Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

81,192cataloged exploits
37,765CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,482Referência 24,138GitHub PoC 15,542VulnCheck XDB 9,091Nuclei 4,434Metasploit 3,505✓ verified onlyrecentpopularrisk
24,482 exploits
Exploit-DB✓ VexDay Proof
Joomla! Component Online Market 2.x - Local File Inclusion
CVE-2010-1722—webappsphp12 Apr 2010
Directory traversal vulnerability in the Online Market (com_market) component 2.x for Joomla! allows remote attackers to
38RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Sweetykeeper 1.5 - Local File Inclusion
CVE-2010-1474—webappsphp12 Apr 2010
Directory traversal vulnerability in the Sweety Keeper (com_sweetykeeper) component 1.5.x for Joomla! allows remote atta
38RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Online Exam 1.5.0 - Local File Inclusion
CVE-2010-1715—webappsphp12 Apr 2010
Directory traversal vulnerability in the Online Examination (aka Online Exam or com_onlineexam) component 1.5.0 for Joom
38RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Advertising 0.25 - Local File Inclusion
CVE-2010-1473—webappsphp12 Apr 2010
Directory traversal vulnerability in the Advertising (com_advertising) component 0.25 for Joomla! allows remote attacker
38RISK
open ↗
Exploit-DB✓ VexDay Proof
Elite Gaming Ladders 3.5 - 'match' SQL Injection
CVE-2010-5016—webappsphp11 Apr 2010
SQL injection vulnerability in matchdb.php in Elite Gaming Ladders 3.5 and earlier allows remote attackers to execute ar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
HotNews 0.7.2 - Remote File Inclusion
CVE-2004-1796—webappsphp11 Apr 2010
PHP remote file inclusion vulnerability in HotNews 0.7.2 and earlier allows remote attackers to execute arbitrary PHP co
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component AlphaUserPoints 1.5.5 - Local File Inclusion
CVE-2010-1476—webappsphp11 Apr 2010
Directory traversal vulnerability in the AlphaUserPoints (com_alphauserpoints) component 1.5.5 for Joomla! allows remote
38RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Preventive And Reservation 1.0.5 - Local File Inclusion
CVE-2010-1475—webappsphp11 Apr 2010
Directory traversal vulnerability in the Preventive & Reservation (com_preventive) component 1.0.5 for Joomla! allows re
38RISK
open ↗
Exploit-DB✓ VexDay Proof
Trellian FTP Client - PASV Buffer Overflow
CVE-2010-1465—remotewindows11 Apr 2010
Stack-based buffer overflow in Trellian FTP client 3.01, including 3.1.3.1789, allows remote attackers to execute arbitr
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component RokModule 1.1 - 'moduleid' Blind SQL Injection
CVE-2010-1479—webappsphp11 Apr 2010
SQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows remote attackers to execut
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component TweetLA 1.0.1 - Local File Inclusion
CVE-2010-1533—webappsphp11 Apr 2010
Directory traversal vulnerability in the TweetLA (com_tweetla) component 1.0.1 for Joomla! allows remote attackers to re
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JProject Manager 1.0 - Local File Inclusion
CVE-2010-1469—webappsphp11 Apr 2010
Directory traversal vulnerability in the Ternaria Informatica JProject Manager (com_jprojectmanager) component 1.0 for J
38RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Multi-Venue Restaurant Menu Manager 1.5.2 - SQL Injection
CVE-2010-1468—webappsphp11 Apr 2010
SQL injection vulnerability in the Multi-Venue Restaurant Menu Manager (aka MVRMM or com_mv_restaurantmenumanager) compo
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Jfeedback 1.2 - Local File Inclusion
CVE-2010-1478—webappsphp11 Apr 2010
Directory traversal vulnerability in the Ternaria Informatica Jfeedback! (com_jfeedback) component 1.2 for Joomla! allow
38RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component TRAVELbook 1.0.1 - Local File Inclusion
CVE-2010-1535—webappsphp11 Apr 2010
Directory traversal vulnerability in the TRAVELbook (com_travelbook) component 1.0.1 for Joomla! allows remote attackers
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component RokModule 1.1 - 'moduleid' Blind SQL Injection
CVE-2010-1480—webappsphp11 Apr 2010
SQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows remote attackers to execut
23RISK
open ↗
Exploit-DB
Joomla! Component Real Estate Property 3.1.22-03 - 'aid' SQL Injection
CVE-2010-1874—webappsphp10 Apr 2010
SQL injection vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows remote a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Java Deployment Toolkit - Performs Insufficient Validation of Parameters
CVE-2010-0886—remotewindows09 Apr 2010
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6
50RISK
open ↗
Exploit-DB✓ VexDay Proof
JAVA Web Start - Arbitrary Command-Line Injection
CVE-2010-0886—remotemultiple09 Apr 2010
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Sun Java Web Start Plugin - Command Line Argument Injection (Metasploit)
CVE-2010-1423—localwindows09 Apr 2010
Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 U
50RISK
open ↗
Exploit-DB✓ VexDay Proof
ReiserFS (Linux Kernel 2.6.34-rc3 / RedHat / Ubuntu 9.10) - 'xattr' Local Privilege Escalation
CVE-2010-1146—locallinux09 Apr 2010
The Linux kernel 2.6.33.2 and earlier, when a ReiserFS filesystem exists, does not restrict read or write access to the
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Foobla Suggestions 1.5.1.2 - Local File Inclusion
CVE-2010-2920—webappsphp09 Apr 2010
Directory traversal vulnerability in the Foobla Suggestions (com_foobla_suggestions) component 1.5.1.2 for Joomla! allow
38RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusion
CVE-2010-1532—webappsphp09 Apr 2010
Directory traversal vulnerability in the givesight PowerMail Pro (com_powermail) component 1.5.3 for Joomla! allows remo
43RISK
open ↗
Exploit-DB
Joomla! Component Agenda Address Book 1.0.1 - 'id' SQL Injection
CVE-2010-1716—webappsphp09 Apr 2010
SQL injection vulnerability in the Agenda Address Book (com_agenda) component 1.0.1 for Joomla! allows remote attackers
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JA Voice 2.0 - Local File Inclusion
CVE-2010-1982—webappsphp09 Apr 2010
Directory traversal vulnerability in the JA Voice (com_javoice) component 2.0 for Joomla! allows remote attackers to rea
38RISK
open ↗
Exploit-DB✓ VexDay Proof
Tembria Server Monitor 5.6.0 - Denial of Service
CVE-2010-1316—doswindows09 Apr 2010
Multiple stack-based buffer overflows in Tembria Server Monitor before 5.6.1 allow remote attackers to cause a denial of
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Sun Java Web Start Plugin - Command Line Argument Injection (Metasploit)
CVE-2010-0886—localwindows09 Apr 2010
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Multiple Vendor 'librpc.dll' Signedness Error - Remote Code Execution
CVE-2009-2753—dosmultiple08 Apr 2010
Multiple buffer overflows in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portma
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component AWDwall 1.5.4 - Local File Inclusion / SQL Injection
CVE-2010-1494—webappsphp08 Apr 2010
Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to re
43RISK
open ↗
Exploit-DB✓ VexDay Proof
Joomla! Component AWDwall 1.5.4 - Local File Inclusion / SQL Injection
CVE-2010-1493—webappsphp08 Apr 2010
SQL injection vulnerability in the AWDwall (com_awdwall) component before 1.5.5 for Joomla! allows remote attackers to e
23RISK
open ↗
← previouspage 389 / 817next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.