Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

81,192cataloged exploits
37,765CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,482Referência 24,138GitHub PoC 15,542VulnCheck XDB 9,091Nuclei 4,434Metasploit 3,505✓ verified onlyrecentpopularrisk
24,482 exploits
Exploit-DB✓ VexDay Proof
MIT Kerberos 5 - 'src/kdc/do_tgs_req.c' Ticket Renewal Double-Free Memory Corruption
CVE-2010-1320—remotelinux20 Apr 2010
Double free vulnerability in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7.x and 1.
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JTM Reseller 1.9 Beta - SQL Injection
CVE-2010-1877—webappsphp20 Apr 2010
SQL injection vulnerability in the JTM Reseller (com_jtm) component 1.9 Beta for Joomla! allows remote attackers to exec
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Mongoose Web Server 2.8 - Multiple Directory Traversals
CVE-2009-4535—remotewindows20 Apr 2010
Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / (slash) cha
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component GBU Facebook 1.0.5 - SQL Injection
CVE-2010-5056—webappsphp19 Apr 2010
SQL injection vulnerability in the GBU Facebook (com_gbufacebook) component 1.0.5 for Joomla! allows remote attackers to
23RISK
open ↗
Exploit-DB✓ VexDay Proof
TweakFS 1.0 FSX Edition - Stack Buffer Overflow
CVE-2010-1458—localwindows19 Apr 2010
Stack-based buffer overflow in Create and Extract Zips TweakFS Zip Utility 1.0 for Flight Simulator X (FSX) allows remot
23RISK
open ↗
Exploit-DB
CMS Ariadna 2009 - SQL Injection
CVE-2010-5057—webappsphp19 Apr 2010
SQL injection vulnerability in detResolucion.php in CMS Ariadna 1.1 allows remote attackers to execute arbitrary SQL com
23RISK
open ↗
Exploit-DB
CMS Ariadna 2009 - SQL Injection
CVE-2010-5058—webappsphp19 Apr 2010
SQL injection vulnerability in detResolucion.php in CMS Ariadna 1.1 allows remote attackers to execute arbitrary SQL com
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Matamko 1.01 - Local File Inclusion
CVE-2010-1495—webappsphp18 Apr 2010
Directory traversal vulnerability in the Matamko (com_matamko) component 1.01 for Joomla! allows remote attackers to rea
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Archery Scores 1.0.6 - Local File Inclusion
CVE-2010-1718—webappsphp18 Apr 2010
Directory traversal vulnerability in archeryscores.php in the Archery Scores (com_archeryscores) component 1.0.6 for Joo
38RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component iF surfALERT 1.2 - Local File Inclusion
CVE-2010-1717—webappsphp18 Apr 2010
Directory traversal vulnerability in the iF surfALERT (com_if_surfalert) component 1.2 for Joomla! allows remote attacke
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Gadget Factory 1.0.0 - Local File Inclusion
CVE-2010-1956—webappsphp18 Apr 2010
Directory traversal vulnerability in the Gadget Factory (com_gadgetfactory) component 1.0.0 and 1.5.0 for Joomla! allows
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component ZiMBCore 0.1 - Local File Inclusion
CVE-2010-1603—webappsphp18 Apr 2010
Directory traversal vulnerability in the ZiMB Core (aka ZiMBCore or com_zimbcore) component 0.1 in the ZiMB Manager coll
38RISK
open ↗
Exploit-DB✓ VexDay Proof
dl_stats - Multiple Vulnerabilities
CVE-2010-1498—webappsphp18 Apr 2010
Multiple SQL injection vulnerabilities in dl_stats before 2.0 allow remote attackers to execute arbitrary SQL commands v
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusion
CVE-2010-1602—webappsphp18 Apr 2010
Directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) component 0.8.1 for Joomla! allows remote attack
43RISK
open ↗
Exploit-DB✓ VexDay Proof
dl_stats - Multiple Vulnerabilities
CVE-2010-1497—webappsphp18 Apr 2010
Cross-site scripting (XSS) vulnerability in download_proc.php in dl_stats before 2.0 allows remote attackers to inject a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion
CVE-2010-1723—webappsphp18 Apr 2010
Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map (com_drawroot) component 1.1 for Joomla! all
38RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component iNetLanka Multiple Map 1.0 - Local File Inclusion
CVE-2010-1953—webappsphp18 Apr 2010
Directory traversal vulnerability in the iNetLanka Multiple Map (com_multimap) component 1.0 for Joomla! allows remote a
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component iNetLanka Multiple root 1.0 - Local File Inclusion
CVE-2010-1954—webappsphp18 Apr 2010
Directory traversal vulnerability in the iNetLanka Multiple root (com_multiroot) component 1.0 and 1.1 for Joomla! allow
43RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP RapidKill Pro 5.x - Arbitrary File Upload
CVE-2006-5918—webappsphp17 Apr 2010
Unrestricted file upload vulnerability in RapidKill (aka PHP Rapid Kill) 5.7 Pro, and certain other versions, allows rem
23RISK
open ↗
Exploit-DB
Multiple Vendor AgentX++ - Stack Buffer Overflow (PoC)
CVE-2010-1318—doswindows17 Apr 2010
Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Ser
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows 7/2008 R2 - SMB Client Trans2 Stack Overflow (MS10-020) (PoC)
CVE-2010-0269—doswindows17 Apr 2010
The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1,
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows 7/2008 R2 - SMB Client Trans2 Stack Overflow (MS10-020) (PoC)
CVE-2010-0477—doswindows17 Apr 2010
The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle (1) SMBv1 and (2) SMBv2 respon
35RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows 7/2008 R2 - SMB Client Trans2 Stack Overflow (MS10-020) (PoC)
CVE-2010-0270—doswindows17 Apr 2010
The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction re
35RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows 7/2008 R2 - SMB Client Trans2 Stack Overflow (MS10-020) (PoC)
CVE-2010-0476—doswindows17 Apr 2010
The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allo
35RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - SMB Client-Side Bug (PoC) (MS10-006)
CVE-2010-0017—doswindows16 Apr 2010
Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB serv
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Apache OFBiz - Remote Execution (via SQL Execution)
CVE-2010-0432—remotemultiple16 Apr 2010
Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlie
28RISK
open ↗
Exploit-DB✓ VexDay Proof
SIESTTA 2.0 - Local File Inclusion / Cross-Site Scripting
CVE-2010-1710—webappsphp16 Apr 2010
Directory traversal vulnerability in login.php in Siestta 2.0, when register_globals is enabled, allows remote attackers
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apache OFBiz - Admin Creator
CVE-2010-0432—remotemultiple16 Apr 2010
Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlie
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JoltCard 1.2.1 - SQL Injection
CVE-2010-1496—webappsphp16 Apr 2010
SQL injection vulnerability in the JoltCard (com_joltcard) component 1.2.1 for Joomla! allows remote attackers to execut
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SIESTTA 2.0 - Local File Inclusion / Cross-Site Scripting
CVE-2010-1711—webappsphp16 Apr 2010
Cross-site scripting (XSS) vulnerability in carga_foto_al.php in Siestta 2.0, when register_globals is enabled, allows r
23RISK
open ↗
← previouspage 387 / 817next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.