Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
24,488 exploits
Exploit-DB
Static HTTP Server 1.0 - Local Overflow (SEH)
CVE-2013-4743—localwindows01 Jul 2013
Static HTTP Server 1.0 has a Local Overflow
23RISK
open ↗
Exploit-DB
PCMan FTP Server 2.0 - Remote Buffer Overflow
CVE-2013-4730—remotewindows30 Jun 2013
Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USE
50RISK
open ↗
Exploit-DB✓ VexDay Proof
YardRadius - Multiple Local Format String Vulnerabilities
CVE-2013-4147—localwindows30 Jun 2013
Multiple format string vulnerabilities in Yet Another Radius Daemon (YARD RADIUS) 1.1.2 allow context-dependent attacker
23RISK
open ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Xorbin Digital Flash Clock - 'widgetUrl' Cross-Site Scripting
CVE-2013-4692—webappsphp30 Jun 2013
Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS
23RISK
open ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Xorbin Analog Flash Clock - 'widgetUrl' Cross-Site Scripting
CVE-2013-4692—webappsphp30 Jun 2013
Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Novell Client 2 SP3 - 'nicm.sys' Local Privilege Escalation (Metasploit)
CVE-2013-3956—localwindows_x8626 Jun 2013
The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2
38RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle VM VirtualBox 4.0 - 'tracepath' Local Denial of Service
CVE-2013-3792—dosmultiple26 Jun 2013
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.18, 4.0
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Xaraya - Multiple Cross-Site Scripting Vulnerabilities
CVE-2013-3639—webappsphp26 Jun 2013
Multiple cross-site scripting (XSS) vulnerabilities in Xaraya 2.4.0-b1 and earlier allow remote attackers to inject arbi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
FreeBSD 9 - Address Space Manipulation Privilege Escalation (Metasploit)
CVE-2013-2171—localfreebsd26 Jun 2013
The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEAS
38RISK
open ↗
Exploit-DB✓ VexDay Proof
MoinMoin - twikidraw Action Traversal Arbitrary File Upload (Metasploit)
CVE-2012-6495—remotelinux24 Jun 2013
Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anyw
28RISK
open ↗
Exploit-DB✓ VexDay Proof
phpEventCalendar 0.2.3 - Multiple Vulnerabilities
CVE-2007-3519—webappsphp24 Jun 2013
SQL injection vulnerability in eventdisplay.php in phpEventCalendar 0.2.3 and earlier allows remote attackers to execute
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MoinMoin - twikidraw Action Traversal Arbitrary File Upload (Metasploit)
CVE-2012-6081—remotelinux24 Jun 2013
Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action
50RISK
open ↗
Exploit-DB
Alienvault Open Source SIEM (OSSIM) 4.1 - Multiple SQL Injection Vulnerabilities
CVE-2013-5321—webappsphp24 Jun 2013
Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.1 allow remot
23RISK
open ↗
Exploit-DB
Novell Client 4.91 SP4 - 'nwfs.sys' Local Privilege Escalation (Metasploit)
CVE-2008-3158—localwindows24 Jun 2013
Unspecified vulnerability in NWFS.SYS in Novell Client for Windows 4.91 SP4 has unknown impact and attack vectors, possi
38RISK
open ↗
Exploit-DB
Linksys X3000 1.0.03 build 001 - Multiple Vulnerabilities
CVE-2013-3307HIGHwebappshardware24 Jun 2013
Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command inj
53RISK
open ↗
Exploit-DB✓ VexDay Proof
HP System Management Homepage - JustGetSNMPQueue Command Injection (Metasploit)
CVE-2013-3576—remotewindows24 Jun 2013
ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands vi
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Top Games Script 1.2 - 'play.php?gid' SQL Injection
CVE-2013-4953—webappsphp24 Jun 2013
SQL injection vulnerability in play.php in Top Games Script 1.2 allows remote attackers to execute arbitrary SQL command
23RISK
open ↗
Exploit-DB
Elemata CMS RC3.0 - 'global.php?id' SQL Injection
CVE-2013-4952—webappsphp24 Jun 2013
SQL injection vulnerability in functions/global.php in Elemata CMS RC 3.0 allows remote attackers to execute arbitrary S
23RISK
open ↗
Exploit-DB
GLPI 0.83.8 - Multiple Vulnerabilities
CVE-2013-2227—webappsphp21 Jun 2013
GLPI 0.83.7 has Local File Inclusion in common.tabs.php.
28RISK
open ↗
Exploit-DB
GLPI 0.83.8 - Multiple Vulnerabilities
CVE-2013-2226—webappsphp21 Jun 2013
Multiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute arbitrary SQL commands vi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
FreeBSD 9.0 < 9.1 - 'mmap/ptrace' Local Privilege Escalation
CVE-2013-2171—localfreebsd21 Jun 2013
The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEAS
38RISK
open ↗
Exploit-DB✓ VexDay Proof
Winamp 5.12 - '.m3u' Local Stack Buffer Overflow
CVE-2006-0720—localwindows17 Jun 2013
Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Monkey HTTP Daemon Mandril Security Plugin - Security Bypass
CVE-2013-2182—remotemultiple14 Jun 2013
The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restri
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Easy LAN Folder Share 3.2.0.100 - Buffer Overflow
CVE-2013-6079—doswindows14 Jun 2013
Buffer overflow in MostGear Soft Easy LAN Folder Share 3.2.0.100 allows local users to cause a denial of service (applic
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - COALineDashStyleArray Integer Overflow (MS13-009) (Metasploit)
CVE-2013-1298—remotewindows13 Jun 2013
20RISK
open ↗
Exploit-DB
Airlive IP Cameras - Multiple Vulnerabilities
CVE-2013-3691—webappshardware13 Jun 2013
AirLive POE-2600HD allows remote attackers to cause a denial of service (device reset) via a long URL.
23RISK
open ↗
Exploit-DB
Airlive IP Cameras - Multiple Vulnerabilities
CVE-2013-3687—webappshardware13 Jun 2013
AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cl
23RISK
open ↗
Exploit-DB
AXIS Media Control 6.2.10.11 - Unsafe ActiveX Method
CVE-2013-3543—doswindows13 Jun 2013
The AXIS Media Control (AMC) ActiveX control (AxisMediaControlEmb.dll) 6.2.10.11 for AXIS network cameras allows remote
23RISK
open ↗
Exploit-DB
Airlive IP Cameras - Multiple Vulnerabilities
CVE-2013-3540—webappshardware13 Jun 2013
Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/usrgrp.cgi in AirLive POE2600HD, POE250HD, POE200HD, OD
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - COALineDashStyleArray Integer Overflow (MS13-009) (Metasploit)
CVE-2013-2551HIGHunder attackransomwareremotewindows13 Jun 2013
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary co
100RISK
open ↗
← previouspage 256 / 817next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.