Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,592cataloged exploits
36,656CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,475Referência 23,212GitHub PoC 15,160VulnCheck XDB 8,883Nuclei 4,369Metasploit 3,493✓ verified onlyrecentpopularrisk
24,695 exploits
Exploit-DB✓ VexDay Proof
Winn Guestbook 2.4 / Winn.ws - Cross-Site Scripting
CVE-2009-4678—webappsphp25 Dec 2009
Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
jetAudio 8.0.0.0 - '.asx' Basic Local Crash (PoC)
CVE-2008-0747—doswindows25 Dec 2009
Stack-based buffer overflow in COWON America jetAudio 7.0.5 and earlier allows user-assisted remote attackers to execute
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SoftBiz B2B trading Marketplace Script - SQL Injection
CVE-2005-3937—webappsphp25 Dec 2009
SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SoftCab Sound Converter - 'sndConverter.ocx' ActiveX Insecure Method
CVE-2009-4453—webappswindows25 Dec 2009
Insecure method vulnerability in SoftCab Sound Converter ActiveX control (sndConverter.ocx) 1.2 allows remote attackers
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MyBB 1.4.10 - 'myps.php' Cross-Site Scripting
CVE-2009-4813—webappsphp24 Dec 2009
Cross-site scripting (XSS) vulnerability in myps.php in MyBB (aka MyBulletinBoard) 1.4.10 allows remote attackers to inj
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Web Wiz NewsPad - Database Disclosure
CVE-2009-5019—webappsasp24 Dec 2009
Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote at
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Snitz Forums 2000 - Database Disclosure
CVE-2008-0135—webappsasp24 Dec 2009
Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, w
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Jax Guestbook 3.50 - Admin Login
CVE-2009-4447—webappsphp24 Dec 2009
Jax Guestbook 3.5.0 allows remote attackers to bypass authentication and modify administrator settings via a direct requ
23RISK
open ↗
Exploit-DB✓ VexDay Proof
CastRipper (Windows XP SP2) - '.m3u' Local Stack Buffer Overflow
CVE-2009-1667—localwindows24 Dec 2009
Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a lo
28RISK
open ↗
Exploit-DB✓ VexDay Proof
PBX Phone System 2.x - Multiple Vulnerabilities
CVE-2009-4458—webappsphp24 Dec 2009
Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.2 and 2.6.0rc2, and possibly other versions, allow re
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Adobe Reader / Acrobat - '.PDF' File Overflow
CVE-2009-4324HIGHunder attacklocalwindows23 Dec 2009
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before
100RISK
open ↗
Exploit-DB✓ VexDay Proof
webMathematica 3 - 'MSP' Script Cross-Site Scripting
CVE-2009-4814—webappsmultiple23 Dec 2009
Cross-site scripting (XSS) vulnerability in Wolfram Research webMathematica allows remote attackers to inject arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Easy RM to MP3 27.3.700 (Windows XP SP2) - Local Buffer Overflow
CVE-2009-1330—localwindows23 Dec 2009
Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil
28RISK
open ↗
Exploit-DB✓ VexDay Proof
DeluxeBB 1.3 - Multiple Vulnerabilities
CVE-2009-4466—webappsphp22 Dec 2009
DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a crafted page parameter to misc.php, which rev
23RISK
open ↗
Exploit-DB✓ VexDay Proof
weenCompany - SQL Injection
CVE-2009-4423—webappsphp22 Dec 2009
SQL injection vulnerability in index.php in weenCompany 4.0.0 allows remote attackers to execute arbitrary SQL commands
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Easy RM to MP3 27.3.700 (Windows XP SP3) - Local Overflow
CVE-2009-1330—localwindows22 Dec 2009
Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil
28RISK
open ↗
Exploit-DB✓ VexDay Proof
DeluxeBB 1.3 - Multiple Vulnerabilities
CVE-2009-4467—webappsphp22 Dec 2009
misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail actio
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DeluxeBB 1.3 - Multiple Vulnerabilities
CVE-2009-4468—webappsphp22 Dec 2009
Cross-site scripting (XSS) vulnerability in misc.php in DeluxeBB 1.3 allows remote attackers to inject arbitrary web scr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Active PHP BookMarks 1.3 - SQL Injection
CVE-2008-3748—webappsphp22 Dec 2009
SQL injection vulnerability in view_group.php in Active PHP Bookmarks (APB) 1.1.02 and 1.2.06 allows remote attackers to
23RISK
open ↗
Exploit-DB✓ VexDay Proof
The Uploader 2.0 - File Disclosure
CVE-2009-4816—webappsphp22 Dec 2009
Directory traversal vulnerability in api/download_checker.php in MegaLab The Uploader 2.0 allows remote attackers to rea
23RISK
open ↗
Exploit-DB✓ VexDay Proof
CoolPlayer 2.18 - M3U Playlist Buffer Overflow
CVE-2008-3408—localwindows22 Dec 2009
Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attackers to ex
23RISK
open ↗
Exploit-DB✓ VexDay Proof
DeluxeBB 1.3 - Multiple Vulnerabilities
CVE-2009-4465—webappsphp22 Dec 2009
DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control, which allows remote attac
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Mini File Host 1.5 - Arbitrary File Upload
CVE-2008-6785—webappsphp22 Dec 2009
Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by upload
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Active Business Directory 2 - 'searchadvance.asp' Cross-Site Scripting
CVE-2009-4464—webappsasp22 Dec 2009
Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHPhotoalbum - Arbitrary File Upload
CVE-2009-4819—webappsphp21 Dec 2009
Multiple unrestricted file upload vulnerabilities in upload.php in PHPhotoalbum allow remote attackers to execute arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP-Calendar 1.1 - 'update10.php?configfile' Traversal Local File Inclusion
CVE-2009-3702—webappsphp21 Dec 2009
Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP-Calendar 1.1 - 'update08.php?configfile' Traversal Local File Inclusion
CVE-2009-3702—webappsphp21 Dec 2009
Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Angelo-emlak 1.0 - Database Disclosure
CVE-2009-4820—webappsasp21 Dec 2009
Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control, which allows remote a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Ultimate Uploader 1.3 - Arbitrary File Upload
CVE-2009-4817—webappsphp21 Dec 2009
Unrestricted file upload vulnerability in Element-IT Ultimate Uploader 1.3 allows remote attackers to execute arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHPhotoalbum 0.5 - SQL Injection
CVE-2008-2501—webappsphp21 Dec 2009
Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via
23RISK
open ↗
← previouspage 226 / 824next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.