Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

80,646cataloged exploits
37,382CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,482Referência 23,825GitHub PoC 15,392VulnCheck XDB 9,029Nuclei 4,416Metasploit 3,502✓ verified onlyrecentpopularrisk
24,482 exploits
Exploit-DB✓ VexDay Proof
Barracuda SSL VPN - 'fileSystem.do' Multiple Cross-Site Scripting Vulnerabilities
CVE-2012-4739—remotehardware18 Jul 2012
Multiple cross-site scripting (XSS) vulnerabilities in Barracuda SSL VPN before 2.2.2.203 (2012-07-05) allow remote atta
23RISK
open ↗
Exploit-DB
libdbus - 'DBUS_SYSTEM_BUS_ADDRESS' Local Privilege Escalation
CVE-2012-3524—locallinux17 Jul 2012
libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows
23RISK
open ↗
Exploit-DB
libdbus - 'DBUS_SYSTEM_BUS_ADDRESS' Local Privilege Escalation
CVE-2012-4425—locallinux17 Jul 2012
libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to
23RISK
open ↗
Exploit-DB✓ VexDay Proof
CakePHP 2.x < 2.2.0-RC2 - XML External Entity Injection
CVE-2012-4399—webappsphp16 Jul 2012
The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via X
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 9 / SharePoint / Lync - toStaticHTML HTML Sanitizing Bypass (MS12-037/MS12-039/MS12-050)
CVE-2012-1858—doswindows12 Jul 2012
The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync
28RISK
open ↗
Exploit-DB✓ VexDay Proof
WaveSurfer 1.8.8p4 - Memory Corruption (PoC)
CVE-2012-6303—doswindows12 Jul 2012
Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Hastymail 2.1.1 RC1 - Command Injection (Metasploit)
CVE-2011-4542—webappsphp12 Jul 2012
Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs or (2) rsargs[] paramet
43RISK
open ↗
Exploit-DB
Reserve Logic 1.2 Booking CMS - Multiple Vulnerabilities
CVE-2010-4980—webappsphp12 Jul 2012
SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Kajona - 'getAllPassedParams()' Multiple Cross-Site Scripting Vulnerabilities
CVE-2012-3805—webappsphp11 Jul 2012
Multiple cross-site scripting (XSS) vulnerabilities in the getAllPassedParams function in system/functions.php in Kajona
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Java Applet - Field Bytecode Verifier Cache Remote Code Execution (Metasploit)
CVE-2012-1723CRITICALunder attackransomwareremotejava11 Jul 2012
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 up
100RISK
open ↗
Exploit-DB✓ VexDay Proof
AdminStudio - 'LaunchHelp.dll' ActiveX Arbitrary Code Execution (Metasploit)
CVE-2011-2657—remotewindows11 Jul 2012
Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in Laun
50RISK
open ↗
Exploit-DB✓ VexDay Proof
WebsitePanel - 'ReturnUrl' Open Redirection
CVE-2012-4032—webappsasp09 Jul 2012
Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users t
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Basilic 1.5.14 - 'diff.php' Arbitrary Command Execution (Metasploit)
CVE-2012-3399—webappsphp09 Jul 2012
Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Tiki Wiki CMS Groupware 8.3 - 'Unserialize()' PHP Code Execution (Metasploit)
CVE-2012-0911—webappsphp09 Jul 2012
TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Tiki Wiki CMS Groupware 8.3 - 'Unserialize()' PHP Code Execution (Metasploit)
CVE-2012-3996—webappsphp09 Jul 2012
TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to (
23RISK
open ↗
Exploit-DB
Webmatic 3.1.1 - Blind SQL Injection
CVE-2012-3350—webappsphp06 Jul 2012
SQL injection vulnerability in index.php in Webmatic 3.1.1 allows remote attackers to execute arbitrary SQL commands via
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apache Sling - Denial of Service
CVE-2012-2138—dosmultiple06 Jul 2012
The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling do
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 3.2.24 - 'fs/eventpoll.c' Local Denial of Service
CVE-2012-3375—doslinux05 Jul 2012
The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in E
23RISK
open ↗
Exploit-DB✓ VexDay Proof
IBM Rational ClearQuest CQOle - Remote Code Execution (Metasploit)
CVE-2012-0708—remotewindows05 Jul 2012
Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 bef
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Tiki Wiki CMS Groupware 8.3 - 'Unserialize()' PHP Code Execution
CVE-2012-0911—webappsphp04 Jul 2012
TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Tiki Wiki CMS Groupware 8.3 - 'Unserialize()' PHP Code Execution
CVE-2012-3996—webappsphp04 Jul 2012
TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to (
23RISK
open ↗
Exploit-DB✓ VexDay Proof
gnome-terminal (vte) VteTerminal - Escape Sequence Parsing Remote Denial of Service
CVE-2012-2738—doslinux03 Jul 2012
The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause a denial of service (lo
28RISK
open ↗
Exploit-DB
WANGKONGBAO CNS-1000 UTM IPS-FW - Directory Traversal (Metasploit)
CVE-2012-4031—webappshardware02 Jul 2012
Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attacke
50RISK
open ↗
Exploit-DB✓ VexDay Proof
HP Data Protector - Create New Folder Buffer Overflow (Metasploit)
CVE-2012-0124—remotewindows01 Jul 2012
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974
50RISK
open ↗
Exploit-DB✓ VexDay Proof
IrfanView JPEG2000 4.3.2.0 - jp2 Stack Buffer Overflow (Metasploit)
CVE-2012-0897—localwindows01 Jul 2012
Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute a
50RISK
open ↗
Exploit-DB
GIMP 2.8.0 - '.FIT' File Format Denial of Service
CVE-2012-3236—dosmultiple30 Jun 2012
fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and applic
28RISK
open ↗
Exploit-DB
IrfanView JLS Formats PlugIn - Heap Overflow
CVE-2012-3585—doswindows30 Jun 2012
Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns be
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SWFupload - 'movieName' Cross-Site Scripting
CVE-2012-3414—webappsmultiple29 Jun 2012
Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before
23RISK
open ↗
Exploit-DB✓ VexDay Proof
specview 2.5 build 853 - Directory Traversal
CVE-2012-5972—webappswindows29 Jun 2012
SpecView Directory Traversal
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Openfire Server 3.6.0a - Admin Console Authentication Bypass (Metasploit)
CVE-2008-6508—webappsjsp28 Jun 2012
Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows rem
60RISK
open ↗
← previouspage 280 / 817next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.