Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
24,488 exploits
Exploit-DB✓ VexDay Proof
NetApp OnCommand System Manager - '/zapiServlet' CIFS Configuration Management Interface Multiple Cross-Site Scripting Vulnerabilities
CVE-2013-3320—webappsphp07 May 2013
Cross-site Scripting (XSS) vulnerability in NetApp OnCommand System Manager before 2.2 allows remote attackers to inject
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Vivotek IP Cameras - Multiple Vulnerabilities
CVE-2013-1598—webappshardware01 May 2013
A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to th
28RISK
open ↗
Exploit-DB✓ VexDay Proof
D-Link IP Cameras - Multiple Vulnerabilities
CVE-2013-1601—webappshardware01 May 2013
An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processin
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Vivotek IP Cameras - Multiple Vulnerabilities
CVE-2013-1597—webappshardware01 May 2013
A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET requ
28RISK
open ↗
Exploit-DB✓ VexDay Proof
WinArchiver 3.2 - Local Buffer Overflow (SEH)
CVE-2013-5660—localwindows01 May 2013
Buffer overflow in Power Software WinArchiver 3.2 allows remote attackers to execute arbitrary code via a crafted .zip f
28RISK
open ↗
Exploit-DB✓ VexDay Proof
D-Link IP Cameras - Multiple Vulnerabilities
CVE-2013-1602—webappshardware01 May 2013
An Information Disclosure vulnerability exists due to insufficient validation of authentication cookies for the RTSP ses
28RISK
open ↗
Exploit-DB✓ VexDay Proof
WPS Office - 'Wpsio.dll' Stack Buffer Overflow
CVE-2012-4886—doswindows01 May 2013
Stack-based buffer overflow in wpsio.dll in Kingsoft WPS Office 2012 possibly 8.1.0.3238 allows remote attackers to exec
28RISK
open ↗
Exploit-DB✓ VexDay Proof
D-Link IP Cameras - Multiple Vulnerabilities
CVE-2013-1599—webappshardware01 May 2013
A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firm
35RISK
open ↗
Exploit-DB✓ VexDay Proof
Vivotek IP Cameras - Multiple Vulnerabilities
CVE-2013-1595—webappshardware01 May 2013
A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the
35RISK
open ↗
Exploit-DB✓ VexDay Proof
D-Link IP Cameras - Multiple Vulnerabilities
CVE-2013-1600—webappshardware01 May 2013
An Authentication Bypass vulnerability exists in upnp/asf-mp4.asf when streaming live video in D-Link TESCO DCS-2121 1.0
28RISK
open ↗
Exploit-DB✓ VexDay Proof
D-Link IP Cameras - Multiple Vulnerabilities
CVE-2013-1603—webappshardware01 May 2013
An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DC
28RISK
open ↗
Exploit-DB✓ VexDay Proof
FuzeZip 1.0.0.131625 - Local Buffer Overflow (SEH)
CVE-2013-5656—localwindows01 May 2013
FuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerability
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Vivotek IP Cameras - Multiple Vulnerabilities
CVE-2013-1596—webappshardware01 May 2013
An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP pac
28RISK
open ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin W3 Total Cache - PHP Code Execution (Metasploit)
CVE-2013-2010—remotephp01 May 2013
WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability
60RISK
open ↗
Exploit-DB✓ VexDay Proof
sudo 1.8.0 < 1.8.3p1 - 'sudo_debug' glibc FORTIFY_SOURCE Bypass + Privilege Escalation
CVE-2012-0809—locallinux01 May 2013
Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
phpMyAdmin - 'preg_replace' (Authenticated) Remote Code Execution (Metasploit)
CVE-2013-3238—remotephp01 May 2013
phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Vivotek IP Cameras - Multiple Vulnerabilities
CVE-2013-1594—webappshardware01 May 2013
An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wire
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Cisco Linksys E4200 - '/apply.cgi' Multiple Cross-Site Scripting Vulnerabilities
CVE-2013-2679—remotehardware27 Apr 2013
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Linksys E4200 router with firmware 1.0.05 build 7 allow rem
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! 3.0.3 - 'remember.php' PHP Object Injection
CVE-2013-3242—webappsphp26 Apr 2013
plugins/system/remember/remember.php in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 does not properly handle an o
23RISK
open ↗
Exploit-DB
Hornbill Supportworks ITSM 1.0.0 - SQL Injection
CVE-2013-2594—webappsphp25 Apr 2013
SQL injection vulnerability in reports/calldiary.php in Hornbill Supportworks ITSM 1.0.0 through 3.4.14 allows remote at
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Light HTTPd 0.1 (Windows) - Remote Buffer Overflow
CVE-2002-1549—remotewindows25 Apr 2013
Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET reques
28RISK
open ↗
Exploit-DB✓ VexDay Proof
phpMyAdmin 3.5.8/4.0.0-RC2 - Multiple Vulnerabilities
CVE-2013-3239—webappsphp25 Apr 2013
phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authentica
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Belkin F5D8236-4 Router - Cross-Site Request Forgery
CVE-2013-3083—remotehardware25 Apr 2013
Cross-site request forgery (CSRF) vulnerability in cgi-bin/system_setting.exe in Belkin F5D8236-4 v2 allows remote attac
23RISK
open ↗
Exploit-DB✓ VexDay Proof
GroundWork - 'monarch_scan.cgi' OS Command Injection (Metasploit)
CVE-2013-3502—remotelinux25 Apr 2013
monarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to ex
50RISK
open ↗
Exploit-DB✓ VexDay Proof
phpMyAdmin 3.5.8/4.0.0-RC2 - Multiple Vulnerabilities
CVE-2013-3238—webappsphp25 Apr 2013
phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a
43RISK
open ↗
Exploit-DB✓ VexDay Proof
phpMyAdmin 3.5.8/4.0.0-RC2 - Multiple Vulnerabilities
CVE-2013-3241—webappsphp25 Apr 2013
export.php (aka the export script) in phpMyAdmin 4.x before 4.0.0-rc3 overwrites global variables on the basis of the co
23RISK
open ↗
Exploit-DB✓ VexDay Proof
phpMyAdmin 3.5.8/4.0.0-RC2 - Multiple Vulnerabilities
CVE-2013-3240—webappsphp25 Apr 2013
Directory traversal vulnerability in the Export feature in phpMyAdmin 4.x before 4.0.0-rc3 allows remote authenticated u
23RISK
open ↗
Exploit-DB✓ VexDay Proof
TP-Link TL-WR1043N Router - Cross-Site Request Forgery
CVE-2013-2645—remotehardware24 Apr 2013
Multiple cross-site request forgery (CSRF) vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR1043ND_V1_12
23RISK
open ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin WP Super Cache - PHP Remote Code Execution
CVE-2013-2009—webappsphp24 Apr 2013
WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Java Applet - Reflection Type Confusion Remote Code Execution (Metasploit)
CVE-2013-2423LOWunder attackremotemultiple23 Apr 2013
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and
95RISK
open ↗
← previouspage 260 / 817next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.