Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

81,453cataloged exploits
37,908CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,482Referência 24,237GitHub PoC 15,653VulnCheck XDB 9,134Nuclei 4,441Metasploit 3,506✓ verified onlyrecentpopularrisk
19,066 exploits
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5/6 - Cached Objects Zone Bypass
CVE-2002-1254—remotewindows22 Oct 2002
Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information o
35RISK
open ↗
Exploit-DB✓ VexDay Proof
KMMail 1.0 - E-Mail HTML Injection
CVE-2002-1958—webappsphp21 Oct 2002
Cross-site scripting (XSS) vulnerability in kmMail 1.0, 1.0a, and 1.0b allows remote attackers to inject arbitrary web s
23RISK
open ↗
Exploit-DB✓ VexDay Proof
AN HTTPD 1.38/1.39/1.40/1.41 - 'SOCKS4' Buffer Overflow
CVE-2002-1930—remotewindows21 Oct 2002
Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4 request w
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP Arena PAFileDB 1.1.3/2.1.1/3.0 - 'Email To Friend' Cross-Site Scripting
CVE-2002-1929—webappsphp21 Oct 2002
Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attackers
23RISK
open ↗
Exploit-DB✓ VexDay Proof
vBulletin 2.0/2.2.x - Cross-Site Scripting
CVE-2002-1922—webappsjava18 Oct 2002
Cross-site scripting (XSS) vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8 allows remote attackers
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2000/NT 4.0 - RPC Service Denial of Service (3)
CVE-2002-1561—doswindows18 Oct 2002
The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (
35RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2000/NT 4.0 - RPC Service Denial of Service (4)
CVE-2002-1561—doswindows18 Oct 2002
The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (
35RISK
open ↗
Exploit-DB✓ VexDay Proof
YaBB 1.40/1.41 - Login Cross-Site Scripting
CVE-2002-1845—webappsphp18 Oct 2002
Cross-site scripting (XSS) vulnerability in index.php in Yet Another Bulletin Board (YaBB) 1.40 and 1.41 allows remote a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
IBM Websphere Caching Proxy 3.6/4.0 - Denial of Service
CVE-2002-1169—dosunix18 Oct 2002
IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of se
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Zone Labs ZoneAlarm 3.0/3.1 - Syn Flood Denial of Service
CVE-2002-1911—doswindows16 Oct 2002
ZoneAlarm Pro 3.0 and 3.1, when configured to block all traffic, allows remote attackers to cause a denial of service (C
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Cisco CatOS 5.x/6.1/7.3/7.4 - CiscoView HTTP Server Buffer Overflow
CVE-2002-1222—remotehardware16 Oct 2002
Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote atta
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Polycom ViaVideo 2.2/3.0 - Denial of Service
CVE-2002-1906—doshardware15 Oct 2002
The web server for Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (CPU consumption) b
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Polycom 2.2/3.0 - ViaVideo Buffer Overflow
CVE-2002-1905—doswindows15 Oct 2002
Buffer overflow in the web server of Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (
23RISK
open ↗
Exploit-DB✓ VexDay Proof
TelCondex SimpleWebserver 2.0.6 - Denial of Service
CVE-2002-1907—doswindows15 Oct 2002
TelCondex SimpleWebServer 2.06.20817 allows remote attackers to cause a denial of service (crash) via a long HTTP GET re
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Ingenium Learning Management System 5.1/6.1 - Reversible Password Hash
CVE-2002-1910—remotemultiple15 Oct 2002
Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords (reversible algorithm), w
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5/6 - Unauthorized Document Object Model Access
CVE-2002-1217—remotewindows15 Oct 2002
Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote att
35RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP 4 - 'PHPInfo()' Cross-Site Scripting
CVE-2002-1954—webappsphp12 Oct 2002
Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitrar
28RISK
open ↗
Exploit-DB✓ VexDay Proof
My Web Server 1.0.1/1.0.2 - GET Denial of Service
CVE-2002-1897—doswindows12 Oct 2002
MyWebServer LLC MyWebServer 1.0.2 allows remote attackers to cause a denial of service (crash) via a long HTTP request,
23RISK
open ↗
Exploit-DB✓ VexDay Proof
KDE 3.0.x - KPF Icon Option File Disclosure
CVE-2002-1224—remotelinux11 Oct 2002
Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers to read arbitrary file
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHPRank 1.8 - 'add.php' Cross-Site Scripting
CVE-2002-1799—webappsphp10 Oct 2002
Cross-site scripting (XSS) vulnerability in phpRank 1.8 allows remote attackers to inject arbitrary web script or HTML v
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Outlook Express 5.5/6.0 - S/MIME Buffer Overflow
CVE-2002-1179—remotewindows10 Oct 2002
Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows remote attackers to exe
28RISK
open ↗
Exploit-DB✓ VexDay Proof
PHPBBMod 1.3.3 - PHPInfo Information Disclosure
CVE-2002-2349—webappsphp10 Oct 2002
phpinfo.php in phpBBmod 1.3.3 executes the phpinfo function, which allows remote attackers to obtain sensitive environme
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2000/NT 4.0 - NetDDE Privilege Escalation (1)
CVE-2002-1230—localwindows09 Oct 2002
NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Authoria HR Suite - 'AthCGI.exe' Cross-Site Scripting
CVE-2002-2348—webappscgi09 Oct 2002
Cross-site scripting (XSS) vulnerability in athcgi.exe in Authoria HR allows remote attackers to inject arbitrary web sc
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2000/NT 4.0 - NetDDE Privilege Escalation (2)
CVE-2002-1230—localwindows09 Oct 2002
NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Content Management Server 2001 - Cross-Site Scripting
CVE-2003-0002—webappsasp09 Oct 2002
Cross-site scripting vulnerability (XSS) in ManualLogin.asp script for Microsoft Content Management Server (MCMS) 2001 a
28RISK
open ↗
Exploit-DB✓ VexDay Proof
SurfControl SuperScout Email Filter 3.5 - 'MsgError.asp' Cross-Site Scripting
CVE-2002-1529—webappsasp08 Oct 2002
Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl
23RISK
open ↗
Exploit-DB✓ VexDay Proof
SurfControl SuperScout Email Filter 3.5 - User Credential Disclosure
CVE-2002-1530—webappsasp08 Oct 2002
The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Sendmail 8.12.6 - Compromised Source Backdoor
CVE-1999-0661—remoteunix08 Oct 2002
A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such
35RISK
open ↗
Exploit-DB✓ VexDay Proof
SSGBook 1.0 - Image Tag HTML Injection
CVE-2002-2339—webappsasp08 Oct 2002
Cross-site scripting (XSS) vulnerability in configure.asp in Script-Shed GuestBook 1.0 allows remote attackers to inject
23RISK
open ↗
← previouspage 563 / 636next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.