Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

81,064cataloged exploits

37,667CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,482Referência 24,044GitHub PoC 15,521VulnCheck XDB 9,080Nuclei 4,432Metasploit 3,505✓ verified onlyrecent popular risk

19,066 exploits

Exploit-DB✓ VexDay Proof

TABS MailCarrier 2.51 - Remote Buffer Overflow

CVE-2004-1638—remotewindows16 Nov 2004

Buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long (1) EHLO and possibly (

50RISK

Exploit-DB✓ VexDay Proof

MiniShare 1.4.1 - Remote Buffer Overflow (2)

CVE-2004-2271—remotewindows16 Nov 2004

Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET req

60RISK

Exploit-DB✓ VexDay Proof

vBulletin - 'LAST.php' SQL Injection

CVE-2004-1515—webappsphp15 Nov 2004

SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute a

23RISK

Exploit-DB✓ VexDay Proof

Multiple AntiVirus - '.zip' Detection Bypass

CVE-2004-0936—localmultiple14 Nov 2004

RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global he

28RISK

Exploit-DB✓ VexDay Proof

Multiple AntiVirus - '.zip' Detection Bypass

CVE-2004-0932—localmultiple14 Nov 2004

McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004

35RISK

Exploit-DB✓ VexDay Proof

Multiple AntiVirus - '.zip' Detection Bypass

CVE-2004-0937—localmultiple14 Nov 2004

Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers

28RISK

Exploit-DB✓ VexDay Proof

Multiple AntiVirus - '.zip' Detection Bypass

CVE-2004-0934—localmultiple14 Nov 2004

Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and gl

28RISK

Exploit-DB✓ VexDay Proof

Multiple AntiVirus - '.zip' Detection Bypass

CVE-2004-0933—localmultiple14 Nov 2004

Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and

28RISK

Exploit-DB✓ VexDay Proof

Multiple AntiVirus - '.zip' Detection Bypass

CVE-2004-0935—localmultiple14 Nov 2004

Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compress

28RISK

Exploit-DB✓ VexDay Proof

Multiple AntiVirus - '.zip' Detection Bypass

CVE-2004-1096—localmultiple14 Nov 2004

Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to by

28RISK

Exploit-DB✓ VexDay Proof

Multiple AntiVirus - '.zip' Detection Bypass

CVE-2004-2442—localmultiple14 Nov 2004

Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows S

28RISK

Exploit-DB✓ VexDay Proof

Kerio Personal Firewall 4.1.1 - Multiple IP Options Denial of Service Vulnerabilities

CVE-2004-1109—doswindows12 Nov 2004

The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of service (

23RISK

Exploit-DB✓ VexDay Proof

Aztek Forum 4.0 - Multiple Input Validation Vulnerabilities

CVE-2004-2725—webappsphp12 Nov 2004

Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web sc

23RISK

Exploit-DB✓ VexDay Proof

IPSwitch IMail 8.13 - 'DELETE' Remote Stack Overflow

CVE-2004-1520—remotewindows12 Nov 2004

Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a lon

60RISK

Exploit-DB✓ VexDay Proof

SlimFTPd 3.15 - Remote Buffer Overflow

CVE-2004-2418—remotewindows10 Nov 2004

Buffer overflow in SlimFTPd 3.15 and earlier allows local users to execute arbitrary code via a long command, such as (1

23RISK

Exploit-DB✓ VexDay Proof

Linux Kernel 2.4.27/2.6.8 - 'binfmt_elf' Executable File Read

CVE-2004-1073—locallinux10 Nov 2004

The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, a

23RISK

Exploit-DB✓ VexDay Proof

XFree86 4.3 - Font Information File Buffer Overflow

CVE-2004-0083—locallinux10 Nov 2004

Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers t

28RISK

Exploit-DB✓ VexDay Proof

Qwik SMTP 0.3 - Format String

CVE-2004-2677—remotelinux09 Nov 2004

Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to exe

23RISK

Exploit-DB✓ VexDay Proof

CCProxy Log - Remote Stack Overflow

CVE-2004-2416—remotewindows09 Nov 2004

Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GE

50RISK

Exploit-DB✓ VexDay Proof

Ability Server 2.34 (Unix) - FTP 'STOR' Remote Buffer Overflow

CVE-2004-1626—remotewindows07 Nov 2004

Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code v

50RISK

Exploit-DB✓ VexDay Proof

MiniShare 1.4.1 - Remote Buffer Overflow (1)

CVE-2004-2271—remotewindows07 Nov 2004

Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET req

60RISK

Exploit-DB✓ VexDay Proof

Monolith Lithtech Game Engine - Multiple Remote Format String Vulnerabilities

CVE-2004-1500—remotemultiple05 Nov 2004

Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to caus

23RISK

Exploit-DB✓ VexDay Proof

Trend Micro ScanMail for Domino 2.51/2.6 - Remote File Disclosure

CVE-2004-1003—remotemultiple05 Nov 2004

Trend ScanMail allows remote attackers to obtain potentially sensitive information or disable the anti-virus capability

23RISK

Exploit-DB✓ VexDay Proof

TIPS MailPost 5.1.1 - Remote File Enumeration

CVE-2004-1102—webappscgi03 Nov 2004

MailPost 5.1.1sv, and possibly earlier versions, displays a different error message depending on whether the requested f

23RISK

Exploit-DB✓ VexDay Proof

TIPS MailPost 5.1.1 - Error Message Cross-Site Scripting

CVE-2004-1101—webappscgi03 Nov 2004

mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service (s

23RISK

Exploit-DB✓ VexDay Proof

TIPS MailPost 5.1.1 - 'APPEND' Cross-Site Scripting

CVE-2004-1100—webappscgi03 Nov 2004

Cross-site scripting (XSS) vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, when debug

23RISK

Exploit-DB✓ VexDay Proof

Goolery 0.3 - 'viewpic.php?conversation_id' Cross-Site Scripting

CVE-2004-2246—webappsphp02 Nov 2004

Cross-site scripting (XSS) vulnerability in Goollery before 0.04b allows remote attackers to inject arbitrary HTML or we

23RISK

Exploit-DB✓ VexDay Proof

WebHost Automation Helm Control Panel 3.1.x - Multiple Input Validation Vulnerabilities

CVE-2004-1499—webappsasp02 Nov 2004

Cross-site scripting (XSS) vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers

23RISK

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 6 - IFRAME Tag Buffer Overflow

CVE-2004-1050—remotewindows02 Nov 2004

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or

35RISK

Exploit-DB✓ VexDay Proof

Goolery 0.3 - 'viewalbum.php?page' Cross-Site Scripting

CVE-2004-2245—webappsphp02 Nov 2004

Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web script

23RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.