Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,900cataloged exploits

35,840CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,458Referência 22,600GitHub PoC 14,323VulnCheck XDB 8,722Nuclei 4,320Metasploit 3,477✓ verified onlyrecent popular risk

24,455 exploits

Exploit-DB✓ VexDay Proof

O-Kiraku Nikki 1.3 - 'Nikki.php' SQL Injection

CVE-2005-3932—webappsphp30 Nov 2005

SQL injection vulnerability in okiraku.php in O-Kiraku Nikki 1.3 and earlier allows remote attackers to execute arbitrar

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows Metafile - 'mtNoObjects' Denial of Service (MS05-053)

CVE-2005-2124—doswindows30 Nov 2005

Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2

35RISK

open ↗

Exploit-DB✓ VexDay Proof

SoftBiz FAQ 1.1 - 'index.php?cid' SQL Injection

CVE-2005-3938—webappsphp30 Nov 2005

SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL comman

23RISK

open ↗

Exploit-DB✓ VexDay Proof

SocketKB 1.1 - 'index.php' SQL Injection

CVE-2005-3935—webappsphp30 Nov 2005

SQL injection vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows Metafile - 'mtNoObjects' Denial of Service (MS05-053)

CVE-2005-2123—doswindows30 Nov 2005

Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server

35RISK

open ↗

Exploit-DB✓ VexDay Proof

WSN Knowledge Base 1.2 - 'index.php' Multiple SQL Injections

CVE-2005-3939—webappsphp30 Nov 2005

Multiple SQL injection vulnerabilities in WSN Knowledge Base 1.2.0 and earler allow remote attackers to execute arbitrar

23RISK

open ↗

Exploit-DB✓ VexDay Proof

QNX RTOS 6.3.0 (x86) - 'phgrafx' Local Buffer Overflow

CVE-2005-3928—localqnx30 Nov 2005

Buffer overflow in phgrafx in QNX 6.2.1 and 6.3.0 allows local users to execute arbitrary code via a long command line a

23RISK

open ↗

Exploit-DB✓ VexDay Proof

WSN Knowledge Base 1.2 - 'comments.php?id' SQL Injection

CVE-2005-3939—webappsphp30 Nov 2005

Multiple SQL injection vulnerabilities in WSN Knowledge Base 1.2.0 and earler allow remote attackers to execute arbitrar

23RISK

open ↗

Exploit-DB✓ VexDay Proof

SoftBiz FAQ 1.1 - 'faq_qanda.php?id' SQL Injection

CVE-2005-3938—webappsphp30 Nov 2005

SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL comman

23RISK

open ↗

Exploit-DB✓ VexDay Proof

SoftBiz B2B trading Marketplace Script 1.1 - 'products.php?cid' SQL Injection

CVE-2005-3937—webappsphp30 Nov 2005

SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute

23RISK

open ↗

Exploit-DB✓ VexDay Proof

SoftBiz B2B trading Marketplace Script 1.1 - 'buyoffers.php?cid' SQL Injection

CVE-2005-3937—webappsphp30 Nov 2005

SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute

23RISK

open ↗

Exploit-DB✓ VexDay Proof

PHPX 3.5.x - 'Admin 'login.php' SQL Injection

CVE-2005-3968—webappsphp30 Nov 2005

SQL injection vulnerability in auth.inc.php in PHPX 3.5.9 and earlier allows remote attackers to execute arbitrary SQL c

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Instant Photo Gallery 1.0 - 'content.php?cid' SQL Injection

CVE-2005-3986—webappsphp30 Nov 2005

Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitrar

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Instant Photo Gallery 1.0 - 'portfolio.php?cat_id' SQL Injection

CVE-2005-3986—webappsphp30 Nov 2005

Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitrar

23RISK

open ↗

Exploit-DB✓ VexDay Proof

SoftBiz FAQ 1.1 - 'add_comment.php?id' SQL Injection

CVE-2005-3938—webappsphp30 Nov 2005

SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL comman

23RISK

open ↗

Exploit-DB✓ VexDay Proof

SoftBiz FAQ 1.1 - 'print_article.php?id' SQL Injection

CVE-2005-3938—webappsphp30 Nov 2005

SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL comman

23RISK

open ↗

Exploit-DB✓ VexDay Proof

SoftBiz FAQ 1.1 - 'refer_friend.php?id' SQL Injection

CVE-2005-3938—webappsphp30 Nov 2005

SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL comman

23RISK

open ↗

Exploit-DB✓ VexDay Proof

SoftBiz B2B trading Marketplace Script 1.1 - 'profiles.php?cid' SQL Injection

CVE-2005-3937—webappsphp30 Nov 2005

SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute

23RISK

open ↗

Exploit-DB✓ VexDay Proof

PHP Photo Album 0.2.3/4.1 - Local File Inclusion

CVE-2005-3948—webappsphp30 Nov 2005

Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary fi

23RISK

open ↗

Exploit-DB✓ VexDay Proof

88Scripts Event Calendar 2.0 - 'index.php' SQL Injection

CVE-2005-3933—webappsphp30 Nov 2005

SQL injection vulnerability in index.php in 88Script's Event Calendar 2.0 and earlier allows remote attackers to execute

23RISK

open ↗

Exploit-DB✓ VexDay Proof

WSN Knowledge Base 1.2 - 'memberlist.php?id' SQL Injection

CVE-2005-3939—webappsphp30 Nov 2005

Multiple SQL injection vulnerabilities in WSN Knowledge Base 1.2.0 and earler allow remote attackers to execute arbitrar

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows Metafile - 'mtNoObjects' Denial of Service (MS05-053)

CVE-2005-0803—doswindows30 Nov 2005

The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (

35RISK

open ↗

Exploit-DB✓ VexDay Proof

SoftBiz B2B trading Marketplace Script 1.1 - 'selloffers.php?cid' SQL Injection

CVE-2005-3937—webappsphp30 Nov 2005

SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute

23RISK

open ↗

Exploit-DB✓ VexDay Proof

BosDates 4.0 - Multiple SQL Injections

CVE-2005-3911—webappsphp29 Nov 2005

Multiple SQL injection vulnerabilities in calendar.php in BosDates 4.0 and earlier allow remote attackers to execute arb

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows Metafile - 'gdi32.dll' Denial of Service (MS05-053)

CVE-2005-2124—doswindows29 Nov 2005

Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2

35RISK

open ↗

Exploit-DB✓ VexDay Proof

ASP-Rider 1.6 - 'default.asp' SQL Injection

CVE-2005-3931—webappsphp29 Nov 2005

SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands vi

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Survey System 1.1 - 'survey.php' SQL Injection

CVE-2005-3944—webappsphp29 Nov 2005

SQL injection vulnerability in survey.php in ilyav Survey System 1.1 and earlier allows remote attackers to execute arbi

23RISK

open ↗

Exploit-DB✓ VexDay Proof

CenterICQ 4.20/4.5 - Packet Handling Remote Denial of Service

CVE-2005-3694—doslinux29 Nov 2005

centericq 4.20.0-r3 with "Enable peer-to-peer communications" set allows remote attackers to cause a denial of service (

28RISK

open ↗

Exploit-DB✓ VexDay Proof

FAQ System 1.1 - 'viewFAQ.php' Multiple SQL Injections

CVE-2005-3943—webappsphp29 Nov 2005

Multiple SQL injection vulnerabilities in ilyav FAQ System 1.1 and earlier allows remote attackers to execute arbitrary

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Fantastic Scripts Fantastic News 2.1.1 - 'news.php' SQL Injection

CVE-2005-3846—webappsphp29 Nov 2005

SQL injection vulnerability in news.php in Fantastic News 2.1.1 and earlier allows remote attackers to execute arbitrary

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.