Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,230cataloged exploits
36,424CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,465Referência 23,022GitHub PoC 15,031VulnCheck XDB 8,860Nuclei 4,361Metasploit 3,491✓ verified onlyrecentpopularrisk
24,695 exploits
Exploit-DB✓ VexDay Proof
AIX5l with FTP-Server - Hash Disclosure
CVE-2010-3187—remoteaix18 Jul 2010
Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST com
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Automatic .LNK Shortcut File Code Execution
CVE-2015-0096—localwindows18 Jul 2010
Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and
60RISK
open ↗
Exploit-DB✓ VexDay Proof
rpc.pcnfsd - Remote Format String
CVE-2010-1039—remoteaix18 Jul 2010
Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, a
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Kayako eSupport 3.70.02 - SQL Injection
CVE-2010-2911—webappsphp17 Jul 2010
SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL com
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Kayako eSupport 3.70.02 - SQL Injection
CVE-2010-2912—webappsphp17 Jul 2010
SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL com
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component StaticXT - SQL Injection
CVE-2010-2919—webappsphp17 Jul 2010
SQL injection vulnerability in the StaticXT (com_staticxt) component for Joomla! allows remote attackers to execute arbi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MoreAmp - Local Buffer Overflow (SEH) (Metasploit)
CVE-2010-2439—localwindows17 Jul 2010
Stack-based buffer overflow in MoreAmp allows remote attackers to execute arbitrary code via a long line in a song list
23RISK
open ↗
Exploit-DB✓ VexDay Proof
BS Scripts Directory - 'articlesdetails.php' SQL Injection
CVE-2010-2906—webappsphp16 Jul 2010
SQL injection vulnerability in articlesdetails.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory allows remot
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Novell Groupwise Internet Agent - Stack Overflow
CVE-2010-2777—dosmultiple16 Jul 2010
Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise 7.x befo
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - Daxctle.OCX KeyFrame Method Heap Buffer Overflow (MS06-067) (Metasploit)
CVE-2006-4777—remotewindows16 Jul 2010
Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) fo
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Mini-stream RM-MP3 Converter 3.1.2.1 - '.pls' Local Stack Buffer Overflow Universal
CVE-2010-5081—localwindows_x8616 Jul 2010
Stack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to execute arbitrary code vi
50RISK
open ↗
Exploit-DB✓ VexDay Proof
SAP DB 7.4 - WebTools Buffer Overflow (Metasploit)
CVE-2007-3614—remotewindows16 Jul 2010
Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 through 7.5, all
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Pre Podcast Portal - Authentication Bypass
CVE-2010-4959—webappsphp16 Jul 2010
SQL injection vulnerability in the login feature in Pre Projects Pre Podcast Portal allows remote attackers to execute a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
BS Scripts Directory - 'info.php' SQL Injection
CVE-2010-2905—webappsphp15 Jul 2010
SQL injection vulnerability in info.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory allows remote attackers
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Excel - 0x5D record Stack Overflow (MS10-038)
CVE-2010-0822—localwindows14 Jul 2010
Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML F
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Nagios3 - 'statuswml.cgi' 'Ping' Command Execution (Metasploit)
CVE-2009-2288—webappscgi14 Jul 2010
statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in t
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Samba 2.2.8 (Linux x86) - 'trans2open' Remote Overflow (Metasploit)
CVE-2003-0201—remotelinux_x8614 Jul 2010
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x vers
60RISK
open ↗
Exploit-DB✓ VexDay Proof
IPSwitch WhatsUp Gold 8.03 - Remote Buffer Overflow (Metasploit)
CVE-2004-0798—remotewindows14 Jul 2010
Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Samba 3.0.24 (Linux) - 'lsa_io_trans_names' Heap Overflow (Metasploit)
CVE-2007-2446—remotelinux14 Jul 2010
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Free Download Manager 2.5 Build 758 - Remote Control Server Buffer Overflow (Metasploit)
CVE-2009-0183—remotewindows13 Jul 2010
Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allo
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle Business Process Management 10.3.2 - Cross-Site Scripting
CVE-2010-2370—remotemultiple13 Jul 2010
Unspecified vulnerability in the Oracle Business Process Management component in Oracle Fusion Middleware 5.7 MP3, 6.0 M
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle WebLogic Server 10.3.3 - Encoded URL
CVE-2010-2375—remotemultiple13 Jul 2010
Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server componen
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle Solaris - 'nfslogd' Insecure Temporary File Creation
CVE-2010-2383—localsolaris13 Jul 2010
Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect confidentiality
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle Solaris - 'rdist' Privilege Escalation
CVE-2010-0916—dossolaris13 Jul 2010
Unspecified vulnerability in Oracle OpenSolaris 10 allows local users to affect confidentiality, integrity, and availabi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle Solaris Management Console - WBEM Insecure Temporary File Creation
CVE-2010-2384—localsolaris13 Jul 2010
Unspecified vulnerability in Oracle Solaris 9 and 10 allows local users to affect confidentiality and integrity via unkn
23RISK
open ↗
Exploit-DB✓ VexDay Proof
eDirectory 8.7.3 - iMonitor Remote Stack Buffer Overflow (Metasploit)
CVE-2005-2551—remotewindows13 Jul 2010
Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of se
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - 'Aurora' Memory Corruption (MS10-002) (Metasploit)
CVE-2010-0249HIGHunder attackremotewindows12 Jul 2010
Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and S
100RISK
open ↗
Exploit-DB✓ VexDay Proof
LibTIFF 3.9.4 - Out-Of-Order Tag Type Mismatch Remote Denial of Service
CVE-2010-2630—doslinux12 Jul 2010
The TIFFReadDirectory function in LibTIFF 3.9.0 does not properly validate the data types of codec-specific tags that ha
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Blue Coat WinProxy - Host Header Overflow (Metasploit)
CVE-2005-4085—remotewindows12 Jul 2010
Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Grafik CMS 1.1.2 - Multiple Cross-Site Request Forgery Vulnerabilities
CVE-2010-2615—webappsphp12 Jul 2010
Multiple cross-site scripting (XSS) vulnerabilities in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allow
23RISK
open ↗
← previouspage 189 / 824next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.