Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,230cataloged exploits
36,424CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,465Referência 23,022GitHub PoC 15,031VulnCheck XDB 8,860Nuclei 4,361Metasploit 3,491✓ verified onlyrecentpopularrisk
24,695 exploits
Exploit-DB✓ VexDay Proof
MHonArc 2.6.16 - Tag Nesting Remote Denial of Service
CVE-2010-1677—doslinux21 Dec 2010
MHonArc 2.6.16 allows remote attackers to cause a denial of service (CPU consumption) via start tags that are placed wit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft SQL Server - Payload Execution (Metasploit)
CVE-2000-1209—remotewindows21 Dec 2010
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3)
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft SQL Server - Payload Execution (Metasploit)
CVE-2000-0402—remotewindows21 Dec 2010
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in pla
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JotLoader 2.2.1 - Local File Inclusion
CVE-2010-4617—webappsphp20 Dec 2010
Directory traversal vulnerability in the JotLoader (com_jotloader) component 2.2.1 for Joomla! allows remote attackers t
38RISK
open ↗
Exploit-DB✓ VexDay Proof
Mafya Oyun Scrpti - 'profil.php' SQL Injection
CVE-2010-4619—webappsphp20 Dec 2010
SQL injection vulnerability in profil.php in Mafya Oyun Scrpti (aka Mafia Game Script) allows remote attackers to execut
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Oto Galery 1.0 - Multiple SQL Injections
CVE-2010-4615—webappsasp19 Dec 2010
Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow remote attackers to execute arbitrary SQL command
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Redmine SCM Repository - Arbitrary Command Execution (Metasploit)
CVE-2011-4929—remotelinux19 Dec 2010
Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and 1.0.x before 1.0.5 allows remote attacke
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Ecava IntegraXor Remote - ActiveX Buffer Overflow (PoC)
CVE-2010-4597—doswindows18 Dec 2010
Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraX
28RISK
open ↗
Exploit-DB✓ VexDay Proof
PayPal Shop Digital - SQL Injection
CVE-2010-4846—webappsphp18 Dec 2010
SQL injection vulnerability in view_item.php in MH Products Pay Pal Shop Digital allows remote attackers to execute arbi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Linux Kernel < 2.6.37-rc2 - 'ACPI custom_method' Local Privilege Escalation
CVE-2010-4347—locallinux18 Dec 2010
The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Mafia Game Script - SQL Injection
CVE-2010-4619—webappsphp18 Dec 2010
SQL injection vulnerability in profil.php in Mafya Oyun Scrpti (aka Mafia Game Script) allows remote attackers to execut
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Ero Auktion 2010 - 'item.php' SQL Injection
CVE-2010-4614—webappsphp18 Dec 2010
SQL injection vulnerability in item.php in Ero Auktion 2010 allows remote attackers to execute arbitrary SQL commands vi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Download Center 2.2 - SQL Injection
CVE-2010-4842—webappsphp18 Dec 2010
SQL injection vulnerability in admin/login.php in MHP DownloadScript (aka MH Products Download Center) 2.2 allows remote
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Projekt Shop - 'details.php' Multiple SQL Injections
CVE-2010-4845—webappsphp18 Dec 2010
Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL comma
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Linux Kernel < 2.6.37-rc2 - 'ACPI custom_method' Local Privilege Escalation
CVE-2011-1021—locallinux18 Dec 2010
drivers/acpi/debugfs.c in the Linux kernel before 3.0 allows local users to modify arbitrary kernel memory locations by
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MHP Downloadshop - SQL Injection
CVE-2010-4847—webappsphp17 Dec 2010
SQL injection vulnerability in view_item.php in MH Products MHP Downloadshop allows remote attackers to execute arbitrar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Radius Manager 3.6 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2010-4275—webappsphp17 Dec 2010
Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators to
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Immo Makler Script - SQL Injection
CVE-2010-4721—webappsphp17 Dec 2010
SQL injection vulnerability in news.php in Immo Makler allows remote attackers to execute arbitrary SQL commands via the
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Easy Online Shop - SQL Injection
CVE-2010-4844—webappsphp17 Dec 2010
SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Win32k Pointer Dereferencement (PoC) (MS10-098)
CVE-2010-3944—doswindows_x8617 Dec 2010
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user-
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Exim4 < 4.69 - string_format Function Heap Buffer Overflow (Metasploit)
CVE-2010-4345HIGHunder attackremotelinux16 Dec 2010
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specif
91RISK
open ↗
Exploit-DB✓ VexDay Proof
Exim4 < 4.69 - string_format Function Heap Buffer Overflow (Metasploit)
CVE-2010-4344CRITICALunder attackremotelinux16 Dec 2010
Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to exe
100RISK
open ↗
Exploit-DB✓ VexDay Proof
Altap Salamander 2.5 PE Viewer - Local Buffer Overflow (Metasploit)
CVE-2007-3314—localwindows16 Dec 2010
Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (Englis
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Adobe PDF - Escape EXE Social Engineering (No JavaScript) (Metasploit)
CVE-2010-1240—localwindows16 Dec 2010
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Adobe PDF - Embedded EXE Social Engineering (Metasploit)
CVE-2010-1240—localwindows16 Dec 2010
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JRadio - Local File Inclusion
CVE-2010-4719—webappsphp16 Dec 2010
Directory traversal vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to r
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 8 - CSS Parser
CVE-2010-3971—remotewindows15 Dec 2010
Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in msh
60RISK
open ↗
Exploit-DB✓ VexDay Proof
HP Insight Diagnostics Online Edition 8.4 - 'search.php' Cross-Site Scripting
CVE-2010-4111—webappsphp15 Dec 2010
Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.1.3712 allows remote attack
23RISK
open ↗
Exploit-DB✓ VexDay Proof
IBM Tivoli Storage Manager (TSM) - Local Privilege Escalation
CVE-2010-4604—locallinux15 Dec 2010
Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in
23RISK
open ↗
Exploit-DB✓ VexDay Proof
gitWeb 1.7.3.3 - Cross-Site Scripting
CVE-2010-3906—webappscgi15 Dec 2010
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web s
23RISK
open ↗
← previouspage 165 / 824next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.