Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
24,488 exploits
Exploit-DB✓ VexDay Proof
Mintboard - Multiple Cross-Site Scripting Vulnerabilities
CVE-2013-4951—webappsphp10 Jul 2013
Multiple cross-site scripting (XSS) vulnerabilities in Mintboard 0.3 allow remote attackers to inject arbitrary web scri
23RISK
open ↗
Exploit-DB
Zoom Telephonics X4/X5 ADSL Modem - Multiple Vulnerabilities
CVE-2013-5623—webappshardware10 Jul 2013
20RISK
open ↗
Exploit-DB✓ VexDay Proof
Zoom Telephonics (Multiple Devices) - Multiple Vulnerabilities
CVE-2013-5620—remotehardware09 Jul 2013
20RISK
open ↗
Exploit-DB
Solaris Recommended Patch Cluster 6/19 (x86) - Local Privilege Escalation
CVE-2010-1183—locallinux_x8609 Jul 2013
Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ERS Viewer 2013 - '.ERS' File Handling Buffer Overflow (Metasploit)
CVE-2013-3482—localwindows09 Jul 2013
Stack-based buffer overflow in the rf_report_error function in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Apache CXF < 2.5.10/2.6.7/2.7.4 - Denial of Service
CVE-2013-2160—dosmultiple09 Jul 2013
The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote att
35RISK
open ↗
Exploit-DB
Adobe Reader X 10.1.4.38 - '.BMP'/'.RLE' Heap Corruption
CVE-2013-2729HIGHunder attacklocalwindows08 Jul 2013
Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attack
83RISK
open ↗
Exploit-DB
Kasseler CMS 2 r1223 - Multiple Vulnerabilities
CVE-2013-3727—webappsphp05 Jul 2013
SQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to execute arbitrary SQL co
23RISK
open ↗
Exploit-DB
OpenX 2.8.10 - Multiple Vulnerabilities
CVE-2013-3514—webappsphp05 Jul 2013
Multiple directory traversal vulnerabilities in OpenX before 2.8.10 revision 82710 allow remote administrators to read a
23RISK
open ↗
Exploit-DB
OpenX 2.8.10 - Multiple Vulnerabilities
CVE-2013-3515—webappsphp05 Jul 2013
Multiple cross-site scripting (XSS) vulnerabilities in OpenX Source 2.8.10 and earlier allow remote attackers to inject
23RISK
open ↗
Exploit-DB
Kasseler CMS 2 r1223 - Multiple Vulnerabilities
CVE-2013-3729—webappsphp05 Jul 2013
Multiple cross-site request forgery (CSRF) vulnerabilities in Kasseler CMS before 2 r1232 allow remote attackers to hija
23RISK
open ↗
Exploit-DB
Kasseler CMS 2 r1223 - Multiple Vulnerabilities
CVE-2013-3728—webappsphp05 Jul 2013
Cross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users with permissio
23RISK
open ↗
Exploit-DB
OpenX 2.8.10 - Multiple Vulnerabilities
CVE-2013-7376—webappsphp05 Jul 2013
Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.10, possibly before revision 82710, allow remote
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Google Android - 'APK' code Remote Security Bypass
CVE-2013-4787—remoteandroid03 Jul 2013
Android 1.6 Donut through 4.2 Jelly Bean does not properly check cryptographic signatures for applications, which allows
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - 'EPATHOBJ::pprFlattenRec' Local Privilege Escalation (Metasploit)
CVE-2013-3130—localwindows02 Jul 2013
20RISK
open ↗
Exploit-DB✓ VexDay Proof
Machform Form Maker 2 - Multiple Vulnerabilities
CVE-2013-4950—webappsphp02 Jul 2013
Cross-site scripting (XSS) vulnerability in view.php in Machform 2 allows remote attackers to inject arbitrary web scrip
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - 'EPATHOBJ::pprFlattenRec' Local Privilege Escalation (Metasploit)
CVE-2013-3661—localwindows02 Jul 2013
The EPATHOBJ::bFlatten function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vist
23RISK
open ↗
Exploit-DB✓ VexDay Proof
RealNetworks RealPlayer - Denial of Service
CVE-2013-3299—dosmultiple02 Jul 2013
RealNetworks RealPlayer 16.0.2.32 and earlier allows remote attackers to cause a denial of service (resource consumption
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - 'EPATHOBJ::pprFlattenRec' Local Privilege Escalation (Metasploit)
CVE-2013-3660HIGHunder attacklocalwindows02 Jul 2013
The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windo
98RISK
open ↗
Exploit-DB✓ VexDay Proof
Intelligent Platform Management Interface - Information Disclosure
CVE-2013-4786—remotemultiple02 Jul 2013
The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote
60RISK
open ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Category Grid View Gallery - 'ID' Cross-Site Scripting
CVE-2013-4117—webappsphp02 Jul 2013
Cross-site scripting (XSS) vulnerability in includes/CatGridPost.php in the Category Grid View Gallery plugin 2.3.1 for
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Winamp 5.63 - Stack Buffer Overflow
CVE-2013-4694—doswindows02 Jul 2013
Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Machform Form Maker 2 - Multiple Vulnerabilities
CVE-2013-4949—webappsphp02 Jul 2013
Unrestricted file upload vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary PHP code b
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Machform Form Maker 2 - Multiple Vulnerabilities
CVE-2013-4948—webappsphp02 Jul 2013
SQL injection vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary SQL commands via the
23RISK
open ↗
Exploit-DB
Winamp 5.63 - Invalid Pointer Dereference
CVE-2013-4695—doswindows02 Jul 2013
Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution
23RISK
open ↗
Exploit-DB
Static HTTP Server 1.0 - Local Overflow (SEH)
CVE-2013-4743—localwindows01 Jul 2013
Static HTTP Server 1.0 has a Local Overflow
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Java Applet - ProviderSkeleton Insecure Invoke Method (Metasploit)
CVE-2013-2460—remotemultiple01 Jul 2013
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and
60RISK
open ↗
Exploit-DB
GLPI 0.83.9 - 'Unserialize()' Remote Code Execution
CVE-2013-2225—webappsphp01 Jul 2013
inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _pr
23RISK
open ↗
Exploit-DB
Fortigate Firewalls - Cross-Site Request Forgery
CVE-2013-1414—webappshardware01 Jul 2013
Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.
23RISK
open ↗
Exploit-DB✓ VexDay Proof
libvirt - 'virConnectListAllInterfaces' Method Denial of Service
CVE-2013-2218—doslinux01 Jul 2013
Double free vulnerability in the virConnectListAllInterfaces method in interface/interface_backend_netcf.c in libvirt 1.
23RISK
open ↗
← previouspage 255 / 817next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.