Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,508cataloged exploits

40,258CVEs with public exploitation

24,696lab-tested

All Referência 26,095Exploit-DB 24,488GitHub PoC 17,831VulnCheck XDB 10,015Nuclei 4,547Metasploit 3,532✓ verified onlyrecent popular risk

5,629 exploits

Referência✓ VexDay Proof

phpBB Mod FileBase 2.0 - 'id' SQL Injection

CVE-2008-1305—webappsphp

SQL injection vulnerability in filebase.php in the Filebase mod for phpBB allows remote attackers to execute arbitrary S

23RISK

open ↗

Referência✓ VexDay Proof

Remote Mouse GUI 3.008 - Local Privilege Escalation

CVE-2021-35448—localwindows

Emote Interactive Remote Mouse 3.008 on Windows allows attackers to execute arbitrary programs as Administrator by using

23RISK

open ↗

Referência✓ VexDay Proof

EasyCalendar 4.0tr - Multiple Vulnerabilities

CVE-2008-1345—webappsphp

Cross-site scripting (XSS) vulnerability in plugins/calendar/calendar_backend.php in MyioSoft EasyCalendar 4.0tr and ear

23RISK

open ↗

Referência✓ VexDay Proof

vuBB 0.2 Final - 'cookie' SQL Injection

CVE-2006-0962—webappsphp

SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass parameter

23RISK

open ↗

Referência✓ VexDay Proof

Apple QuickTime 7.2/7.3 (OSX/Windows) - RSTP Response Universal

CVE-2002-0252—remotemultiple

Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a respon

28RISK

open ↗

Referência✓ VexDay Proof

crossfire-server 1.9.0 - 'SetUp()' Remote Buffer Overflow

CVE-2006-1236—remotelinux

Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrar

28RISK

open ↗

Referência✓ VexDay Proof

PHP Ticket 0.71 - 'search.php' SQL Injection

CVE-2006-1481—webappsphp

SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL

23RISK

open ↗

Referência✓ VexDay Proof

Crafty Syntax Image Gallery 3.1g - Remote Code Execution

CVE-2006-1668—webappsphp

newimage.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka PHP thumbnail Photo Gallery) 3.1g and earlier allows

23RISK

open ↗

Referência✓ VexDay Proof

Digital WebShop 1.128 - Multiple Remote File Inclusions

CVE-2006-4945—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Cardway (aka Frederic Boudaud) DigitalWebShop 1.128 and earlier al

23RISK

open ↗

Referência✓ VexDay Proof

BCWB 0.99 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-4946—webappsphp

PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder (BCWB) 0.

23RISK

open ↗

Referência✓ VexDay Proof

WSN Links Basic Edition - 'catid' SQL Injection

CVE-2007-3981—webappsphp

SQL injection vulnerability in index.php in WSN Links Basic Edition allows remote attackers to execute arbitrary SQL com

23RISK

open ↗

Referência✓ VexDay Proof

TopList 1.3.8 - 'phpBB Hack' Remote File Inclusion (2)

CVE-2006-2151—webappsphp

PHP remote file inclusion vulnerability in toplist.php in phpBB TopList 1.3.8 and earlier, when register_globals is enab

28RISK

open ↗

Referência✓ VexDay Proof

X7 Chat 2.0 - 'help_file' Remote Command Execution

CVE-2006-2156—webappsphp

Directory traversal vulnerability in help/index.php in X7 Chat 2.0 and earlier allows remote attackers to include arbitr

23RISK

open ↗

Referência✓ VexDay Proof

ACal 2.2.6 - 'day.php' Remote File Inclusion

CVE-2006-2261—webappsphp

PHP remote file inclusion vulnerability in day.php in ACal 2.2.6 allows remote attackers to execute arbitrary PHP code v

23RISK

open ↗

Referência✓ VexDay Proof

GeekLog 1.4.0sr3 - 'f(u)ckeditor' Remote Code Execution

CVE-2006-3362—webappsphp

Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) G

23RISK

open ↗

Referência✓ VexDay Proof

BXCP 0.3.0.4 - 'where' SQL Injection

CVE-2006-3394—webappsphp

SQL injection vulnerability in the files mod in index.php in BXCP 0.3.0.4 allows remote attackers to execute arbitrary S

23RISK

open ↗

Referência✓ VexDay Proof

Mambo Component User Home Pages 0.5 - Remote File Inclusion

CVE-2006-3995—webappsphp

Multiple PHP remote file inclusion vulnerabilities in (1) uhp_config.php, and possibly (2) footer.php, (3) functions.php

28RISK

open ↗

Referência✓ VexDay Proof

MyBloggie 2.1.4 - 'trackback.php' Multiple SQL Injections

CVE-2006-4042—webappsphp

Multiple SQL injection vulnerabilities in trackback.php in myWebland myBloggie 2.1.4 and earlier allow remote attackers

23RISK

open ↗

Referência✓ VexDay Proof

NES Game and NES System c108122 - Remote File Inclusion

CVE-2006-4287—webappsphp

Multiple PHP remote file inclusion vulnerabilities in NES Game and NES System c108122 and earlier allow remote attackers

28RISK

open ↗

Referência✓ VexDay Proof

PHlyMail Lite 3.4.4 - 'mod.listmail.php' Remote File Inclusion

CVE-2006-4291—webappsphp

PHP remote file inclusion vulnerability in handlers/email/mod.listmail.php in PHlyMail Lite 3.4.4 and earlier (Build 3.0

23RISK

open ↗

Referência✓ VexDay Proof

TinyPHP Forum 3.6 - 'profile.php' Remote Code Execution

CVE-2006-7063—webappsphp

Directory traversal vulnerability in profile.php in TinyPHPforum 3.6 and earlier allows remote attackers to include and

23RISK

open ↗

Referência✓ VexDay Proof

PHPartenaire 1.0 - 'dix.php3' Remote File Inclusion

CVE-2006-5032—webappsphp

PHP remote file inclusion vulnerability in dix.php3 in PHPartenaire 1.0 allows remote attackers to execute arbitrary PHP

23RISK

open ↗

Referência✓ VexDay Proof

Joomla! Component Joomlaboard 1.1.1 - 'sbp' Remote File Inclusion

CVE-2006-5043—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the Joomlaboard Forum Component (com_joomlaboard) before 1.1.2 for

23RISK

open ↗

Referência✓ VexDay Proof

Millewin 13.39.146.1 - Local Privilege Escalation

CVE-2021-3394—localwindows

Millennium Millewin (also known as "Cartella clinica") 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder per

23RISK

open ↗

Referência✓ VexDay Proof

Microsoft Office 2003 - '.PPT' Local Buffer Overflow (PoC)

CVE-2006-5296—doswindows

PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record

28RISK

open ↗

Referência✓ VexDay Proof

phpBB lat2cyr Mod 1.0.1 - 'lat2cyr.php' Remote File Inclusion

CVE-2006-5305—webappsphp

PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attac

23RISK

open ↗

Referência✓ VexDay Proof

Open Meetings Filing Application - Remote File Inclusion

CVE-2006-5517—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application (OMFA) allow remote

28RISK

open ↗

Referência✓ VexDay Proof

phpDynaSite 3.2.2 - 'racine' Remote File Inclusion

CVE-2006-5760—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpDynaSite 3.2.2 and earlier allow remote attackers to execute ar

23RISK

open ↗

Referência✓ VexDay Proof

iPrimal Forums - '/admin/index.php' Remote File Inclusion

CVE-2006-5788—webappsphp

PHP remote file inclusion vulnerability in (1) index.php and (2) admin/index.php in IPrimal Forums as of 20061105 allows

23RISK

open ↗

Referência✓ VexDay Proof

Evince Document Viewer - 'DocumentMedia' Remote Buffer Overflow

CVE-2006-5864—remotelinux

Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows u

28RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.