDay Proof

ASPilot Pilot Cart 7.3 - 'article' SQL Injection

CVE-2008-2688—webappsasp

SQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL comm

23RISK

open ↗

Referência✓ VexDay Proof

Softbiz Link Directory Script - SQL Injection

CVE-2007-5996—webappsphp

SQL injection vulnerability in searchresult.php in Softbiz Link Directory Script allows remote attackers to execute arbi

23RISK

open ↗

Referência✓ VexDay Proof

ClipShare < 3.0.1 - 'tid' SQL Injection

CVE-2008-2793—webappsphp

SQL injection vulnerability in group_posts.php in ClipShare before 3.0.1 allows remote attackers to execute arbitrary SQ

23RISK

open ↗

Referência✓ VexDay Proof

doITlive CMS 2.50 - SQL Injection / Cross-Site Scripting

CVE-2008-2842—webappsasp

Cross-site scripting (XSS) vulnerability in edit/showmedia.asp in doITLive CMS 2.50 and earlier allows remote attackers

23RISK

open ↗

Referência✓ VexDay Proof

BoatScripts Classifieds - 'type' SQL Injection

CVE-2008-2846—webappsphp

SQL injection vulnerability in index.php in BoatScripts Classifieds allows remote attackers to execute arbitrary SQL com

23RISK

open ↗

Referência✓ VexDay Proof

ResearchGuide 0.5 - 'id' SQL Injection

CVE-2008-2964—webappsphp

SQL injection vulnerability in guide.php in ResearchGuide 0.5 allows remote attackers to execute arbitrary SQL commands

23RISK

open ↗

Referência✓ VexDay Proof

Softbiz Ad Management plus Script 1 - SQL Injection

CVE-2007-5998—webappsphp

SQL injection vulnerability in ads.php in Softbiz Ad Management plus Script 1 allows remote authenticated users to execu

23RISK

open ↗

Referência✓ VexDay Proof

IceBB 1.0-rc6 - Remote Database Authentication Details

CVE-2007-6083—webappsphp

SQL injection vulnerability in admin/index.php in IceBB 1.0-rc6 allows remote attackers to execute arbitrary SQL command

23RISK

open ↗

Referência✓ VexDay Proof

project alumni 1.0.9 - Cross-Site Scripting / SQL Injection

CVE-2007-6126—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to inject

23RISK

open ↗

Referência✓ VexDay Proof

WorkingOnWeb 2.0.1400 - 'events.php' SQL Injection

CVE-2007-6128—webappsphp

SQL injection vulnerability in events.php in WorkingOnWeb 2.0.1400 allows remote attackers to execute arbitrary SQL comm

23RISK

open ↗

Referência✓ VexDay Proof

Content Injector 1.52 - 'index.php?cat' SQL Injection

CVE-2007-6137—webappsphp

SQL injection vulnerability in news.php in Content Injector 1.52 allows remote attackers to execute arbitrary SQL comman

23RISK

open ↗

Referência✓ VexDay Proof

Debian OpenSSH - (Authenticated) Remote SELinux Privilege Escalation

CVE-2008-3234—remotelinux

sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain ac

23RISK

open ↗

Referência✓ VexDay Proof

IAPR COMMENCE 1.3 - Multiple Remote File Inclusions

CVE-2007-6147—webappsphp

Multiple PHP remote file inclusion vulnerabilities in IAPR COMMENCE 1.3 allow remote attackers to execute arbitrary PHP

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.