Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

84,150cataloged exploits

39,601CVEs with public exploitation

24,695lab-tested

All Referência 25,629Exploit-DB 24,485GitHub PoC 16,343VulnCheck XDB 9,680Nuclei 4,488Metasploit 3,525✓ verified onlyrecent popular risk

5,629 exploits

Referência✓ VexDay Proof

CMS Frogss 0.4 - 'podpis' SQL Injection

CVE-2006-4536—webappsphp

SQL injection vulnerability in module/rejestracja.php in CMS Frogss 0.4 and earlier allows remote attackers to execute a

23RISK

open ↗

Referência✓ VexDay Proof

Mambo Component Shambo2 - 'itemID' SQL Injection

CVE-2008-0606—webappsphp

SQL injection vulnerability in index.php in the Shambo2 (com_shambo2) component for Mambo and Joomla! allows remote atta

23RISK

open ↗

Referência✓ VexDay Proof

Active Test 2.1 - Authentication Bypass

CVE-2008-5959—webappsasp

Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL c

23RISK

open ↗

Referência✓ VexDay Proof

Active Price Comparison 4 - Authentication Bypass

CVE-2008-5974—webappsasp

Multiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to execute ar

23RISK

open ↗

Referência✓ VexDay Proof

WordPress Plugin dmsguestbook 1.7.0 - Multiple Vulnerabilities

CVE-2008-0616—webappsphp

SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote aut

23RISK

open ↗

Referência✓ VexDay Proof

ICQ Toolbar 2.3 - ActiveX Remote Denial of Service

CVE-2008-7136—doswindows

toolbaru.dll in ICQ Toolbar (ICQToolbar) 2.3 allows remote attackers to cause a denial of service (toolbar crash) via a

23RISK

open ↗

Referência✓ VexDay Proof

MemHT Portal 3.9.0 - Remote Create Shell

CVE-2008-4164—webappsphp

cron.php in MemHT Portal 3.9.0 and earlier allows remote attackers to obtain sensitive information via a direct request,

23RISK

open ↗

Referência✓ VexDay Proof

dBpowerAMP Audio Player 2 - '.m3u' Remote Buffer Overflow

CVE-2008-0661—remotewindows

Buffer overflow in dBpowerAMP Audio Player Release 2 allows remote attackers to execute arbitrary code via a .M3U file w

23RISK

open ↗

Referência✓ VexDay Proof

barcodegen 2.0.0 - Local File Inclusion

CVE-2008-5993—webappsphp

Directory traversal vulnerability in image.php in Barcode Generator 1D (barcodegen) 2.0.0 and earlier allows remote atta

23RISK

open ↗

Referência✓ VexDay Proof

Joomla! Component com_noticias 1.0 - SQL Injection

CVE-2008-0670—webappsphp

SQL injection vulnerability in index.php in the Noticias (com_noticias) 1.0 component for Joomla! allows remote attacker

23RISK

open ↗

Referência✓ VexDay Proof

BookMarks Favourites Script - 'id' SQL Injection

CVE-2008-6007—webappsphp

SQL injection vulnerability in view_group.php in QuidaScript BookMarks Favourites Script (APB) allows remote attackers t

23RISK

open ↗

Referência✓ VexDay Proof

SG Real Estate Portal 2.0 - Blind SQL Injection / Local File Inclusion

CVE-2008-6011—webappsphp

SQL injection vulnerability in index.php in SG Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL c

23RISK

open ↗

Referência✓ VexDay Proof

PHP-revista 1.1.2 - Remote File Inclusion / SQL Injection / Authentication Bypass / Cross-Site Scripting

CVE-2006-4607—webappsphp

admin/index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to bypass authentication controls by setting

23RISK

open ↗

Referência✓ VexDay Proof

Thecus N5200Pro NAS Server Control Panel - Remote File Inclusion

CVE-2008-0804—remotehardware

PHP remote file inclusion vulnerability in usrgetform.html in Thecus N5200Pro NAS Server allows remote attackers to exec

23RISK

open ↗

Referência✓ VexDay Proof

Joomla! Component astatsPRO 1.0 - 'refer.php' SQL Injection

CVE-2008-0839—webappsphp

SQL injection vulnerability in refer.php in the astatsPRO (com_astatspro) 1.0 component for Joomla! allows remote attack

23RISK

open ↗

Referência✓ VexDay Proof

AvailScript Article Script - 'articles.php' Multiple Vulnerabilities

CVE-2008-4371—webappsphp

SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary S

23RISK

open ↗

Referência✓ VexDay Proof

BuzzyWall 1.3.1 - 'search' SQL Injection

CVE-2008-6029—webappsphp

SQL injection vulnerability in search.php in BuzzyWall 1.3.1 and earlier, when magic_quotes_gpc is disabled, allows remo

23RISK

open ↗

Referência✓ VexDay Proof

RiotPix 0.61 - 'forumid' Blind SQL Injection

CVE-2009-0110—webappsphp

SQL injection vulnerability in read.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL com

23RISK

open ↗

Referência✓ VexDay Proof

DBHcms 1.1.4 - 'code' Remote File Inclusion

CVE-2008-1038—webappsphp

PHP remote file inclusion vulnerability in mod/mod.extmanager.php in DBHcms 1.1.4 and earlier allows remote attackers to

23RISK

open ↗

Referência✓ VexDay Proof

cmreams CMS 1.3.1.1 beta2 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2985—webappsphp

Directory traversal vulnerability in load_language.php in CMReams CMS 1.3.1.1 Beta 2, when register_globals is enabled,

23RISK

open ↗

Referência✓ VexDay Proof

Vastal I-Tech Dating Zone - 'fage' SQL Injection

CVE-2008-4461—webappsphp

SQL injection vulnerability in advanced_search_results.php in Vastal I-Tech Dating Zone, possibly 0.9.9, allows remote a

23RISK

open ↗

Referência✓ VexDay Proof

PHPBandManager 0.8 - 'index.php?pg' Remote File Inclusion

CVE-2007-2341—webappsphp

PHP remote file inclusion vulnerability in suite/index.php in phpBandManager 0.8 allows remote attackers to execute arbi

23RISK

open ↗

Referência✓ VexDay Proof

PHPUserBase 1.3b - 'unverified.inc.php' Remote File Inclusion

CVE-2008-1043—webappsphp

PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop (LWS) php User Base 1.3 BE

35RISK

open ↗

Referência✓ VexDay Proof

Joomla! Component FacileForms 1.4.4 - Remote File Inclusion

CVE-2008-2990—webappsphp

PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms (com_facileforms) component 1.4.4 fo

23RISK

open ↗

Referência✓ VexDay Proof

PHP Realtor 1.5 - 'v_cat' SQL Injection

CVE-2008-4496—webappsphp

SQL injection vulnerability in view_cat.php in PHP Realtor 1.5 allows remote attackers to execute arbitrary SQL commands

23RISK

open ↗

Referência✓ VexDay Proof

PHP-Nuke Module Kose_Yazilari - 'artid' SQL Injection

CVE-2008-1053—webappsphp

Multiple SQL injection vulnerabilities in the Kose_Yazilari module for PHP-Nuke allow remote attackers to execute arbitr

23RISK

open ↗

Referência✓ VexDay Proof

WSN Links Free 4.0.34P - 'comments.php' Blind SQL Injection

CVE-2008-6032—webappsphp

SQL injection vulnerability in comments.php in WSN Links Free 4.0.34P allows remote attackers to execute arbitrary SQL c

23RISK

open ↗

Referência✓ VexDay Proof

Microsoft HTML Workshop 4.74 - Universal Buffer Overflow

CVE-2009-0133—localwindows

Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary

50RISK

open ↗

Referência✓ VexDay Proof

Galerie 3.2 - 'pic' WBB Lite Addon Blind SQL Injection

CVE-2008-4516—webappsphp

SQL injection vulnerability in galerie.php in Galerie 3.2 allows remote attackers to execute arbitrary SQL commands via

23RISK

open ↗

Referência✓ VexDay Proof

basebuilder 2.0.1 - 'main.inc.php' Remote File Inclusion

CVE-2008-6036—webappsphp

PHP remote file inclusion vulnerability in main.inc.php in BaseBuilder 2.0.1 and earlier allows remote attackers to exec

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.