Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

80,557cataloged exploits
37,313CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,478Referência 23,776GitHub PoC 15,367VulnCheck XDB 9,019Nuclei 4,415Metasploit 3,502✓ verified onlyrecentpopularrisk
19,066 exploits
Exploit-DB✓ VexDay Proof
Tyger Bug Tracking System 1.1.3 - 'ViewBugs.php?s' SQL Injection
CVE-2007-1289—webappsphp26 Feb 2007
SQL injection vulnerability in ViewBugs.php in Tyger Bug Tracking System (TygerBT) 1.1.3 allows remote attackers to exec
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle 10g - KUPW$WORKER.MAIN SQL Injection (2)
CVE-2006-3698—remotemultiple26 Feb 2007
Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle 9i/10g ACTIVATE_SUBSCRIPTION - SQL Injection (2)
CVE-2005-4832—remotemultiple26 Feb 2007
SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Pagesetter 6.2/6.3.0 - 'index.php' Local File Inclusion
CVE-2007-1158—webappsphp26 Feb 2007
Directory traversal vulnerability in index.php in the Pagesetter 6.2.0 through 6.3.0 beta 5 module for PostNuke allows r
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SolarPay - 'index.php' Local File Inclusion
CVE-2006-7099—webappsphp26 Feb 2007
Directory traversal vulnerability in index.php in SolarPay allows remote attackers to read certain files via a .. (dot d
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Audins Audiens 3.3 - 'setup.php?PATH_INFO' Cross-Site Scripting
CVE-2007-1241—webappsphp26 Feb 2007
Cross-site scripting (XSS) vulnerability in setup.php in Audins Audiens 3.3 allows remote attackers to inject arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SQLiteManager 1.2 - Local File Inclusion
CVE-2007-1232—webappsphp26 Feb 2007
Directory traversal vulnerability in SQLiteManager 1.2.0 allows remote attackers to read arbitrary files via a .. (dot d
35RISK
open ↗
Exploit-DB✓ VexDay Proof
Tyger Bug Tracking System 1.1.3 - 'register.php?PATH_INFO' Cross-Site Scripting
CVE-2007-1291—webappsphp26 Feb 2007
Multiple cross-site scripting (XSS) vulnerabilities in Tyger Bug Tracking System (TygerBT) 1.1.3 allow remote attackers
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Tyger Bug Tracking System 1.1.3 - 'login.php?PATH_INFO' Cross-Site Scripting
CVE-2007-1291—webappsphp26 Feb 2007
Multiple cross-site scripting (XSS) vulnerabilities in Tyger Bug Tracking System (TygerBT) 1.1.3 allow remote attackers
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2003 - Explorer '.WMF' File Handling Denial of Service
CVE-2007-1090—doswindows25 Feb 2007
Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service (cr
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Pickle 0.3 - 'download.php' Local File Inclusion
CVE-2007-1100—webappsphp24 Feb 2007
Directory traversal vulnerability in download.php in Ahmet Sacan Pickle before 20070301 allows remote attackers to read
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Active Calendar 1.2 - '/data/y_2.php?css' Cross-Site Scripting
CVE-2007-1111—webappsphp24 Feb 2007
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Active Calendar 1.2 - '/data/m_3.php?css' Cross-Site Scripting
CVE-2007-1111—webappsphp24 Feb 2007
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Active Calendar 1.2 - '/data/m_2.php?css' Cross-Site Scripting
CVE-2007-1111—webappsphp24 Feb 2007
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Active Calendar 1.2 - '/data/m_4.php?css' Cross-Site Scripting
CVE-2007-1111—webappsphp24 Feb 2007
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Active Calendar 1.2 - '/data/y_3.php?css' Cross-Site Scripting
CVE-2007-1111—webappsphp24 Feb 2007
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Active Calendar 1.2 - '/data/mysqlevents.php?css' Cross-Site Scripting
CVE-2007-1111—webappsphp24 Feb 2007
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Active Calendar 1.2 - 'showcode.php' Local File Inclusion
CVE-2007-1110—webappsphp24 Feb 2007
Directory traversal vulnerability in data/showcode.php in ActiveCalendar 1.2.0 allows remote attackers to read arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PhotoStand 1.2 - 'index.php' Cross-Site Scripting
CVE-2007-1101—webappsphp24 Feb 2007
Multiple cross-site scripting (XSS) vulnerabilities in Photostand 1.2.0 allow remote attackers to inject arbitrary web s
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Active Calendar 1.2 - '/data/flatevents.php?css' Cross-Site Scripting
CVE-2007-1111—webappsphp24 Feb 2007
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Active Calendar 1.2 - '/data/js.php?css' Cross-Site Scripting
CVE-2007-1111—webappsphp24 Feb 2007
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Docebo CMS 3.0.x - '/modules/htmlframechat/index.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2007-1240—webappsphp24 Feb 2007
Multiple cross-site scripting (XSS) vulnerabilities in Docebo CMS 3.0.3 through 3.0.5 allow remote attackers to inject a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
News Rover 12.1 Rev 1 - Stack Overflow (2)
CVE-2007-1041—localwindows24 Feb 2007
Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute ar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Docebo CMS 3.0.x - 'index.php?searchkey' Cross-Site Scripting
CVE-2007-1240—webappsphp24 Feb 2007
Multiple cross-site scripting (XSS) vulnerabilities in Docebo CMS 3.0.3 through 3.0.5 allow remote attackers to inject a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
XT:Commerce 3.04 - 'index.php' Local File Inclusion
CVE-2007-1126—webappsphp23 Feb 2007
Directory traversal vulnerability in index.php in xtcommerce allows remote attackers to read arbitrary files via a .. (d
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Simple one-file Gallery - 'gallery.php?f' Cross-Site Scripting
CVE-2007-1125—webappsphp23 Feb 2007
Cross-site scripting (XSS) vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to in
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle 9i/10g - ACTIVATE_SUBSCRIPTION SQL Injection
CVE-2005-4832—remotewindows23 Feb 2007
SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Simple one-file Gallery - 'gallery.php?f' Traversal Arbitrary File Access
CVE-2007-1124—webappsphp23 Feb 2007
Directory traversal vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to read arbi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle 10g Database - 'SUBSCRIPTION_NAME' SQL Injection (1)
CVE-2005-4832—remotemultiple23 Feb 2007
SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Oracle 9i/10g - DBMS_METADATA.GET_DDL SQL Injection
CVE-2006-0549—remotemultiple23 Feb 2007
SQL injection vulnerability in the SYS.DBMS_METADATA_UTIL package in Oracle Database 10g, and possibly earlier versions,
23RISK
open ↗
← previouspage 366 / 636next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.