Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

80,646cataloged exploits
37,382CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,482Referência 23,825GitHub PoC 15,392VulnCheck XDB 9,029Nuclei 4,416Metasploit 3,502✓ verified onlyrecentpopularrisk
24,482 exploits
Exploit-DB✓ VexDay Proof
Lattice Diamond Programmer 1.4.2 - Buffer Overflow (PoC)
CVE-2012-2614—doswindows22 Jun 2012
Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a d
23RISK
open ↗
Exploit-DB✓ VexDay Proof
XnView 1.98.8 - '.tiff' Image Processing Heap Overflow (2)
CVE-2012-0276—doswindows22 Jun 2012
Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (applicat
23RISK
open ↗
Exploit-DB✓ VexDay Proof
XnView 1.98.8 - '.gif' Image Processing Heap Overflow
CVE-2012-0282—doswindows22 Jun 2012
Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash
23RISK
open ↗
Exploit-DB
IBM System Storage DS Storage Manager Profiler - Multiple Vulnerabilities
CVE-2012-2171—webappswindows21 Jun 2012
SQL injection vulnerability in ModuleServlet.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager
23RISK
open ↗
Exploit-DB
IBM System Storage DS Storage Manager Profiler - Multiple Vulnerabilities
CVE-2012-2172—webappswindows21 Jun 2012
Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Storag
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Adobe Flash Player - AVM Verification Logic Array Indexing Code Execution (Metasploit)
CVE-2011-2110—remotewindows20 Jun 2012
Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android,
60RISK
open ↗
Exploit-DB✓ VexDay Proof
web@all - Cross-Site Scripting
CVE-2012-3232—webappsphp20 Jun 2012
Cross-site scripting (XSS) vulnerability in search.php in web@all 2.0, as downloaded before May 30, 2012, allows remote
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Adobe Flash Player - AVM Verification Logic Array Indexing Code Execution (Metasploit)
CVE-2008-4192—remotewindows20 Jun 2012
The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitra
23RISK
open ↗
Exploit-DB✓ VexDay Proof
HP Data Protector Client - EXEC_CMD Remote Code Execution
CVE-2011-0922—remotewindows19 Jun 2012
The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that ref
50RISK
open ↗
Exploit-DB✓ VexDay Proof
MediaWiki 1.x - 'uselang' Cross-Site Scripting
CVE-2012-2698—webappsphp17 Jun 2012
Cross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php in MediaWiki before 1.1
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP 5.4.3 - apache_request_headers Function Buffer Overflow (Metasploit)
CVE-2012-2329—remotewindows17 Jun 2012
Buffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before 5.4.3 allows remote at
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Lattice Semiconductor PAC-Designer 6.21 - Symbol Value Buffer Overflow (Metasploit)
CVE-2012-2915—localwindows17 Jun 2012
Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft XML Core Services - MSXML Uninitialized Memory Corruption (MS12-043) (Metasploit)
CVE-2012-1889HIGHunder attackremotewindows16 Jun 2012
Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attacker
100RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - Same ID Property Deleted Object Handling Memory Corruption (MS12-037) (Metasploit)
CVE-2012-1875—remotewindows14 Jun 2012
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbit
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Myre Real Estate Mobile 2012 - Multiple Vulnerabilities
CVE-2012-4258—webappsphp14 Jun 2012
Multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote attackers to execute arbitrar
23RISK
open ↗
Exploit-DB
Wyse - Machine Remote Power Off (Denial of Service) (Metasploit)
CVE-2009-0693—doshardware14 Jun 2012
Multiple buffer overflows in Wyse Device Manager (WDM) 4.7.x allow remote attackers to execute arbitrary code via (1) th
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Juniper Networks Mobility System Software - '/aaa/wba_login.html' Cross-Site Scripting
CVE-2012-1038—remotehardware14 Jun 2012
Cross-site scripting (XSS) vulnerability in the WebAAA login functionality (wba_login.html) in Juniper Networks Mobility
23RISK
open ↗
Exploit-DB✓ VexDay Proof
XM Easy Personal FTP Server 5.30 - Remote Format String Write4
CVE-2007-1195—remotewindows14 Jun 2012
Multiple buffer overflows in XM Easy Personal FTP Server 5.3.0 allow remote attackers to execute arbitrary code via unsp
23RISK
open ↗
Exploit-DB
ESRI ArcGIS 10.0.x / ArcMap 9 - Arbitrary Code Execution
CVE-2012-1661—localwindows14 Jun 2012
ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, wh
28RISK
open ↗
Exploit-DB
Wyse - Machine Remote Power Off (Denial of Service) (Metasploit)
CVE-2009-0695—doshardware14 Jun 2012
hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attacker
50RISK
open ↗
Exploit-DB
Adobe Illustrator CS5.5 - Memory Corruption
CVE-2012-0780—localmultiple14 Jun 2012
Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption)
28RISK
open ↗
Exploit-DB✓ VexDay Proof
F5 BIG-IP - SSH Private Key Exposure (Metasploit)
CVE-2012-1493—remotehardware13 Jun 2012
F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, a
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple iTunes 10.6.1.7 - '.m3u' Walking Heap Buffer Overflow (PoC)
CVE-2012-0677—dosmultiple13 Jun 2012
Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a de
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Symantec Web Gateway 5.0.2.8 - 'ipchange.php' Command Injection (Metasploit)
CVE-2012-0297—webappsphp12 Jun 2012
The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts,
60RISK
open ↗
Exploit-DB✓ VexDay Proof
MySQL - Authentication Bypass
CVE-2012-2122—remotemultiple12 Jun 2012
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x befor
60RISK
open ↗
Exploit-DB✓ VexDay Proof
F5 BIG-IP - Authentication Bypass
CVE-2012-1493—remotehardware12 Jun 2012
F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, a
50RISK
open ↗
Exploit-DB✓ VexDay Proof
BMC Identity Management - Cross-Site Request Forgery
CVE-2012-2959—webappsjava11 Jun 2012
Cross-site request forgery (CSRF) vulnerability in password-manager/changePasswords.do in BMC Identity Management Suite
23RISK
open ↗
Exploit-DB✓ VexDay Proof
F5 BIG-IP - Authentication Bypass (PoC)
CVE-2012-1493—doshardware11 Jun 2012
F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, a
50RISK
open ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin wp-gpx-map 1.1.21 - Arbitrary File Upload
CVE-2012-6649—webappsphp11 Jun 2012
WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload.
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Office - ClickOnce Unsafe Object Package Handling (MS12-005) (Metasploit)
CVE-2012-0013—localwindows11 Jun 2012
Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Se
60RISK
open ↗
← previouspage 282 / 817next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.