Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,386cataloged exploits
36,533CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,466Referência 23,104GitHub PoC 15,075VulnCheck XDB 8,883Nuclei 4,365Metasploit 3,493✓ verified onlyrecentpopularrisk
24,695 exploits
Exploit-DB✓ VexDay Proof
Facil-CMS 0.1RC2 - Local/Remote File Inclusion
CVE-2008-7176—webappsphp04 Apr 2010
Multiple directory traversal vulnerabilities in Facil CMS 0.1RC allow remote attackers to read arbitrary files via a ..
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Picasa 2.0 - Local File Inclusion
CVE-2010-1306—webappsphp04 Apr 2010
Directory traversal vulnerability in the Picasa (com_joomlapicasa2) component 2.0 and 2.0.5 for Joomla! allows remote at
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component redTWITTER 1.0 - Local File Inclusion
CVE-2010-1983—webappsphp04 Apr 2010
Directory traversal vulnerability in the redTWITTER (com_redtwitter) component 1.0.x including 1.0b11 for Joomla! allows
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Uiga Proxy - Remote File Inclusion
CVE-2010-1528—webappsphp04 Apr 2010
PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when register_globals is enabled, allows
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JP Jobs 1.4.1 - SQL Injection
CVE-2010-1350—webappsphp03 Apr 2010
SQL injection vulnerability in the JP Jobs (com_jp_jobs) component 1.4.1 and earlier for Joomla! allows remote attackers
23RISK
open ↗
Exploit-DB✓ VexDay Proof
IncrediMail 2.0 - ActiveX (Authenticated) Buffer Overflow (PoC)
CVE-2010-5289—doswindows03 Apr 2010
Buffer overflow in the Authenticate method in the INCREDISPOOLERLib.Pop ActiveX control in ImSpoolU.dll in IncrediMail 2
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Free MP3 CD Ripper 2.6 - '.wav' Local Overflow
CVE-2011-5165—localwindows02 Apr 2010
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem
50RISK
open ↗
Exploit-DB✓ VexDay Proof
TugZip 3.5 Archiver - '.ZIP' File Buffer Overflow
CVE-2008-4779—localwindows01 Apr 2010
Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Centreon IT & Network Monitoring 2.1.5 - SQL Injection
CVE-2010-1301—webappsphp31 Mar 2010
SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Piwik 0.5.5 - 'form_url' Cross-Site Scripting
CVE-2010-1453—webappsphp31 Mar 2010
Cross-site scripting (XSS) vulnerability in the Login form in Piwik 0.1.6 through 0.5.5 allows remote attackers to injec
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component DW Graph - Local File Inclusion
CVE-2010-1302—webappsphp31 Mar 2010
Directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs (com_dwgraphs) component 1.0 for Joomla! a
38RISK
open ↗
Exploit-DB✓ VexDay Proof
Adobe Reader - Escape From '.PDF' Execute Embedded Executable
CVE-2010-1239—localwindows31 Mar 2010
Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Act
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Adobe Reader - Escape From '.PDF' Execute Embedded Executable
CVE-2010-1240—localwindows31 Mar 2010
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Free MP3 CD Ripper 2.6 - '.wav' Local Stack Buffer Overflow
CVE-2011-5165—localwindows31 Mar 2010
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Pepsi CMS (Irmin cms) pepsi-0.6-BETA2 - Multiple Local File
CVE-2010-1309—webappsphp30 Mar 2010
Directory traversal vulnerability in Irmin CMS (formerly Pepsi CMS) 0.6 BETA2 allows remote attackers to read arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Free MP3 CD Ripper 2.6 - '.wav' (PoC)
CVE-2011-5165—doswindows30 Mar 2010
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem
50RISK
open ↗
Exploit-DB✓ VexDay Proof
ASX to MP3 Converter 3.0.0.100 - Local Stack Overflow
CVE-2009-1642—localwindows30 Mar 2010
Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Easy-Clanpage 2.1 - SQL Injection
CVE-2008-1425—webappsmultiple30 Mar 2010
SQL injection vulnerability in index.php in the gallery module in Easy-Clanpage 2.2 allows remote attackers to execute a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Pepsi CMS (Irmin cms) pepsi-0.6-BETA2 - Multiple Local File
CVE-2008-7254—webappsphp30 Mar 2010
Directory traversal vulnerability in includes/template-loader.php in Irmin CMS (formerly Pepsi CMS) 0.5 and 0.6 BETA2, w
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Shadow Stream Recorder 3.0.1.7 - '.asx' Local Buffer Overflow
CVE-2009-1642—localwindows30 Mar 2010
Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ASX to MP3 Converter 3.0.0.100 - Local Stack Overflow (PoC)
CVE-2009-1642—doswindows29 Mar 2010
Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component com_weblinks - 'id' SQL Injection
CVE-2010-2679—webappsphp29 Mar 2010
SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
TSOKA:CMS 1.1/1.9/2.0 - SQL Injection / Cross-Site Scripting
CVE-2010-2675—webappsphp28 Mar 2010
Cross-site scripting (XSS) vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to inject a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
TSOKA:CMS 1.1/1.9/2.0 - SQL Injection / Cross-Site Scripting
CVE-2010-2674—webappsphp28 Mar 2010
SQL injection vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to execute arbitrary SQL
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Multi Auktions Komplett System 2 - Blind SQL Injection
CVE-2010-1270—webappsphp28 Mar 2010
SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Devana - SQL Injection
CVE-2010-2673—webappsphp28 Mar 2010
SQL injection vulnerability in profile_view.php in Devana 1.6.6 and earlier allows remote attackers to execute arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Multi Auktions Komplett System 2 - Blind SQL Injection
CVE-2010-1269—webappsphp28 Mar 2010
SQL injection vulnerability in auktion.php in phpscripte24 Niedrig Gebote Pro Auktions System II allows remote attackers
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Open Web Analytics 1.2.3 - Multiple File Inclusions
CVE-2010-2676—webappsphp27 Mar 2010
Multiple directory traversal vulnerabilities in index.php in Open Web Analytics (OWA) 1.2.3 might allow remote attackers
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Uebimiau Webmail 2.7.2 - Multiple Vulnerabilities
CVE-2007-5235—webappsphp27 Mar 2010
Cross-site scripting (XSS) vulnerability in index.php in Uebimiau 2.7.2 through 2.7.10 allows remote attackers to inject
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Open Web Analytics 1.2.3 - Multiple File Inclusions
CVE-2010-2677—webappsphp27 Mar 2010
PHP remote file inclusion vulnerability in mw_plugin.php in Open Web Analytics (OWA) 1.2.3, when magic_quotes_gpc is dis
23RISK
open ↗
← previouspage 214 / 824next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.