Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,386cataloged exploits
36,533CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,466Referência 23,104GitHub PoC 15,075VulnCheck XDB 8,883Nuclei 4,365Metasploit 3,493✓ verified onlyrecentpopularrisk
24,695 exploits
Exploit-DB✓ VexDay Proof
Joomla! Component Foobla Suggestions 1.5.1.2 - Local File Inclusion
CVE-2010-2920—webappsphp09 Apr 2010
Directory traversal vulnerability in the Foobla Suggestions (com_foobla_suggestions) component 1.5.1.2 for Joomla! allow
38RISK
open ↗
Exploit-DB✓ VexDay Proof
Tembria Server Monitor 5.6.0 - Denial of Service
CVE-2010-1316—doswindows09 Apr 2010
Multiple stack-based buffer overflows in Tembria Server Monitor before 5.6.1 allow remote attackers to cause a denial of
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Multiple Vendor 'librpc.dll' Signedness Error - Remote Code Execution
CVE-2009-2753—dosmultiple08 Apr 2010
Multiple buffer overflows in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portma
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Multiple Vendor 'librpc.dll' Signedness Error - Remote Code Execution
CVE-2009-2754—dosmultiple08 Apr 2010
Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmap
35RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component AWDwall 1.5.4 - Local File Inclusion / SQL Injection
CVE-2010-1493—webappsphp08 Apr 2010
SQL injection vulnerability in the AWDwall (com_awdwall) component before 1.5.5 for Joomla! allows remote attackers to e
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component AWDwall 1.5.4 - Local File Inclusion / SQL Injection
CVE-2010-1494—webappsphp08 Apr 2010
Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to re
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component VJDEO 1.0 - Local File Inclusion
CVE-2010-1354—webappsphp07 Apr 2010
Directory traversal vulnerability in the VJDEO (com_vjdeo) component 1.0 and 1.0.1 for Joomla! allows remote attackers t
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Highslide 1.5 - Local File Inclusion
CVE-2010-1314—webappsphp06 Apr 2010
Directory traversal vulnerability in the Highslide JS (com_hsconfig) component 1.5 and 2.0.9 for Joomla! allows remote a
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Freestyle FAQ Lite 1.3 - 'faqid' SQL Injection
CVE-2010-1529—webappsphp06 Apr 2010
SQL injection vulnerability in the Freestyle FAQs Lite (com_fsf) component, possibly 1.3, for Joomla! allows remote atta
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Affiliate Datafeeds 880 - Local File Inclusion
CVE-2010-1979—webappsphp06 Apr 2010
Directory traversal vulnerability in the Affiliate Datafeeds (com_datafeeds) component build 880 for Joomla! allows remo
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Joomla! Flickr 1.0 - Local File Inclusion
CVE-2010-1980—webappsphp06 Apr 2010
Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr (com_joomlaflickr) component 1.0.3 for Joomla
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component XOBBIX 1.0 - 'prodid' SQL Injection
CVE-2010-5053—webappsphp06 Apr 2010
SQL injection vulnerability in the XOBBIX (com_xobbix) component 1.0.1 for Joomla! allows remote attackers to execute ar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component J!WHMCS Integrator 1.5.0 - Local File Inclusion
CVE-2010-1977—webappsphp06 Apr 2010
Directory traversal vulnerability in the J!WHMCS Integrator (com_jwhmcs) component 1.5.0 for Joomla! allows remote attac
38RISK
open ↗
Exploit-DB✓ VexDay Proof
Jzip 1.3 - '.zip' Unicode Buffer Overflow (PoC)
CVE-2010-5300—doswindows06 Apr 2010
Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service (crash
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Juke Box 1.7 - Local File Inclusion
CVE-2010-1352—webappsphp06 Apr 2010
Directory traversal vulnerability in the JOOFORGE Jutebox (com_jukebox) component 1.0 and 1.7 for Joomla! allows remote
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component News Portal 1.5.x - Local File Inclusion
CVE-2010-1312—webappsphp06 Apr 2010
Directory traversal vulnerability in the iJoomla News Portal (com_news_portal) component 1.5.x for Joomla! allows remote
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Saber Cart 1.0.0.12 - Local File Inclusion
CVE-2010-1313—webappsphp06 Apr 2010
Directory traversal vulnerability in the Seber Cart (com_sebercart) component 1.0.0.12 and 1.0.0.13 for Joomla!, when ma
38RISK
open ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin NextGEN Gallery 1.5.1 - Cross-Site Scripting
CVE-2010-1186—webappsphp06 Apr 2010
Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Fabrik 2.0 - Local File Inclusion
CVE-2010-1981—webappsphp06 Apr 2010
Directory traversal vulnerability in the Fabrik (com_fabrik) component 2.0 for Joomla! allows remote attackers to read a
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component LoginBox - Local File Inclusion
CVE-2010-1353—webappsphp05 Apr 2010
Directory traversal vulnerability in the LoginBox Pro (com_loginbox) component for Joomla! allows remote attackers to re
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Shoutbox Pro - Local File Inclusion
CVE-2010-1534—webappsphp05 Apr 2010
Directory traversal vulnerability in the Shoutbox Pro (com_shoutbox) component for Joomla! allows remote attackers to re
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component SVMap 1.1.1 - Local File Inclusion
CVE-2010-1308—webappsphp05 Apr 2010
Directory traversal vulnerability in the SVMap (com_svmap) component 1.1.1 for Joomla! allows remote attackers to read a
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JInventory 1.23.02 - Local File Inclusion
CVE-2010-1305—webappsphp05 Apr 2010
Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly ot
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Samba 3.0.24 (Solaris) - 'lsa_io_trans_names' Heap Overflow (Metasploit)
CVE-2007-2446—remotesolaris05 Apr 2010
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Samba 3.0.10 (OSX) - 'lsa_io_trans_names' Heap Overflow (Metasploit)
CVE-2007-2446—remoteosx05 Apr 2010
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Magic Updater - Local File Inclusion
CVE-2010-1307—webappsphp05 Apr 2010
Directory traversal vulnerability in the Magic Updater (com_joomlaupdater) component for Joomla! allows remote attackers
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component redSHOP 1.0 - Local File Inclusion
CVE-2010-1531—webappsphp04 Apr 2010
Directory traversal vulnerability in the redSHOP (com_redshop) component 1.0.x for Joomla! allows remote attackers to re
43RISK
open ↗
Exploit-DB✓ VexDay Proof
eZip Wizard 3.0 - '.zip' File (SEH)
CVE-2009-1028—localwindows04 Apr 2010
Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .z
50RISK
open ↗
Exploit-DB✓ VexDay Proof
nodesforum 1.033 - Remote File Inclusion
CVE-2010-1351—webappsphp04 Apr 2010
Multiple PHP remote file inclusion vulnerabilities in Nodesforum 1.033 and 1.045, when register_globals is enabled, allo
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Facil-CMS 0.1RC2 - Local/Remote File Inclusion
CVE-2008-7176—webappsphp04 Apr 2010
Multiple directory traversal vulnerabilities in Facil CMS 0.1RC allow remote attackers to read arbitrary files via a ..
23RISK
open ↗
← previouspage 213 / 824next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.