Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

81,453cataloged exploits
37,908CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,482Referência 24,237GitHub PoC 15,653VulnCheck XDB 9,134Nuclei 4,441Metasploit 3,506✓ verified onlyrecentpopularrisk
19,066 exploits
Exploit-DB✓ VexDay Proof
Caldera OpenServer 5.0.5/5.0.6 - SCOAdmin Symbolic Link
CVE-2002-0887—localsco29 May 2002
scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Netscape Enterprise Web Server for Netware 4/5 5.0 - Information Disclosure
CVE-2002-1634—remotenovell29 May 2002
Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndso
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Image Display System 0.8.1 - Directory Existence Disclosure
CVE-2002-1837—webappscgi28 May 2002
The getAlbumToDisplay function in idsShared.pm for Image Display System (IDS) 0.81 allows remote attackers to determine
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Opera 6.0.1/6.0.2 - Arbitrary File Disclosure
CVE-2002-0898—remotewindows27 May 2002
Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the c
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Yahoo! Messenger 5.0 - Call Center Buffer Overflow
CVE-2002-0031—remotewindows27 May 2002
Buffer overflows in Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary code via a ymsg
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows 95/98/2000/NT 4.0 - WinHlp Item Buffer Overflow
CVE-2002-0823—remotewindows27 May 2002
Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HT
28RISK
open ↗
Exploit-DB✓ VexDay Proof
PHPBB2 - Image Tag HTML Injection
CVE-2002-0902—webappsphp26 May 2002
Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB
23RISK
open ↗
Exploit-DB✓ VexDay Proof
OpenBB 1.0.0 RC3 - BBCode Cross Agent HTML Injection
CVE-2002-1829—webappsphp24 May 2002
Cross-site scripting (XSS) vulnerability in codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attack
23RISK
open ↗
Exploit-DB✓ VexDay Proof
OpenBB 1.0 - Unauthorized Moderator Access
CVE-2002-1830—webappsphp24 May 2002
Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via
23RISK
open ↗
Exploit-DB✓ VexDay Proof
OpenBB 1.0.0 RC3 - BBCode Cross Agent HTML Injection
CVE-2002-0330—webappsphp24 May 2002
Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board (OpenBB) 1.0.0 allows remote attackers to exe
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Sendmail 8.9.x/8.10.x/8.11.x/8.12.x - File Locking Denial of Service (1)
CVE-2002-1827—doslinux24 May 2002
Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1)
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ViewCVS 0.9.2 - Cross-Site Scripting
CVE-2002-0771—webappscgi24 May 2002
Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal c
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft MSN Messenger 1 < 4 - Malformed Invite Request Denial of Service
CVE-2002-1831—doswindows24 May 2002
Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invi
28RISK
open ↗
Exploit-DB✓ VexDay Proof
LocalWEB2000 2.1.0 Standard - File Disclosure
CVE-2002-0897—remotewindows24 May 2002
LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MIT PGP Public Key Server 0.9.2/0.9.4 - Search String Remote Buffer Overflow
CVE-2002-0900—doslinux24 May 2002
Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service (cras
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Sendmail 8.9.x/8.10.x/8.11.x/8.12.x - File Locking Denial of Service (2)
CVE-2002-1827—doslinux24 May 2002
Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1)
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Cisco CBOS 2.x - Broadband Operating System TCP/IP Stack Denial of Service
CVE-2002-0886—doshardware23 May 2002
Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memor
23RISK
open ↗
Exploit-DB✓ VexDay Proof
NewAtlanta ServletExec/ISAPI 4.1 JSPServlet - Denial of Service
CVE-2002-0894—doswindows22 May 2002
NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a lo
23RISK
open ↗
Exploit-DB✓ VexDay Proof
NewAtlanta ServletExec/ISAPI 4.1 - Full Path Disclosure
CVE-2002-0892—remotewindows22 May 2002
The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web r
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Matu FTP Server 1.13 - Remote Buffer Overflow
CVE-2002-0895—remotewindows22 May 2002
Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execu
23RISK
open ↗
Exploit-DB✓ VexDay Proof
NewAtlanta ServletExec/ISAPI 4.1 - File Disclosure
CVE-2002-0893—remotewindows22 May 2002
Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files vi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Youngzsoft CMailServer 3.30/4.0 - Remote Buffer Overflow (2)
CVE-2002-0799—remotewindows21 May 2002
Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argumen
28RISK
open ↗
Exploit-DB✓ VexDay Proof
Cisco IOS 11.x/12.0 - ICMP Redirect Denial of Service
CVE-2002-2315—doshardware21 May 2002
Cisco IOS 11.2.x and 12.0.x does not limit the size of its redirect table, which allows remote attackers to cause a deni
23RISK
open ↗
Exploit-DB✓ VexDay Proof
GNU Mailman 2.0.x - Admin Login Cross-Site Scripting
CVE-2002-0388—webappscgi20 May 2002
Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Youngzsoft CMailServer 3.30/4.0 - Remote Buffer Overflow (1)
CVE-2002-0799—remotewindows20 May 2002
Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argumen
28RISK
open ↗
Exploit-DB✓ VexDay Proof
psyBNC 2.3 - Denial of Service
CVE-2002-0741—dosmultiple19 May 2002
psyBNC 2.3 allows remote attackers to cause a denial of service (CPU consumption and resource exhaustion) by sending a P
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Hosting Controller 1.x - 'Browse.asp' File Disclosure
CVE-2002-0775—webappsasp19 May 2002
browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Hosting Controller 1.4 - Import Root Directory Command Execution
CVE-2002-0773—webappsasp17 May 2002
imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a d
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Hosting Controller 1.x - DSNManager Directory Traversal
CVE-2002-0772—webappsasp17 May 2002
Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary fil
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Grsecurity Kernel Patch 1.9.4 (Linux Kernel) - Memory Protection
CVE-2002-1826—locallinux17 May 2002
grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only permissions by using mmap to directly ma
23RISK
open ↗
← previouspage 575 / 636next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.