Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

81,064cataloged exploits
37,667CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,482Referência 24,044GitHub PoC 15,521VulnCheck XDB 9,080Nuclei 4,432Metasploit 3,505✓ verified onlyrecentpopularrisk
19,066 exploits
Exploit-DB✓ VexDay Proof
Phorum 3.x - 'profile.php?target' Cross-Site Scripting
CVE-2004-1822—webappsphp15 Mar 2004
Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject ar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
VocalTec VGW4/8 Telephony Gateway - Remote Authentication Bypass
CVE-2004-1813—webappsasp15 Mar 2004
VocalTec VGW4/8 Gateway 8.0 allows remote attackers to bypass authentication via an HTTP request to home.asp with a trai
23RISK
open ↗
Exploit-DB✓ VexDay Proof
WarpSpeed 4nAlbum Module 0.92 - 'modules.php?gid' SQL Injection
CVE-2004-1821—webappsphp15 Mar 2004
SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to gain privileges or p
23RISK
open ↗
Exploit-DB✓ VexDay Proof
cPanel 5/6/7/8/9 - Login Script Remote Command Execution
CVE-2004-1770—webappscgi12 Mar 2004
The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shel
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Emumail EMU Webmail 5.2.7 - nit.emu Information Disclosure
CVE-2004-2385—webappscgi12 Mar 2004
EMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information (home directory) via an HTTP request for
23RISK
open ↗
Exploit-DB✓ VexDay Proof
IP3 Networks IP3 NetAccess Appliance - SQL Injection
CVE-2004-2326—remotehardware12 Mar 2004
SQL injection vulnerability in IP3 Networks NetAccess Appliance before firmware 3.1.18b13 allows remote attackers to byp
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Emumail EMU Webmail 5.2.7 - 'emumail.fcgi' Multiple Cross-Site Scripting Vulnerabilities
CVE-2004-2334—webappscgi12 Mar 2004
Multiple cross-site scripting (XSS) vulnerabilities in EMU Webmail 5.2.7 allow remote attackers to inject arbitrary web
23RISK
open ↗
Exploit-DB✓ VexDay Proof
cPanel 5/6/7/8/9 - 'dir' Cross-Site Scripting
CVE-2004-2308—webappscgi12 Mar 2004
Cross-site scripting (XSS) vulnerability in cPanel 9.1.0 and possibly earlier allows remote attackers to inject arbitrar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
GNU MyProxy 20030629 - Cross-Site Scripting
CVE-2003-1199—remotelinux11 Mar 2004
Cross-site scripting (XSS) vulnerability in MyProxy 20030629 allows remote attackers to inject arbitrary web script or H
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Targem Games Battle Mages 1.0 - Remote Denial of Service
CVE-2004-2360—dosmultiple11 Mar 2004
Targem Battle Mages 1.0 allows remote attackers to cause a denial of service (infinite loop) via a UDP packet with incom
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Pegasi Web Server 0.2.2 - Arbitrary File Access
CVE-2004-2617—remotelinux11 Mar 2004
Directory traversal vulnerability in Pegasi Web Server (PWS) 0.2.2 allows remote attackers to read files outside of the
23RISK
open ↗
Exploit-DB✓ VexDay Proof
cPanel 5/6/7/8/9 - Resetpass Remote Command Execution
CVE-2004-1769—remotecgi11 Mar 2004
The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x,
35RISK
open ↗
Exploit-DB✓ VexDay Proof
Pegasi Web Server 0.2.2 - Error Page Cross-Site Scripting
CVE-2004-2618—remotelinux11 Mar 2004
Cross-site scripting (XSS) vulnerability in Pegasi Web Server (PWS) 0.2.2 allows remote attackers to inject arbitrary we
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Epic Games Unreal Tournament Server 436.0 - Engine Remote Format String
CVE-2004-1805—dosmultiple10 Mar 2004
Format string vulnerability in games using the Epic Games Unreal Engine 436 allows remote attackers to cause a denial of
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Safari 1.x - Cookie Directory Traversal
CVE-2003-0514—remoteosx10 Mar 2004
Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (en
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Outlook 2002 - 'Mailto' Quoting Zone Bypass
CVE-2004-0121—remotewindows09 Mar 2004
Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when
35RISK
open ↗
Exploit-DB✓ VexDay Proof
PWebServer 0.3.x - Directory Traversal
CVE-2004-1801—remotelinux08 Mar 2004
Directory traversal vulnerability in PWebServer 0.3.3 allows remote attackers to read arbitrary files via a .. (dot dot)
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Safari 1.x - Large JavaScript Array Handling Denial of Service
CVE-2004-0361—dososx06 Mar 2004
The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service (segmentation fault
23RISK
open ↗
Exploit-DB✓ VexDay Proof
VirtuaSystems VirtuaNews 1.0.x (Multiple Modules) - Cross-Site Scripting
CVE-2004-0358—webappsphp05 Mar 2004
Cross-site scripting (XSS) vulnerability in VirtuaNews Admin Panel Pro 1.0.3 allows remote attackers to execute arbitrar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Multiple Vendor - TCP Sequence Number Approximation (1)
CVE-2004-0230—remotemultiple05 Mar 2004
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial o
45RISK
open ↗
Exploit-DB✓ VexDay Proof
Red Faction 1.20 - Server Reply Remote Buffer Overflow (PoC)
CVE-2004-0345—doswindows04 Mar 2004
Buffer overflow in Red Faction client 1.20 and earlier allows remote servers to execute arbitrary code via a long server
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SpiderSales 2.0 Shopping Cart - Multiple Vulnerabilities
CVE-2004-0348—webappsasp03 Mar 2004
SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arb
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Alpha Black Zero 1.04 - Remote Denial of Service
CVE-2004-1207—doswindows03 Mar 2004
The Serious engine, as used in (1) Alpha Black Zero Intrepid Protocol 1.04 and earlier, (2) Nitro family, and (3) Seriou
23RISK
open ↗
Exploit-DB✓ VexDay Proof
AppleFileServer 10.3.3 (OSX) - LoginEXT PathName Overflow (Metasploit)
CVE-2004-0430—remoteosx03 Mar 2004
Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitr
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Age of Sail II 1.04.151 - Remote Buffer Overflow
CVE-2004-1619—doswindows03 Mar 2004
Buffer overflow in Privateer's Bounty: Age of Sail II allows remote attackers to execute arbitrary code via a long nickn
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Nortel Wireless LAN Access Point 2200 Series - Denial of Service
CVE-2004-2549—doshardware02 Mar 2004
Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (s
28RISK
open ↗
Exploit-DB✓ VexDay Proof
1st Class Internet Solutions 1st Class Mail Server 4.0 - Remote Buffer Overflow (PoC)
CVE-2004-2375—dosmultiple02 Mar 2004
Buffer overflow in the POP3 server in 1st Class Mail Server 4.0 allows remote attackers to cause a denial of service (cr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Squid Proxy 2.4/2.5 - NULL URL Character Unauthorized Access
CVE-2004-0189—remotelinux01 Mar 2004
The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a U
28RISK
open ↗
Exploit-DB✓ VexDay Proof
YaBB SE 1.5.x - Arbitrary File Deletion
CVE-2004-0344—webappsphp01 Mar 2004
Directory traversal vulnerability in ModifyMessage.php in YaBB SE 1.5.4 through 1.5.5b allows remote attackers to delete
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.2.25/2.4.24/2.6.2 - 'mremap()' Local Privilege Escalation
CVE-2004-0077—locallinux01 Mar 2004
The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not prop
23RISK
open ↗
← previouspage 531 / 636next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.