Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
24,488 exploits
Exploit-DB
IBM System Director Agent - Remote System Level
CVE-2009-0880—remotewindows02 Dec 2012
Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows rem
50RISK
open ↗
Exploit-DB✓ VexDay Proof
MySQL (Linux) - Database Privilege Escalation
CVE-2012-5613—locallinux02 Dec 2012
MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Elastix - 'page' Cross-Site Scripting
CVE-2012-6608—webappsphp29 Nov 2012
Cross-site scripting (XSS) vulnerability in xmlservices/E_book.php in Elastix 2.3.0 allows remote attackers to inject ar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Video Lead Form - 'errMsg' Cross-Site Scripting
CVE-2012-6312—webappsphp29 Nov 2012
Cross-site scripting (XSS) vulnerability in the Video Lead Form plugin for WordPress allows remote attackers to inject a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple QuickTime 7.7.2 - MIME Type Buffer Overflow (Metasploit)
CVE-2012-3753—remotewindows28 Nov 2012
Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause
50RISK
open ↗
Exploit-DB✓ VexDay Proof
mcrypt 2.5.8 - Local Stack Overflow
CVE-2012-4409—locallinux26 Nov 2012
Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Forescout CounterACT - 'a' Open Redirection
CVE-2012-4982—webappsmultiple26 Nov 2012
Open redirect vulnerability in assets/login on the Forescout CounterACT NAC device before 7.0 allows remote attackers to
38RISK
open ↗
Exploit-DB✓ VexDay Proof
mcrypt 2.6.8 - Stack Buffer Overflow (PoC)
CVE-2012-4409—doslinux26 Nov 2012
Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple QuickTime 7.7.2 - TeXML Style Element font-table Field Stack Buffer Overflow (Metasploit)
CVE-2012-3752—remotewindows24 Nov 2012
Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a de
50RISK
open ↗
Exploit-DB
TrouSerS - Denial of Service
CVE-2012-0698—doslinux23 Nov 2012
tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash) via a crafted type_of
28RISK
open ↗
Exploit-DB✓ VexDay Proof
NetIQ Privileged User Manager 2.3.1 - 'ldapagnt_eval()' Perl Remote Code Execution (Metasploit)
CVE-2012-5932—remotewindows22 Nov 2012
Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manage
50RISK
open ↗
Exploit-DB
lighttpd 1.4.31 - Denial of Service (PoC)
CVE-2012-5533—doslinux22 Nov 2012
The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial o
28RISK
open ↗
Exploit-DB✓ VexDay Proof
dotProject 2.1.x - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2012-5702—webappsphp21 Nov 2012
Multiple cross-site scripting (XSS) vulnerabilities in dotProject before 2.1.7 allow remote attackers to inject arbitrar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
dotProject 2.1.x - 'index.php' Multiple SQL Injections
CVE-2012-5701—webappsphp21 Nov 2012
Multiple SQL injection vulnerabilities in dotProject before 2.1.7 allow remote authenticated administrators to execute a
23RISK
open ↗
Exploit-DB
Apple QuickTime 7.7.2 - Targa image Buffer Overflow
CVE-2012-3755—doswindows20 Nov 2012
Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of s
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Novell File Reporter (NFR) Agent FSFUI Record - Arbitrary File Upload / Remote Code Execution (Metasploit)
CVE-2012-4959—remotewindows19 Nov 2012
Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and ex
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Novell NetIQ Privileged User Manager 2.3.1 - 'auth.dll' pa_modify_accounts() Remote Code Execution
CVE-2012-5930—remotewindows15 Nov 2012
The pa_modify_accounts function in auth.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 does n
23RISK
open ↗
Exploit-DB
Broadcom BCM4325 / BCM4329 Devices - Denial of Service
CVE-2012-2619—doshardware15 Nov 2012
The Broadcom BCM4325 and BCM4329 Wi-Fi chips, as used in certain Acer, Apple, Asus, Ford, HTC, Kyocera, LG, Malata, Moto
28RISK
open ↗
Exploit-DB✓ VexDay Proof
BabyGekko 1.2.2e - Multiple Vulnerabilities
CVE-2012-5699—webappsphp15 Nov 2012
BabyGekko before 1.2.4 allows PHP file inclusion.
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Novell NetIQ Privileged User Manager 2.3.1 - 'auth.dll' pa_modify_accounts() Remote Code Execution
CVE-2012-5931—remotewindows15 Nov 2012
Directory traversal vulnerability in the set_log_config function in regclnt.dll in unifid.exe in NetIQ Privileged User M
23RISK
open ↗
Exploit-DB✓ VexDay Proof
BabyGekko 1.2.2e - Multiple Vulnerabilities
CVE-2012-5698—webappsphp15 Nov 2012
BabyGekko before 1.2.4 has SQL injection.
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle Database Client System Analyzer - Arbitrary File Upload (Metasploit)
CVE-2010-3600—remotewindows15 Nov 2012
Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7 and 11.2.0.1 and En
60RISK
open ↗
Exploit-DB✓ VexDay Proof
BabyGekko 1.2.2e - Multiple Vulnerabilities
CVE-2012-5700—webappsphp15 Nov 2012
Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.2f allow remote attackers to inject arbitra
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MYRE Realty Manager - Multiple Vulnerabilities
CVE-2012-6585—webappsphp14 Nov 2012
Cross-site scripting (XSS) vulnerability in search.php in MYRE Realty Manager allows remote attackers to inject arbitrar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Myrephp Business Directory - Multiple Vulnerabilities
CVE-2012-6589—webappsphp14 Nov 2012
Cross-site scripting (XSS) vulnerability in search.php in MYRE Business Directory allows remote attackers to inject arbi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MYRE Realty Manager - Multiple Vulnerabilities
CVE-2012-6584—webappsphp14 Nov 2012
Multiple SQL injection vulnerabilities in MYRE Realty Manager allow remote attackers to execute arbitrary SQL commands v
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MYREphp Vacation Rental Software - Multiple Vulnerabilities
CVE-2012-6587—webappsphp14 Nov 2012
Cross-site scripting (XSS) vulnerability in vacation/1_mobile/alert_members.php in MYRE Vacation Rental Software allows
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Myrephp Business Directory - Multiple Vulnerabilities
CVE-2012-6588—webappsphp14 Nov 2012
SQL injection vulnerability in links.php in MYRE Business Directory allows remote attackers to execute arbitrary SQL com
23RISK
open ↗
Exploit-DB✓ VexDay Proof
dotProject 2.1.6 - Remote File Inclusion
CVE-2006-0755MEDIUMwebappsphp14 Nov 2012
Multiple PHP remote file include vulnerabilities in dotProject 2.0.1 and earlier, when register_globals is enabled, allo
33RISK
open ↗
Exploit-DB✓ VexDay Proof
MYREphp Vacation Rental Software - Multiple Vulnerabilities
CVE-2012-6586—webappsphp14 Nov 2012
Multiple SQL injection vulnerabilities in MYRE Vacation Rental Software allow remote attackers to execute arbitrary SQL
23RISK
open ↗
← previouspage 271 / 817next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.