Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,230cataloged exploits
36,424CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,465Referência 23,022GitHub PoC 15,031VulnCheck XDB 8,860Nuclei 4,361Metasploit 3,491✓ verified onlyrecentpopularrisk
24,695 exploits
Exploit-DB✓ VexDay Proof
MySource Matrix - 'char_map.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2010-4901—webappsphp06 Sep 2010
Multiple cross-site scripting (XSS) vulnerabilities in char_map.php in MySource Matrix 3.28.3 allow remote attackers to
23RISK
open ↗
Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'webappmon.exe execvp_nc' Remote Code Execution
CVE-2010-2703—doswindows06 Sep 2010
Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM)
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 7/8 - CSS Handling Cross Domain Information Disclosure
CVE-2010-3325—doswindows06 Sep 2010
Microsoft Internet Explorer 6 through 8 does not properly handle unspecified special characters in Cascading Style Sheet
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Aardvertiser 2.1 - Blind SQL Injection
CVE-2010-4904—webappsphp06 Sep 2010
SQL injection vulnerability in the Aardvertiser (com_aardvertiser) component 2.1 and 2.1.1 for Joomla! allows remote att
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Micronetsoft RV Dealer Website - SQL Injection
CVE-2010-4919—webappsasp06 Sep 2010
SQL injection vulnerability in detail.asp in Micronetsoft RV Dealer Website 1.0 allows remote attackers to execute arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ChillyCMS 1.1.3 - Multiple Vulnerabilities
CVE-2010-4895—webappsphp05 Sep 2010
Cross-site scripting (XSS) vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft MPEG Layer-3 - Remote Command Execution
CVE-2010-0480—remotewindows05 Sep 2010
Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Se
50RISK
open ↗
Exploit-DB✓ VexDay Proof
DMXready Polling Booth Manager - SQL Injection
CVE-2010-4921—webappsasp05 Sep 2010
SQL injection vulnerability in inc_pollingboothmanager.asp in DMXReady Polling Booth Manager allows remote attackers to
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Softbiz Article Directory Script - 'sbiz_id' Blind SQL Injection
CVE-2010-4905—webappsphp05 Sep 2010
SQL injection vulnerability in article_details.php in Softbiz Article Directory Script allows remote attackers to execut
23RISK
open ↗
Exploit-DB✓ VexDay Proof
A-Blog 2.0 - '/sources/search.php' SQL Injection
CVE-2010-4917—webappsphp05 Sep 2010
SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote attackers to execute arbitrary SQL command
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ChillyCMS 1.1.3 - Multiple Vulnerabilities
CVE-2010-4894—webappsphp05 Sep 2010
SQL injection vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to execute arbitrary SQL com
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Samba 3.3.12 (Linux x86) - 'chain_reply' Memory Corruption (Metasploit)
CVE-2010-2063—remotelinux_x8604 Sep 2010
Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Movie Maker - Remote Code Execution (MS10-016)
CVE-2010-0265—remotewindows04 Sep 2010
Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers
28RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP Classifieds ADS - 'sid' Blind SQL Injection
CVE-2010-4911—webappsphp04 Sep 2010
SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL
23RISK
open ↗
Exploit-DB✓ VexDay Proof
NuSOAP 0.9.5 - 'nusoap.php' Cross-Site Scripting
CVE-2010-3070—webappsphp03 Sep 2010
Cross-site scripting (XSS) vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attacker
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple QuickTime FlashPix NumberOfTiles - Remote Code Execution
CVE-2010-0519—doswindows02 Sep 2010
Integer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause
23RISK
open ↗
Exploit-DB✓ VexDay Proof
CMS WebManager-Pro - 'c.php' SQL Injection
CVE-2010-4899—webappsphp02 Sep 2010
SQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to execute arbitrary SQL c
23RISK
open ↗
Exploit-DB✓ VexDay Proof
OneCMS 2.6.1 - 'index.php' Cross-Site Scripting
CVE-2010-4877—webappsphp02 Sep 2010
Cross-site scripting (XSS) vulnerability in index.php in OneCMS 2.6.1 allows remote attackers to inject arbitrary web sc
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Adobe Acrobat Reader and Flash Player - 'newclass' Invalid Pointer
CVE-2010-1297HIGHunder attackremotewindows01 Sep 2010
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrob
100RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JE FAQ Pro 1.5.0 - Multiple Blind SQL Injections
CVE-2010-3211—webappsphp31 Aug 2010
Multiple SQL injection vulnerabilities in the JE FAQ Pro (com_jefaqpro) component 1.5.0 for Joomla! allow remote attacke
23RISK
open ↗
Exploit-DB✓ VexDay Proof
HP Insight Diagnostics Online Edition 8.4 - 'globals.php?tabpage' Cross-Site Scripting
CVE-2010-3003—webappsphp31 Aug 2010
Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.0-11 on Linux allows remote
23RISK
open ↗
Exploit-DB✓ VexDay Proof
mBlogger 1.0.04 - 'viewpost.php' SQL Injection
CVE-2010-4876—webappsphp31 Aug 2010
SQL injection vulnerability in viewpost.php in mBlogger 1.0.04 allows remote attackers to execute arbitrary SQL commands
23RISK
open ↗
Exploit-DB✓ VexDay Proof
HP Insight Diagnostics Online Edition 8.4 - 'survey.php?category' Cross-Site Scripting
CVE-2010-3003—webappsphp31 Aug 2010
Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.0-11 on Linux allows remote
23RISK
open ↗
Exploit-DB✓ VexDay Proof
HP Insight Diagnostics Online Edition 8.4 - 'idstatusframe.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2010-3003—webappsphp31 Aug 2010
Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.0-11 on Linux allows remote
23RISK
open ↗
Exploit-DB✓ VexDay Proof
HP Insight Diagnostics Online Edition 8.4 - 'parameters.php?device' Cross-Site Scripting
CVE-2010-3003—webappsphp31 Aug 2010
Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.0-11 on Linux allows remote
23RISK
open ↗
Exploit-DB✓ VexDay Proof
HP Insight Diagnostics Online Edition 8.4 - 'custom.php?testmode' Cross-Site Scripting
CVE-2010-3003—webappsphp31 Aug 2010
Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.0-11 on Linux allows remote
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Plug and Play Service - Overflow (MS05-039) (Metasploit)
CVE-2005-1983—doswindows30 Aug 2010
Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple QuickTime - '_Marshaled_pUnk' Backdoor Client-Side Arbitrary Code Execution
CVE-2010-1818—doswindows30 Aug 2010
The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions all
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component PicSell 1.0 - Local File Disclosure
CVE-2010-3203—webappsphp30 Aug 2010
Directory traversal vulnerability in the PicSell (com_picsell) component 1.0 for Joomla! allows remote attackers to read
38RISK
open ↗
Exploit-DB✓ VexDay Proof
Seagull 0.6.7 - SQL Injection
CVE-2010-3212—webappsphp29 Aug 2010
SQL injection vulnerability in index.php in Seagull 0.6.7 and earlier allows remote attackers to execute arbitrary SQL c
23RISK
open ↗
← previouspage 183 / 824next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.