Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,644cataloged exploits

40,922CVEs with public exploitation

24,696lab-tested

All Referência 26,560Exploit-DB 24,489GitHub PoC 18,407VulnCheck XDB 11,064Nuclei 4,584Metasploit 3,540✓ verified onlyrecent popular risk

24,696 exploits

Referência✓ VexDay Proof

Crazy Goomba 1.2.1 - 'id' SQL Injection

CVE-2008-1934—webappsphp

SQL injection vulnerability in commentaires.php in Crazy Goomba 1.2.1 allows remote attackers to execute arbitrary SQL c

23RISK

open ↗

Referência✓ VexDay Proof

phpBP RC3 (2.204) - SQL Injection / Remote Code Execution

CVE-2007-0369—webappsphp

SQL injection vulnerability in phpBP RC3 (2.204) and earlier allows remote attackers to execute arbitrary SQL commands v

23RISK

open ↗

Referência✓ VexDay Proof

PHP Blue Dragon CMS 3.0.0 - SQL Injection

CVE-2007-4312—webappsphp

SQL injection vulnerability in index.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary SQL c

23RISK

open ↗

Referência✓ VexDay Proof

PHP blue dragon CMS 3.0.0 - Remote File Inclusion

CVE-2007-4313—webappsphp

PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 all

35RISK

open ↗

Referência✓ VexDay Proof

Zune Software - ActiveX Arbitrary File Overwrite

CVE-2008-1933—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to over

28RISK

open ↗

Referência✓ VexDay Proof

5th Avenue Shopping Cart - 'category_id' SQL Injection

CVE-2008-1921—webappsphp

SQL injection vulnerability in store_pages/category_list.php in 5th Avenue Shopping Cart 1.2 trial edition allows remote

23RISK

open ↗

Referência✓ VexDay Proof

Surgemail 38k - 'Search' Remote Buffer Overflow

CVE-2007-4377—remotewindows

Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary

23RISK

open ↗

Referência✓ VexDay Proof

Foro Domus 2.10 - 'phpbb_root_path' Remote File Inclusion

CVE-2007-0580—webappsphp

PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to execute arbitrary PHP

23RISK

open ↗

Referência✓ VexDay Proof

Links Directory 1.1 - 'cat_id' SQL Injection

CVE-2008-1871—webappsphp

SQL injection vulnerability in links.php in Scriptsagent.com Links Directory 1.1 allows remote authenticated users to ex

23RISK

open ↗

Referência✓ VexDay Proof

Dragoon 0.1 - 'lng' Local File Inclusion

CVE-2008-1798—webappsphp

Directory traversal vulnerability in forum/kietu/libs/calendrier.php in Dragoon 0.1 allows remote attackers to include a

23RISK

open ↗

Referência✓ VexDay Proof

DL PayCart 1.01 - 'viewitem.php?ItemID' Blind SQL Injection

CVE-2007-4604—webappsphp

SQL injection vulnerability in viewitem.php in DL PayCart 1.01 allows remote attackers to execute arbitrary SQL commands

23RISK

open ↗

Referência✓ VexDay Proof

Epistemon 1.0 - 'common.php?inc_path' Remote File Inclusion

CVE-2007-0701—webappsphp

PHP remote file inclusion vulnerability in inc/common.inc.php in Epistemon 1.0 allows remote attackers to execute arbitr

23RISK

open ↗

Referência✓ VexDay Proof

iScripts Socialware - 'id' SQL Injection

CVE-2008-1790—webappsphp

Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbit

23RISK

open ↗

Referência✓ VexDay Proof

Dragoon 0.1 - 'root' Remote File Inclusion

CVE-2008-1773—webappsphp

PHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote attackers to execute arb

28RISK

open ↗

Referência✓ VexDay Proof

PHPNuke-Clan 4.2.0 - 'mvcw_conver.php' Remote File Inclusion

CVE-2007-4606—webappsphp

PHP remote file inclusion vulnerability in convert/mvcw_conver.php in the Virtual War (VWar) module for PHPNuke-Clan (PN

23RISK

open ↗

Referência✓ VexDay Proof

BinGo News 3.01 - 'bnrep' Remote File Inclusion

CVE-2006-4648—webappsphp

PHP remote file inclusion vulnerability in bp_ncom.php in BinGo News (BP News) 3.01 and earlier allows remote attackers

23RISK

open ↗

Referência✓ VexDay Proof

KnowledgeQuest 2.6 - SQL Injection

CVE-2008-1726—webappsphp

Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is disabled, allow remote attackers

23RISK

open ↗

Referência✓ VexDay Proof

dB Masters Curium CMS 1.03 - 'c_id' SQL Injection

CVE-2007-0765—webappsphp

SQL injection vulnerability in news.php in dB Masters Curium CMS 1.03 and earlier allows remote attackers to execute arb

23RISK

open ↗

Referência✓ VexDay Proof

Remotesoft .NET Explorer 2.0.1 - Local Stack Overflow (PoC)

CVE-2007-0766—doswindows

Stack-based buffer overflow in Remotesoft .NET Explorer 2.0.1 allows user-assisted remote attackers to cause a denial of

23RISK

open ↗

Referência✓ VexDay Proof

Postcast Server Pro 3.0.61 / Quiksoft EasyMail - 'emsmtp.dll 6.0.1' Remote Buffer Overflow

CVE-2007-4607—remotewindows

Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used

50RISK

open ↗

Referência✓ VexDay Proof

MWOpen E-Commerce - 'leggi_commenti.asp' SQL Injection

CVE-2007-6292—webappsasp

SQL injection vulnerability in leggi_commenti.asp in MWOpen 1.4 and earlier allows remote attackers to execute arbitrary

23RISK

open ↗

Referência✓ VexDay Proof

OPENi-CMS Site Protection Plugin - Remote File Inclusion

CVE-2007-0881—webappsphp

PHP remote file inclusion vulnerability in the Seitenschutz plugin for OPENi-CMS 1.0 allows remote attackers to execute

23RISK

open ↗

Referência✓ VexDay Proof

Snitz Forums 2000 3.1 SR4 - 'pop_profile.asp' SQL Injection

CVE-2007-1023—webappsasp

SQL injection vulnerability in pop_profile.asp in Snitz Forums 2000 3.1 SR4 allows remote attackers to execute arbitrary

23RISK

open ↗

Referência✓ VexDay Proof

News Rover 12.1 Rev 1 - Stack Overflow (1)

CVE-2007-1041—localwindows

Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute ar

23RISK

open ↗

Referência✓ VexDay Proof

phpBB Links MOD 1.2.2 - SQL Injection

CVE-2007-4653—webappsphp

SQL injection vulnerability in links.php in the Links MOD 1.2.2 and earlier for phpBB 2.0.22 and earlier allows remote a

23RISK

open ↗

Referência✓ VexDay Proof

FaScript FaPhoto 1.0 - 'show.php' SQL Injection

CVE-2008-1714—webappsphp

SQL injection vulnerability in show.php in FaScript FaPhoto 1.0, when magic_quotes_gpc is disabled, allows remote attack

23RISK

open ↗

Referência✓ VexDay Proof

DoceboLms 2.0.5 - 'help.php' Remote File Inclusion

CVE-2006-2668—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 2.05 allow remote attackers to execute arbitrary PHP co

23RISK

open ↗

Referência✓ VexDay Proof

Ottoman CMS 1.1.3 - '?default_path=' Remote File Inclusion (1)

CVE-2006-2767—webappsphp

PHP remote file inclusion vulnerability in Ottoman 1.1.2, when register_globals is enabled, allows remote attackers to e

23RISK

open ↗

Referência✓ VexDay Proof

phpCommunityCalendar 4.0.3 - Cross-Site Scripting / SQL Injection

CVE-2006-2798—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3 allow remote attackers to inject arbit

23RISK

open ↗

Referência✓ VexDay Proof

News Bin Pro 5.33 - '.nbi' Local Buffer Overflow

CVE-2007-1074—localwindows

Multiple buffer overflows in NewsBin Pro 5.33 and NewsBin Pro 4.x allow user-assisted remote attackers to execute arbitr

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.