Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,230cataloged exploits
36,424CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,465Referência 23,022GitHub PoC 15,031VulnCheck XDB 8,860Nuclei 4,361Metasploit 3,491✓ verified onlyrecentpopularrisk
24,695 exploits
Exploit-DB✓ VexDay Proof
CiscoWorks Common Services Framework 3.1.1 Help Servlet - Cross-Site Scripting
CVE-2011-0961—remotehardware18 May 2011
Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Common Service
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Cisco Unified Operations Manager - Multiple Vulnerabilities
CVE-2011-0960—remotewindows18 May 2011
Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to e
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Cisco Unified Operations Manager - Multiple Vulnerabilities
CVE-2011-0962—remotewindows18 May 2011
Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services Dev
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Cisco Unified Operations Manager 8.5 - Common Services Device Center Cross-Site Scripting
CVE-2011-0962—remotehardware18 May 2011
Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services Dev
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Cisco Unified Operations Manager - Multiple Vulnerabilities
CVE-2011-0959—remotewindows18 May 2011
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote a
28RISK
open ↗
Exploit-DB✓ VexDay Proof
TWiki 5.0.1 - 'origurl' Cross-Site Scripting
CVE-2011-1838—webappsphp18 May 2011
Multiple cross-site scripting (XSS) vulnerabilities in TemplateLogin.pm in TWiki before 5.0.2 allow remote attackers to
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Cisco Unified Operations Manager - Multiple Vulnerabilities
CVE-2011-0966—remotewindows18 May 2011
Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Serv
35RISK
open ↗
Exploit-DB✓ VexDay Proof
CiscoWorks Common Services 3.1.1 - Auditing Directory Traversal
CVE-2011-0966—webappsjava18 May 2011
Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Serv
35RISK
open ↗
Exploit-DB✓ VexDay Proof
klibc 1.5.2 - DHCP Options Processing Remote Shell Command Execution
CVE-2011-1930—remotelinux18 May 2011
In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped. This
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Cisco Unified Operations Manager - Multiple Vulnerabilities
CVE-2011-0961—remotewindows18 May 2011
Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Common Service
23RISK
open ↗
Exploit-DB✓ VexDay Proof
7-Technologies IGSS 9.00.00 b11063 - 'IGSSdataServer.exe' Remote Stack Overflow (Metasploit)
CVE-2011-1567—remotewindows16 May 2011
Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Grap
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Adobe Audition 3.0 build 7283 - Session File Handling Buffer Overflow (PoC)
CVE-2011-0614—doswindows13 May 2011
Buffer overflow in Adobe Audition 3.0.1 and earlier allows remote attackers to cause a denial of service (memory corrupt
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Apache 1.4/2.2.x - APR 'apr_fnmatch()' Denial of Service
CVE-2011-0419—doslinux12 May 2011
Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) libr
35RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle GlassFish Server - Administration Console Authentication Bypass
CVE-2011-1511—webappswindows12 May 2011
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 and 3.0.1 allows r
28RISK
open ↗
Exploit-DB✓ VexDay Proof
ICONICS WebHMI - ActiveX Buffer Overflow (Metasploit)
CVE-2011-2089—remotewindows10 May 2011
Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Apache Struts 2.0.0 < 2.2.1.1 - XWork 's:submit' HTML Tag Cross-Site Scripting
CVE-2011-1772—remotemultiple10 May 2011
Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork i
35RISK
open ↗
Exploit-DB✓ VexDay Proof
ICONICS WebHMI - ActiveX Stack Overflow
CVE-2011-2089—remotewindows03 May 2011
Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Perl 5.10 - Multiple Null Pointer Dereference Denial of Service Vulnerabilities
CVE-2011-0761—dosmultiple03 May 2011
Perl 5.10.x allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application cr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
OProfile 0.9.6 - 'opcontrol' Utility 'set_event()' Local Privilege Escalation
CVE-2011-1760—locallinux29 Apr 2011
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privile
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Excel - Axis Properties Record Parsing Buffer Overflow (PoC) (MS11-02)
CVE-2011-0978—doswindows29 Apr 2011
Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2;
35RISK
open ↗
Exploit-DB✓ VexDay Proof
Libmodplug 0.8.8.2 - '.abc' Stack Buffer Overflow (PoC)
CVE-2011-1761—doslinux28 Apr 2011
Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions in src/load_abc.cpp in l
28RISK
open ↗
Exploit-DB✓ VexDay Proof
EMC HomeBase Server - Directory Traversal Remote Code Execution (Metasploit)
CVE-2010-0620—remotewindows27 Apr 2011
Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 al
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Cisco Unified Communications Manager 8.5 - 'xmldirectorylist.jsp' Multiple SQL Injections
CVE-2011-1609—webappsjsp27 Apr 2011
SQL injection vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su
28RISK
open ↗
Exploit-DB✓ VexDay Proof
eZip Wizard 3.0 - Local Stack Buffer Overflow (Metasploit)
CVE-2009-1028—localwindows25 Apr 2011
Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .z
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/JASMafletMafBrowserClose.mafService?jdemafjasLinkTarget' Cross-Site Scripting
CVE-2011-0836—remotemultiple19 Apr 2011
Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Wireshark 1.4.4 - 'packet-dect.c' Local Stack Buffer Overflow (Metasploit) (1)
CVE-2011-1591—localwindows19 Apr 2011
Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allow
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/E1Menu_Menu.mafService?e1.namespace' Cross-Site Scripting
CVE-2011-0836—remotemultiple19 Apr 2011
Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/E1Menu.maf?jdeowpBackButtonProtect' Cross-Site Scripting
CVE-2011-0836—remotemultiple19 Apr 2011
Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Wireshark 1.4.4 - 'packet-dect.c' Remote Stack Buffer Overflow (Metasploit) (2)
CVE-2011-1591—remotewindows19 Apr 2011
Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allow
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/E1Menu_OCL.mafService?e1.namespace' Cross-Site Scripting
CVE-2011-0836—remotemultiple19 Apr 2011
Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24
23RISK
open ↗
← previouspage 157 / 824next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.