Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,464cataloged exploits
40,695CVEs with public exploitation
24,696lab-tested
AllReferência 26,426Exploit-DB 24,489GitHub PoC 18,182VulnCheck XDB 10,251Nuclei 4,577Metasploit 3,539✓ verified onlyrecentpopularrisk
24,696 exploits
Exploit-DB✓ VexDay Proof
Phorum 3.x - 'register.php' HTTP_REFERER Cross-Site Scripting
CVE-2004-1822—webappsphp15 Mar 2004
Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject ar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Phorum 3.x - 'profile.php?target' Cross-Site Scripting
CVE-2004-1822—webappsphp15 Mar 2004
Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject ar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
YABB SE 1.5.1 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2004-1827—webappsphp15 Mar 2004
Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to inject
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Phorum 3.x - 'login.php' HTTP_REFERER Cross-Site Scripting
CVE-2004-1822—webappsphp15 Mar 2004
Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject ar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Emumail EMU Webmail 5.2.7 - nit.emu Information Disclosure
CVE-2004-2385—webappscgi12 Mar 2004
EMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information (home directory) via an HTTP request for
23RISK
open ↗
Exploit-DB✓ VexDay Proof
cPanel 5/6/7/8/9 - 'dir' Cross-Site Scripting
CVE-2004-2308—webappscgi12 Mar 2004
Cross-site scripting (XSS) vulnerability in cPanel 9.1.0 and possibly earlier allows remote attackers to inject arbitrar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
cPanel 5/6/7/8/9 - Login Script Remote Command Execution
CVE-2004-1770—webappscgi12 Mar 2004
The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shel
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Emumail EMU Webmail 5.2.7 - 'emumail.fcgi' Multiple Cross-Site Scripting Vulnerabilities
CVE-2004-2334—webappscgi12 Mar 2004
Multiple cross-site scripting (XSS) vulnerabilities in EMU Webmail 5.2.7 allow remote attackers to inject arbitrary web
23RISK
open ↗
Exploit-DB✓ VexDay Proof
IP3 Networks IP3 NetAccess Appliance - SQL Injection
CVE-2004-2326—remotehardware12 Mar 2004
SQL injection vulnerability in IP3 Networks NetAccess Appliance before firmware 3.1.18b13 allows remote attackers to byp
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Targem Games Battle Mages 1.0 - Remote Denial of Service
CVE-2004-2360—dosmultiple11 Mar 2004
Targem Battle Mages 1.0 allows remote attackers to cause a denial of service (infinite loop) via a UDP packet with incom
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Pegasi Web Server 0.2.2 - Arbitrary File Access
CVE-2004-2617—remotelinux11 Mar 2004
Directory traversal vulnerability in Pegasi Web Server (PWS) 0.2.2 allows remote attackers to read files outside of the
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Pegasi Web Server 0.2.2 - Error Page Cross-Site Scripting
CVE-2004-2618—remotelinux11 Mar 2004
Cross-site scripting (XSS) vulnerability in Pegasi Web Server (PWS) 0.2.2 allows remote attackers to inject arbitrary we
23RISK
open ↗
Exploit-DB✓ VexDay Proof
GNU MyProxy 20030629 - Cross-Site Scripting
CVE-2003-1199—remotelinux11 Mar 2004
Cross-site scripting (XSS) vulnerability in MyProxy 20030629 allows remote attackers to inject arbitrary web script or H
23RISK
open ↗
Exploit-DB✓ VexDay Proof
cPanel 5/6/7/8/9 - Resetpass Remote Command Execution
CVE-2004-1769—remotecgi11 Mar 2004
The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x,
35RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Safari 1.x - Cookie Directory Traversal
CVE-2003-0514—remoteosx10 Mar 2004
Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (en
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Epic Games Unreal Tournament Server 436.0 - Engine Remote Format String
CVE-2004-1805—dosmultiple10 Mar 2004
Format string vulnerability in games using the Epic Games Unreal Engine 436 allows remote attackers to cause a denial of
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Outlook 2002 - 'Mailto' Quoting Zone Bypass
CVE-2004-0121—remotewindows09 Mar 2004
Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when
35RISK
open ↗
Exploit-DB✓ VexDay Proof
PWebServer 0.3.x - Directory Traversal
CVE-2004-1801—remotelinux08 Mar 2004
Directory traversal vulnerability in PWebServer 0.3.3 allows remote attackers to read arbitrary files via a .. (dot dot)
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Apple Safari 1.x - Large JavaScript Array Handling Denial of Service
CVE-2004-0361—dososx06 Mar 2004
The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service (segmentation fault
23RISK
open ↗
Exploit-DB✓ VexDay Proof
VirtuaSystems VirtuaNews 1.0.x (Multiple Modules) - Cross-Site Scripting
CVE-2004-0358—webappsphp05 Mar 2004
Cross-site scripting (XSS) vulnerability in VirtuaNews Admin Panel Pro 1.0.3 allows remote attackers to execute arbitrar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Multiple Vendor - TCP Sequence Number Approximation (1)
CVE-2004-0230—remotemultiple05 Mar 2004
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial o
45RISK
open ↗
Exploit-DB✓ VexDay Proof
Red Faction 1.20 - Server Reply Remote Buffer Overflow (PoC)
CVE-2004-0345—doswindows04 Mar 2004
Buffer overflow in Red Faction client 1.20 and earlier allows remote servers to execute arbitrary code via a long server
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SpiderSales 2.0 Shopping Cart - Multiple Vulnerabilities
CVE-2004-0348—webappsasp03 Mar 2004
SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arb
23RISK
open ↗
Exploit-DB✓ VexDay Proof
AppleFileServer 10.3.3 (OSX) - LoginEXT PathName Overflow (Metasploit)
CVE-2004-0430—remoteosx03 Mar 2004
Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitr
50RISK
open ↗
Exploit-DB✓ VexDay Proof
Age of Sail II 1.04.151 - Remote Buffer Overflow
CVE-2004-1619—doswindows03 Mar 2004
Buffer overflow in Privateer's Bounty: Age of Sail II allows remote attackers to execute arbitrary code via a long nickn
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Alpha Black Zero 1.04 - Remote Denial of Service
CVE-2004-1207—doswindows03 Mar 2004
The Serious engine, as used in (1) Alpha Black Zero Intrepid Protocol 1.04 and earlier, (2) Nitro family, and (3) Seriou
23RISK
open ↗
Exploit-DB✓ VexDay Proof
1st Class Internet Solutions 1st Class Mail Server 4.0 - Remote Buffer Overflow (PoC)
CVE-2004-2375—dosmultiple02 Mar 2004
Buffer overflow in the POP3 server in 1st Class Mail Server 4.0 allows remote attackers to cause a denial of service (cr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Nortel Wireless LAN Access Point 2200 Series - Denial of Service
CVE-2004-2549—doshardware02 Mar 2004
Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (s
28RISK
open ↗
Exploit-DB✓ VexDay Proof
GNU Anubis 3.6.x/3.9.x - 'auth.c auth_ident()' Remote Overflow
CVE-2004-0353—remotelinux01 Mar 2004
Multiple buffer overflows in auth_ident() function in auth.c for GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow
23RISK
open ↗
Exploit-DB✓ VexDay Proof
GNU Anubis 3.6.x/3.9.x - Multiple Format String Vulnerabilities
CVE-2004-0354—remotelinux01 Mar 2004
Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to ex
28RISK
open ↗
← previouspage 531 / 824next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.