Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,528cataloged exploits

35,606CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,453Referência 22,407GitHub PoC 14,244VulnCheck XDB 8,663Nuclei 4,287Metasploit 3,474✓ verified onlyrecent popular risk

22,367 exploits

Referência✓ VexDay Proof

NewsReactor 20070220 - Article Grabbing Remote Buffer Overflow (2)

CVE-2007-1568—remotewindows

Stack-based buffer overflow in DaanSystems NewsReactor 20070220.21 allows remote attackers to execute arbitrary code via

23RISK

open ↗

Referência✓ VexDay Proof

News Bin Pro 4.32 - Article Grabbing Remote Unicode Buffer Overflow

CVE-2007-1569—doswindows

Stack-based buffer overflow in NewsBin Pro 4.32 allows remote attackers to cause a denial of service or execute arbitrar

23RISK

open ↗

Referência✓ VexDay Proof

Mercur IMAPD 5.00.14 (Windows x86) - Remote Denial of Service

CVE-2007-1578—doswindows_x86

Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD (mcrimap4.exe) 5.00.14, with SP4, a

28RISK

open ↗

Referência

CVE-2017-17572

CVE-2017-17572—

FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.

23RISK

open ↗

Referência✓ VexDay Proof

Mercur Messaging 2005 (Windows 2000 SP4) - IMAP 'Subscribe' Remote Overflow

CVE-2007-1579—remotewindows

Stack-based buffer overflow in Atrium MERCUR IMAPD allows remote attackers to have an unknown impact via a certain SUBSC

35RISK

open ↗

Referência

CVE-2017-17572

CVE-2017-17572—

FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.

23RISK

open ↗

Referência✓ VexDay Proof

PHP 5.2.0 (OSX) - 'header()' Space Trimming Buffer Underflow

CVE-2007-1584—localosx

Buffer underflow in the header function in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by pas

23RISK

open ↗

Referência✓ VexDay Proof

MPM Chat 2.5 - 'view.php?logi' Local File Inclusion

CVE-2007-1613—webappsphp

Directory traversal vulnerability in view.php in MPM Chat 2.5 allows remote attackers to include and execute arbitrary l

23RISK

open ↗

Referência✓ VexDay Proof

ScriptMagix Lyrics 2.0 - 'index.php?recid' SQL Injection

CVE-2007-1616—webappsphp

SQL injection vulnerability in index.php in ScriptMagix Lyrics 2.0 and earlier allows remote attackers to execute arbitr

23RISK

open ↗

Referência

CVE-2017-17573

CVE-2017-17573—

FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id p

23RISK

open ↗

Referência✓ VexDay Proof

ScriptMagix Recipes 2.0 - 'index.php?catid' SQL Injection

CVE-2007-1617—webappsphp

SQL injection vulnerability in index.php in ScriptMagix Recipes 2.0 and earlier allows remote attackers to execute arbit

23RISK

open ↗

Referência

CVE-2017-17573

CVE-2017-17573—

FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id p

23RISK

open ↗

Referência✓ VexDay Proof

PHP DB Designer 1.02 - Remote File Inclusion

CVE-2007-1620—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute

28RISK

open ↗

Referência✓ VexDay Proof

Active Photo Gallery - 'catid' SQL Injection

CVE-2007-1629—webappsasp

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows remote attackers to execute

23RISK

open ↗

Referência

CVE-2017-17574

CVE-2017-17574—

FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.

23RISK

open ↗

Referência✓ VexDay Proof

Active Link Engine - 'default.asp?catid' SQL Injection

CVE-2007-1630—webappsasp

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Link Engine allows remote attackers to execute a

23RISK

open ↗

Referência

CVE-2017-17574

CVE-2017-17574—

FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.

23RISK

open ↗

Referência✓ VexDay Proof

PHP-Nuke Module splattforum 4.0 RC1 - Local File Inclusion

CVE-2007-1633—webappsphp

Directory traversal vulnerability in bbcode_ref.php in the Giorgio Ciranni Splatt Forum 4.0 RC1 module for PHP-Nuke allo

23RISK

open ↗

Referência✓ VexDay Proof

ClassWeb 2.0.3 - 'BASE' Remote File Inclusion

CVE-2007-1640—webappsphp

Multiple PHP remote file inclusion vulnerabilities in ClassWeb 2.03 and earlier allow remote attackers to execute arbitr

23RISK

open ↗

Referência

CVE-2017-17575

CVE-2017-17575—

FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter.

23RISK

open ↗

Referência✓ VexDay Proof

PortailPhp 2.0 - 'idnews' SQL Injection

CVE-2007-1641—webappsphp

SQL injection vulnerability in index.php in PortailPHP 2.0 allows remote attackers to execute arbitrary SQL commands via

23RISK

open ↗

Referência✓ VexDay Proof

Active NewsLetter 4.3 - 'ViewNewspapers.asp' SQL Injection

CVE-2007-1696—webappsasp

SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execut

23RISK

open ↗

Referência

CVE-2017-17576

CVE-2017-17576—

FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or se

23RISK

open ↗

Referência✓ VexDay Proof

Philex 0.2.3 - Remote File Inclusion / File Disclosure

CVE-2007-1698—webappsphp

download.php in Philex 0.2.3 and earlier allows remote attackers to read arbitrary files and source code, and obtain sen

23RISK

open ↗

Referência✓ VexDay Proof

Mambo Module Flatmenu 1.07 - Remote File Inclusion

CVE-2007-1702—webappsphp

PHP remote file inclusion vulnerability in mod_flatmenu.php in the Flatmenu 1.07 and earlier Mambo module allows remote

23RISK

open ↗

Referência✓ VexDay Proof

Joomla! Component RWCards 2.4.3 - SQL Injection

CVE-2007-1703—webappsphp

SQL injection vulnerability in index.php in the RWCards (com_rwcards) 2.4.3 and earlier component for Joomla! allows rem

23RISK

open ↗

Referência✓ VexDay Proof

Active Trade 2 - 'catid' SQL Injection

CVE-2007-1705—webappsasp

SQL injection vulnerability in default.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands v

23RISK

open ↗

Referência✓ VexDay Proof

eWebquiz 8 - 'eWebQuiz.asp' SQL Injection

CVE-2007-1706—webappsasp

SQL injection vulnerability in eWebQuiz.asp in eWebQuiz 8 allows remote attackers to execute arbitrary SQL commands via

23RISK

open ↗

Referência

CVE-2017-17636

CVE-2017-17636—

MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter.

23RISK

open ↗

Referência

CVE-2017-2373

CVE-2017-2373—

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.