Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,230cataloged exploits
36,424CVEs with public exploitation
24,695lab-tested
24,695 exploits
Exploit-DBVexDay Proof
Microsoft Windows - nt!SeObjectCreateSaclAccessBits() Missed ACE Bounds Checks (MS10-047)
CVE-2010-1890doswindows17 Aug 2010
The kernel in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properl
23RISK
open
Exploit-DBVexDay Proof
Microsoft Internet Explorer 8 - 'toStaticHTML()' HTML Sanitization Bypass
CVE-2010-3324remotewindows16 Aug 2010
The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Se
28RISK
open
Exploit-DBVexDay Proof
Joomla! Component Weblinks - 'Itemid' SQL Injection
CVE-2010-4938webappsphp15 Aug 2010
SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbit
23RISK
open
Exploit-DBVexDay Proof
Acrobat Acrobat - Font Parsing Integer Overflow
CVE-2010-2862doswindows14 Aug 2010
Integer overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3, allows remote attackers to execute
28RISK
open
Exploit-DBVexDay Proof
Adobe ColdFusion - Directory Traversal
CVE-2010-2861CRITICALunder attackransomwareremotemultiple14 Aug 2010
Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow re
100RISK
open
Exploit-DBVexDay Proof
CA Advantage Ingres 2.6 - Multiple Buffer Overflow Vulnerabilities (PoC)
CVE-2007-3336doswindows14 Aug 2010
Multiple "pointer overwrite" vulnerabilities in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple
23RISK
open
Exploit-DBVexDay Proof
Microsoft Windows - ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP) (MS07-017) (Metasploit)
CVE-2007-0038remotewindows12 Aug 2010
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attack
60RISK
open
Exploit-DBVexDay Proof
Rock Band CMS 0.10 - 'news.php' Multiple SQL Injections (2)
CVE-2009-3252webappsphp12 Aug 2010
Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL
23RISK
open
Exploit-DBVexDay Proof
Joomla! Component Amblog 1.0 - Multiple SQL Injections
CVE-2010-4937webappsphp10 Aug 2010
Multiple SQL injection vulnerabilities in the Amblog (com_amblog) component 1.0 for Joomla! allow remote attackers to ex
23RISK
open
Exploit-DBVexDay Proof
Microsoft - SMB Server Trans2 Zero Size Pool Alloc (MS10-054)
CVE-2010-2550doswindows10 Aug 2010
The SMB Server in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2
60RISK
open
Exploit-DBVexDay Proof
Microsoft Windows - Tracing Registry Key ACL Privilege Escalation
CVE-2010-2554HIGHlocalwindows10 Aug 2010
The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Wind
41RISK
open
Exploit-DBVexDay Proof
Microsoft Windows - CreateWindow Function Callback (MS10-048)
CVE-2010-1897doswindows10 Aug 2010
The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vist
23RISK
open
Exploit-DBVexDay Proof
Joomla! Component Teams - Multiple Blind SQL Injections
CVE-2010-4941webappsphp10 Aug 2010
SQL injection vulnerability in the Teams (com_teams) component 1_1028_100809_1711 for Joomla! allows remote attackers to
23RISK
open
Exploit-DBVexDay Proof
Nasim Guest Book - 'page' Cross-Site Scripting
CVE-2009-4869webappsphp10 Aug 2010
Cross-site scripting (XSS) vulnerability in index.php in Nasim Guest Book 1.2 allows remote attackers to inject arbitrar
23RISK
open
Exploit-DBVexDay Proof
Microsoft Msxml2.XMLHTTP.3.0 - Response Handling Memory Corruption (MS10-051)
CVE-2010-2561doswindows10 Aug 2010
Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to ex
28RISK
open
Exploit-DBVexDay Proof
Allinta CMS 22.07.2010 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities
CVE-2010-4922webappsasp09 Aug 2010
Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL command
23RISK
open
Exploit-DBVexDay Proof
Linux Kernel 2.6.33.3 - SCTP INIT Remote Denial of Service
CVE-2010-1173doslinux09 Aug 2010
The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is e
28RISK
open
Exploit-DBVexDay Proof
Fat Player 0.6b - '.WAV' File Processing Buffer Overflow (SEH)
CVE-2009-4962localwindows09 Aug 2010
Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a
50RISK
open
Exploit-DBVexDay Proof
PHPKick 0.8 - 'Statistics.php' SQL Injection
CVE-2010-3029webappsphp08 Aug 2010
SQL injection vulnerability in statistics.php in PHPKick 0.8 allows remote attackers to execute arbitrary SQL commands v
23RISK
open
Exploit-DBVexDay Proof
Sun Java Web Server - System WebDAV OPTIONS Buffer Overflow (Metasploit)
CVE-2010-0361remotemultiple07 Aug 2010
Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update
60RISK
open
Exploit-DBVexDay Proof
OpenSSL - 'ssl3_get_key_exchange()' Use-After-Free Memory Corruption
CVE-2010-2939doslinux07 Aug 2010
Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a,
23RISK
open
Exploit-DBVexDay Proof
Tycoon CMS Record Script 1.0.9 - SQL Injection
CVE-2010-3027webappsphp07 Aug 2010
SQL injection vulnerability in index.php in Tycoon Baseball Script 1.0.9 allows remote attackers to execute arbitrary SQ
23RISK
open
Exploit-DBVexDay Proof
Subversion - Date Svnserve (Metasploit)
CVE-2004-0397dosunix07 Aug 2010
Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attacker
60RISK
open
Exploit-DBVexDay Proof
LibTIFF - 'td_stripbytecount' Null Pointer Dereference Remote Denial of Service
CVE-2010-2482doslinux07 Aug 2010
LibTIFF 3.9.4 and earlier does not properly handle an invalid td_stripbytecount field, which allows remote attackers to
23RISK
open
Exploit-DBVexDay Proof
RealServer - Describe Buffer Overflow (Metasploit)
CVE-2002-1643remotemultiple07 Aug 2010
Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbit
60RISK
open
Exploit-DBVexDay Proof
Microsoft Windows - 'win32k.sys' Driver 'CreateDIBPalette()' Local Buffer Overflow
CVE-2010-2739localwindows06 Aug 2010
Buffer overflow in the CreateDIBPalette function in win32k.sys in Microsoft Windows XP SP3, Server 2003 R2 Enterprise SP
23RISK
open
Exploit-DBVexDay Proof
EFS Easy Chat Server - Authentication Request Handling Buffer Overflow (Metasploit)
CVE-2004-2466remotewindows06 Aug 2010
chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username
60RISK
open
Exploit-DBVexDay Proof
APBoard 2.1.0 - 'board.php?id' SQL Injection
CVE-2010-4955webappsphp05 Aug 2010
SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers t
23RISK
open
Exploit-DBVexDay Proof
uzbl 'uzbl-core' - '@SELECTED_URI' Mouse Button Bindings Command Injection
CVE-2010-2809remotelinux05 Aug 2010
The default configuration of the <Button2> binding in Uzbl before 2010.08.05 does not properly use the @SELECTED_URI fea
23RISK
open
Exploit-DBVexDay Proof
ccTiddly 1.7.6 - Multiple Remote File Inclusions
CVE-2008-5949webappsphp05 Aug 2010
Multiple PHP remote file inclusion vulnerabilities in ccTiddly 1.7.4 and 1.7.6 allow remote attackers to execute arbitra
23RISK
open
previouspage 186 / 824next

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.