Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

81,064cataloged exploits
37,667CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,482Referência 24,044GitHub PoC 15,521VulnCheck XDB 9,080Nuclei 4,432Metasploit 3,505✓ verified onlyrecentpopularrisk
19,066 exploits
Exploit-DB✓ VexDay Proof
SquirrelMail - 'chpasswd' Local Buffer Overflow
CVE-2004-0524—locallinux20 Apr 2004
Buffer overflow in the chpasswd command in the Change_passwd plugin before 4.0, as used in SquirrelMail, allows local us
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Kinesphere Corporation Exchange POP3 4.0/5.0 - Remote Buffer Overflow
CVE-2004-1945—remotewindows20 Apr 2004
Buffer overflow in Kinesphere eXchange POP3 allows remote attackers to execute arbitrary code via a long MAIL FROM field
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Multiple Vendor - TCP Sequence Number Approximation (3)
CVE-2004-0230—remotemultiple20 Apr 2004
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial o
45RISK
open ↗
Exploit-DB✓ VexDay Proof
Multiple Vendor - TCP Sequence Number Approximation (2)
CVE-2004-0230—remotemultiple20 Apr 2004
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial o
45RISK
open ↗
Exploit-DB✓ VexDay Proof
Phorum 3.4.x - Phorum_URIAuth SQL Injection
CVE-2004-1938—webappsphp19 Apr 2004
SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands v
23RISK
open ↗
Exploit-DB✓ VexDay Proof
UTempter 0.5.x - Multiple Local Vulnerabilities
CVE-2004-0233—locallinux19 Apr 2004
Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Softwin BitDefender - AvxScanOnlineCtrl COM Object Arbitrary File Upload / Execution
CVE-2004-1947—remotewindows19 Apr 2004
The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain s
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Softwin BitDefender - AvxScanOnlineCtrl COM Object Information Disclosure
CVE-2004-1947—remotewindows19 Apr 2004
The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain s
23RISK
open ↗
Exploit-DB✓ VexDay Proof
phpBB 2.0.x - 'album_portal.php' Remote File Inclusion
CVE-2004-1943—webappsphp19 Apr 2004
PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8 allows remote attackers to e
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows NT 4.0/2000 - Local Descriptor Table Privilege Escalation (MS04-011)
CVE-2003-0910—localwindows18 Apr 2004
The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Win
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Macromedia ColdFusion MX 6.0 - Oversized Error Message Denial of Service
CVE-2004-2505—dosmultiple17 Apr 2004
Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows remote attackers to cause
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Gemitel 3.50 - '/affich.php' Remote File Inclusion / Command Injection
CVE-2004-1934—webappsphp15 Apr 2004
PHP remote file inclusion vulnerability in affich.php in Gemitel 3.50 allows remote attackers to execute arbitrary PHP c
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SCT Campus Pipeline 1.0/2.x/3.x - Email Attachment Script Injection
CVE-2004-1935—webappsphp15 Apr 2004
Cross-site scripting (XSS) vulnerability in SCT Campus Pipeline allows remote attackers to inject arbitrary web script o
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows Utility Manager - Local Privilege Escalation (MS04-011)
CVE-2003-0908—localwindows15 Apr 2004
The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to
28RISK
open ↗
Exploit-DB✓ VexDay Proof
WinZip - MIME Parsing Overflow
CVE-2004-0333—localwindows15 Apr 2004
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, all
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Real Networks Helix Universal Server 9.0.x - Denial of Service
CVE-2004-0389—doswindows15 Apr 2004
RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via mal
35RISK
open ↗
Exploit-DB✓ VexDay Proof
Neon WebDAV Client Library 0.2x - Format String
CVE-2004-0179—doslinux14 Apr 2004
Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Ca
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Rhino Software Zaep AntiSpam 2.0 - Cross-Site Scripting
CVE-2004-1939—webappscgi14 Apr 2004
Cross-site scripting (XSS) vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Qualcomm Eudora 6.0.3 - MIME Message Nesting Denial of Service
CVE-2004-1944—doswindows14 Apr 2004
Eudora 6.1 and 6.0.3 for Windows allows remote attackers to cause a denial of service (crash) via a deeply nested multip
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft IIS - SSL Remote Denial of Service (MS04-011)
CVE-2004-0120—doswindows14 Apr 2004
The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows r
35RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP-Nuke 6.x/7.x - CookieDecode Cross-Site Scripting
CVE-2004-1930—webappsphp13 Apr 2004
Cross-site scripting (XSS) vulnerability in the cookiedecode function in mainfile.php for PHP-Nuke 6.x through 7.2, when
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP-Nuke 6.x/7.x - Multiple SQL Injections
CVE-2004-1929—webappsphp13 Apr 2004
SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attackers
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SurgeLDAP 1.0 - 'User.cgi' Directory Traversal
CVE-2004-2253—remotecgi12 Apr 2004
Directory traversal vulnerability in user.cgi in SurgeLDAP 1.0g and earlier allows remote attackers to read arbitrary fi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
TikiWiki Project 1.8 - 'tiki-usermenu.php?sort_mode' SQL Injection
CVE-2004-1925—webappsphp12 Apr 2004
Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to exec
23RISK
open ↗
Exploit-DB✓ VexDay Proof
TikiWiki Project 1.8 - User Profile Multiple Option Remote Code Injections
CVE-2004-1926—webappsphp12 Apr 2004
Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to inject arbitrary code via the (1) Theme, (2)
23RISK
open ↗
Exploit-DB✓ VexDay Proof
TikiWiki Project 1.8 - Add Site Multiple Options Remote Code Injections
CVE-2004-1926—webappsphp12 Apr 2004
Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to inject arbitrary code via the (1) Theme, (2)
23RISK
open ↗
Exploit-DB✓ VexDay Proof
TikiWiki Project 1.8 - 'tiki-read_article.php?articleId' Cross-Site Scripting
CVE-2004-1924—webappsphp12 Apr 2004
Multiple cross-site scripting (XSS) vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote atta
23RISK
open ↗
Exploit-DB✓ VexDay Proof
TikiWiki Project 1.8 - 'tiki-usermenu.php?offset' SQL Injection
CVE-2004-1925—webappsphp12 Apr 2004
Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to exec
23RISK
open ↗
Exploit-DB✓ VexDay Proof
TikiWiki Project 1.8 - 'tiki-user_tasks.php?offset & sort_mode' SQL Injections
CVE-2004-1925—webappsphp12 Apr 2004
Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to exec
23RISK
open ↗
Exploit-DB✓ VexDay Proof
TikiWiki Project 1.8 - 'tiki-list_faqs.php?offset' SQL Injection
CVE-2004-1925—webappsphp12 Apr 2004
Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to exec
23RISK
open ↗
← previouspage 526 / 636next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.