Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

80,646cataloged exploits
37,382CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,482Referência 23,825GitHub PoC 15,392VulnCheck XDB 9,029Nuclei 4,416Metasploit 3,502✓ verified onlyrecentpopularrisk
24,482 exploits
Exploit-DB✓ VexDay Proof
Zabbix 2.0.1 - Session Extractor
CVE-2012-3435—webappsphp24 Jul 2012
SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Symantec Web Gateway 5.0.3.18 - Blind SQL Injection Backdoor via MySQL Triggers
CVE-2012-2961—webappsphp23 Jul 2012
SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attack
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting / Blind SQL Injection
CVE-2012-2599—webappsphp23 Jul 2012
20RISK
open ↗
Exploit-DB✓ VexDay Proof
Symantec Web Gateway 5.0.2 - 'blocked.php?id' Blind SQL Injection
CVE-2012-2574—webappslinux23 Jul 2012
SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attack
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SpiceWorks 5.3.75941 - Persistent Cross-Site Scripting / (Authenticated) SQL Injection
CVE-2012-2956—webappswindows23 Jul 2012
SQL injection vulnerability in SpiceWorks 5.3.75941 allows remote authenticated users to execute arbitrary SQL commands
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting / Blind SQL Injection
CVE-2012-3834—webappsphp23 Jul 2012
SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security Information Management (OS
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting / Blind SQL Injection
CVE-2012-3835—webappsphp23 Jul 2012
Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3.
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SpiceWorks 5.3.75941 - Persistent Cross-Site Scripting / (Authenticated) SQL Injection
CVE-2012-6658—webappswindows23 Jul 2012
Multiple cross-site scripting (XSS) vulnerabilities in SpiceWorks 5.3.75941 allow remote attackers to inject arbitrary w
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ipswitch whatsup gold 15.02 - Persistent Cross-Site Scripting / Blind SQL Injection / Remote Code Execution
CVE-2012-2589—webappsasp22 Jul 2012
20RISK
open ↗
Exploit-DB✓ VexDay Proof
Dell SonicWALL Scrutinizer 9.0.1 - 'statusFilter.php?q' SQL Injection
CVE-2012-2962—webappsphp22 Jul 2012
SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2
50RISK
open ↗
Exploit-DB✓ VexDay Proof
ipswitch whatsup gold 15.02 - Persistent Cross-Site Scripting / Blind SQL Injection / Remote Code Execution
CVE-2012-2601—webappsasp22 Jul 2012
SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute ar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ipswitch whatsup gold 15.02 - Persistent Cross-Site Scripting / Blind SQL Injection / Remote Code Execution
CVE-2012-4344—webappsasp22 Jul 2012
Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp Gold 15.02 allows remote attackers to inject arbitrary web
23RISK
open ↗
Exploit-DB✓ VexDay Proof
AtMail Email Server Appliance 6.4 - Persistent Cross-Site Scripting / Cross-Site Request Forgery / Remote Code Execution
CVE-2012-2593—remotelinux21 Jul 2012
Cross-site scripting (XSS) vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote atta
23RISK
open ↗
Exploit-DB✓ VexDay Proof
X-Cart Gold 4.5 - 'products_map.php?symb' Cross-Site Scripting
CVE-2012-2570—webappsphp21 Jul 2012
Cross-site scripting (XSS) vulnerability in products_map.php in X-Cart Gold 4.5 allows remote attackers to inject arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SolarWinds Orion Network Performance Monitor 10.2.2 - Multiple Vulnerabilities
CVE-2012-2577—webappswindows21 Jul 2012
Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1
28RISK
open ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin chenpress - Arbitrary File Upload
CVE-2012-2570—webappsphp21 Jul 2012
Cross-site scripting (XSS) vulnerability in products_map.php in X-Cart Gold 4.5 allows remote attackers to inject arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SolarWinds Orion Network Performance Monitor 10.2.2 - Multiple Vulnerabilities
CVE-2012-2602—webappswindows21 Jul 2012
Multiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle Outside-In JP2 - File Parsing Heap Overflow
CVE-2012-1769—doswindows20 Jul 2012
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allo
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management Preboot Service - 0x4c Buffer Overflow (Metasploit)
CVE-2011-3175—remotewindows20 Jul 2012
Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allo
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management Preboot Service - 0x6c Buffer Overflow (Metasploit)
CVE-2011-3176—remotewindows20 Jul 2012
Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allo
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management Preboot Service - 0x4c Buffer Overflow (Metasploit)
CVE-2011-3176—remotewindows20 Jul 2012
Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allo
60RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle Outside-In - '.LWP' File Parsing Stack Buffer Overflow
CVE-2012-1770—doswindows20 Jul 2012
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allo
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management Preboot Service - 0x6c Buffer Overflow (Metasploit)
CVE-2011-3175—remotewindows20 Jul 2012
Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allo
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle Outside-In - '.FPX' File Parsing Heap Overflow
CVE-2012-1744—doswindows20 Jul 2012
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allo
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.4.4 < 2.4.37.4 / 2.6.0 < 2.6.30.4 - 'Sendpage' Local Privilege Escalation (Metasploit)
CVE-2009-2692—locallinux19 Jul 2012
The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socke
43RISK
open ↗
Exploit-DB✓ VexDay Proof
WebKit Cross-Site Scripting Filter - 'Cross-Site ScriptingAuditor.cpp' Security Bypass
CVE-2012-5851—webappsphp19 Jul 2012
html/parser/XSSAuditor.cpp in WebCore in WebKit, as used in Google Chrome through 22 and Safari 5.1.7, does not consider
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Task Scheduler '.XML' Local Privilege Escalation (MS10-092) (Metasploit)
CVE-2010-3338—localwindows19 Jul 2012
The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7
43RISK
open ↗
Exploit-DB✓ VexDay Proof
CodeIgniter 2.1 - 'xss_clean()' Filter Security Bypass
CVE-2012-1915—webappsphp19 Jul 2012
EllisLab CodeIgniter 2.1.2 allows remote attackers to bypass the xss_clean() Filter and perform XSS attacks.
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Task Scheduler '.XML' Local Privilege Escalation (MS10-092) (Metasploit)
CVE-2010-3888—localwindows19 Jul 2012
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vec
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Barracuda SSL VPN - 'launchAgent.do?return-To' Cross-Site Scripting
CVE-2012-4739—remotehardware18 Jul 2012
Multiple cross-site scripting (XSS) vulnerabilities in Barracuda SSL VPN before 2.2.2.203 (2012-07-05) allow remote atta
23RISK
open ↗
← previouspage 279 / 817next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.