Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,230cataloged exploits
36,424CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,465Referência 23,022GitHub PoC 15,031VulnCheck XDB 8,860Nuclei 4,361Metasploit 3,491✓ verified onlyrecentpopularrisk
24,695 exploits
Exploit-DB✓ VexDay Proof
SweetRice 0.6.7 - Multiple Vulnerabilities
CVE-2010-5318—webappsphp04 Nov 2010
The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to modify the adminis
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6/7/8 - Memory Corruption
CVE-2010-3962HIGHunder attackremotewindows04 Nov 2010
Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary cod
100RISK
open ↗
Exploit-DB✓ VexDay Proof
CA BrightStor ARCserve for Laptops & Desktops LGServer - Remote Buffer Overflow (Metasploit) (2)
CVE-2007-3216—remotewindows03 Nov 2010
Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops a
50RISK
open ↗
Exploit-DB✓ VexDay Proof
CA BrightStor ARCserve for Laptops & Desktops LGServer - Remote Buffer Overflow (Metasploit) (3)
CVE-2007-5003—remotewindows03 Nov 2010
Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r1
50RISK
open ↗
Exploit-DB✓ VexDay Proof
CA BrightStor ARCserve License Service - 'GCR NETWORK' Remote Buffer Overflow (Metasploit)
CVE-2005-0581—remotewindows03 Nov 2010
Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execu
50RISK
open ↗
Exploit-DB✓ VexDay Proof
digiSHOP 2.0.2 - SQL Injection
CVE-2010-4633—webappsphp03 Nov 2010
SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Cisco Unified Communications Manager 8.0 - Invalid Argument Privilege Escalation
CVE-2010-3039—localhardware03 Nov 2010
/usr/local/cm/bin/pktCap_protectData in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6, 7, and
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Webster HTTP Server - GET Buffer Overflow (Metasploit)
CVE-2002-2268—remotewindows03 Nov 2010
Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Site2Nite Business eListings - SQL Injection
CVE-2010-4636—webappsasp02 Nov 2010
SQL injection vulnerability in detail.asp in Site2Nite Business e-Listings allows remote attackers to execute arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
FUSE fusermount Tool - Race Condition
CVE-2010-3879—doslinux02 Nov 2010
FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently u
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apache Shiro - Directory Traversal
CVE-2010-3863—remotemultiple02 Nov 2010
Apache Shiro before 1.1.0, and JSecurity 0.9.x, does not canonicalize URI paths before comparing them to entries in the
35RISK
open ↗
Exploit-DB✓ VexDay Proof
Online Work Order System (OWOS) Professional Edition - Authentication Bypass
CVE-2010-4186—webappsasp02 Nov 2010
SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System (OWOS) Professional Edition 2.10
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Online Work Order Suite - Login SQL Injection
CVE-2010-4186—webappsphp02 Nov 2010
SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System (OWOS) Professional Edition 2.10
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Site2Ntite Vacation Rental (VRBO) Listings - SQL Injection
CVE-2010-4635—webappsasp02 Nov 2010
SQL injection vulnerability in detail.asp in Site2Nite Vacation Rental (VRBO) Listings allows remote attackers to execut
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Adobe Flash Player - 'Button' Arbitrary Code Execution (Metasploit)
CVE-2010-3654—localwindows01 Nov 2010
Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 o
50RISK
open ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin cformsII 11.5/13.1 - 'lib_ajax.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2010-3977—webappsphp01 Nov 2010
Multiple cross-site scripting (XSS) vulnerabilities in wp-content/plugins/cforms/lib_ajax.php in cforms WordPress plugin
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Pulse Infotech Flip Wall - SQL Injection
CVE-2010-4268—webappsphp31 Oct 2010
SQL injection vulnerability in the Pulse Infotech Flip Wall (com_flipwall) component 1.1 for Joomla! allows remote attac
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Sponsor Wall 1.1 - SQL Injection
CVE-2010-4272—webappsphp31 Oct 2010
SQL injection vulnerability in the Pulse Infotech Sponsor Wall (com_sponsorwall) component 1.1 for Joomla! allows remote
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox 3.6.8 < 3.6.11 - Interleaving 'document.write' / 'appendChild' Remote Overflow
CVE-2010-3765CRITICALunder attackremotewindows29 Oct 2010
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, a
100RISK
open ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox - Simplified Memory Corruption (PoC)
CVE-2010-3765CRITICALunder attackdosmultiple28 Oct 2010
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, a
100RISK
open ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox - Interleaving 'document.write' / 'appendChild' Denial of Service
CVE-2010-3765CRITICALunder attackdosmultiple28 Oct 2010
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, a
100RISK
open ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.36 - VIDIOCSMICROCODE IOCTL Local Memory Overwrite
CVE-2010-2963—locallinux28 Oct 2010
drivers/media/video/v4l2-compat-ioctl32.c in the Video4Linux (V4L) implementation in the Linux kernel before 2.6.36 on 6
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Alstrasoft e-Friends 4.96 - Multiple Vulnerabilities
CVE-2008-5751—webappsphp27 Oct 2010
SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attackers to exec
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Energine CMS - SQL Injection
CVE-2010-4185—webappsphp27 Oct 2010
SQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows remote attackers to execute arb
23RISK
open ↗
Exploit-DB✓ VexDay Proof
BloofoxCMS Registration Plugin - SQL Injection
CVE-2010-4870—webappsphp27 Oct 2010
SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands v
23RISK
open ↗
Exploit-DB✓ VexDay Proof
NinkoBB 1.3RC5 - Cross-Site Scripting
CVE-2010-4874—webappsphp27 Oct 2010
Multiple cross-site scripting (XSS) vulnerabilities in users.php in NinkoBB 1.3 RC5 allow remote attackers to inject arb
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DATAC RealWin SCADA Server 1.06 - Remote Buffer Overflow
CVE-2010-4142—remotewindows27 Oct 2010
Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a
50RISK
open ↗
Exploit-DB✓ VexDay Proof
ACC IMoveis 4.0 - SQL Injection
CVE-2010-4273—webappsphp27 Oct 2010
SQL injection vulnerability in imoveis.php in DescargarVista ACC IMoveis 1.1 allows remote attackers to execute arbitrar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
NitroView ESM - 'ess.pm' Remote Command Execution
CVE-2010-4099—remotelinux26 Oct 2010
ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary c
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Winamp 5.5.8.2985 (in_mod plugin) - Local Stack Overflow
CVE-2010-4371—localwindows25 Oct 2010
Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vect
23RISK
open ↗
← previouspage 172 / 824next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.