Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,107cataloged exploits
34,679CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,443Referência 21,692GitHub PoC 13,812VulnCheck XDB 8,460Nuclei 4,233Metasploit 3,467✓ verified onlyrecentpopularrisk
24,443 exploits
Exploit-DB
WikkaWiki 1.3.2 - Multiple Vulnerabilities
CVE-2011-4449—webappsphp30 Nov 2011
actions/files/files.php in WikkaWiki 1.3.1 and 1.3.2, when INTRANET_MODE is enabled, supports file uploads for file exte
23RISK
open ↗
Exploit-DB✓ VexDay Proof
CTEK SkyRouter 4200/4300 - Command Execution (Metasploit)
CVE-2011-5010—remotehardware30 Nov 2011
apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via sh
50RISK
open ↗
Exploit-DB✓ VexDay Proof
OrangeHRM 2.6.11 - 'lib/controllers/CentralController.php' URI Cross-Site Scripting
CVE-2011-5258—webappsphp30 Nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in OrangeHRM before 2.6.11.2 allow remote attackers to inject arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Oxide WebServer - Directory Traversal
CVE-2011-4712—remotewindows29 Nov 2011
Directory traversal vulnerability in Oxide WebServer allows remote attackers to read arbitrary files via a ..\ (dot dot
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Virtual Vertex Muster 6.1.6 - Web Interface Directory Traversal
CVE-2011-4714—webappsasp29 Nov 2011
Directory traversal vulnerability in Virtual Vertex Muster before 6.20 allows remote attackers to read arbitrary files v
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities
CVE-2011-4875—doswindows28 Nov 2011
Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC
28RISK
open ↗
Exploit-DB
Google Android - 'content://' URI Multiple Information Disclosure Vulnerabilities
CVE-2010-4804—webappsandroid28 Nov 2011
The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// UR
43RISK
open ↗
Exploit-DB✓ VexDay Proof
siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities
CVE-2011-4530—doswindows28 Nov 2011
Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, w
23RISK
open ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Skysa App Bar - 'idnews' Cross-Site Scripting
CVE-2011-5179—webappsphp28 Nov 2011
Cross-site scripting (XSS) vulnerability in skysa-official/skysa.php in Skysa App Bar Integration plugin, possibly befor
38RISK
open ↗
Exploit-DB✓ VexDay Proof
Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities
CVE-2011-4878—doswindows28 Nov 2011
Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2
28RISK
open ↗
Exploit-DB✓ VexDay Proof
siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities
CVE-2011-4529—doswindows28 Nov 2011
Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allow remote attackers to
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities
CVE-2011-4876—doswindows28 Nov 2011
Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008;
23RISK
open ↗
Exploit-DB✓ VexDay Proof
siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities
CVE-2011-4532—doswindows28 Nov 2011
Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical use
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities
CVE-2011-4877—doswindows28 Nov 2011
HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP,
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities
CVE-2011-4879—doswindows28 Nov 2011
miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA po
28RISK
open ↗
Exploit-DB✓ VexDay Proof
siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities
CVE-2011-4531—doswindows28 Nov 2011
Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service (
23RISK
open ↗
Exploit-DB✓ VexDay Proof
eSyndiCat Pro 2.3.5 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2011-5177—webappsphp26 Nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in admin/controller.php in eSyndiCat Pro 2.3.05 allow remote attacke
23RISK
open ↗
Exploit-DB
PHP video script - SQL Injection
CVE-2011-5103—webappsphp25 Nov 2011
SQL injection vulnerability in Alurian Prismotube PHP Video Script allows remote attackers to execute arbitrary SQL comm
23RISK
open ↗
Exploit-DB✓ VexDay Proof
XChat 2.8.9 - Heap Overflow Denial of Service
CVE-2011-5129—doslinux25 Nov 2011
Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and p
23RISK
open ↗
Exploit-DB✓ VexDay Proof
HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/statuspoll.jsp?nodename' Cross-Site Scripting
CVE-2011-5184—webappsjsp24 Nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
AdaptCMS 2.0 - SQL Injection
CVE-2011-5108—webappsphp24 Nov 2011
Cross-site scripting (XSS) vulnerability in config.php in AdaptCMS 2.0.0 and 2.0.1 allows remote attackers to inject arb
23RISK
open ↗
Exploit-DB✓ VexDay Proof
HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/ping.jsp?nodename' Cross-Site Scripting
CVE-2011-5184—webappsjsp24 Nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject a
23RISK
open ↗
Exploit-DB
Log1 CMS 2.0 - 'ajax_create_folder.php' Remote Code Execution
CVE-2011-4825—webappsphp24 Nov 2011
Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinym
50RISK
open ↗
Exploit-DB✓ VexDay Proof
HP Network Node Manager (NMM) i 9.10 - '/nnm/mibdiscover?node' Cross-Site Scripting
CVE-2011-5184—webappsjsp24 Nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject a
23RISK
open ↗
Exploit-DB
LibLime Koha 4.2 - Local File Inclusion
CVE-2011-4715—webappscgi24 Nov 2011
Directory traversal vulnerability in cgi-bin/koha/mainpage.pl in Koha 3.4 before 3.4.7 and 3.6 before 3.6.1, and LibLime
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Balitbang CMS 3.3 - 'alumni.php?hal' SQL Injection
CVE-2011-5111—webappsphp24 Nov 2011
Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary S
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Balitbang CMS 3.3 - 'index.php?hal' SQL Injection
CVE-2011-5111—webappsphp24 Nov 2011
Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary S
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apache 7.0.x mod_proxy - Reverse Proxy Security Bypass
CVE-2011-4317—remotelinux24 Nov 2011
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, whe
35RISK
open ↗
Exploit-DB✓ VexDay Proof
HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/configurationpoll.jsp?nodename' Cross-Site Scripting
CVE-2011-5184—webappsjsp24 Nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/traceroute.jsp?nodename' Cross-Site Scripting
CVE-2011-5184—webappsjsp24 Nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject a
23RISK
open ↗
← previouspage 309 / 815next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.