Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,660cataloged exploits

40,937CVEs with public exploitation

24,696lab-tested

All Referência 26,570Exploit-DB 24,489GitHub PoC 18,413VulnCheck XDB 11,064Nuclei 4,584Metasploit 3,540✓ verified onlyrecent popular risk

24,696 exploits

Referência✓ VexDay Proof

CMS Made Simple 1.2 - Remote Code Execution

CVE-2007-5056—webappsphp

Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including

28RISK

open ↗

Referência✓ VexDay Proof

OpenSSL < 0.9.8i - DTLS ChangeCipherSpec Remote Denial of Service

CVE-2009-1386—dosmultiple

ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and

60RISK

open ↗

Referência✓ VexDay Proof

WBB2-Addon: Acrotxt 1.0 - 'show' SQL Injection

CVE-2007-4581—webappsphp

SQL injection vulnerability in acrotxt.php in WBB2-Addon: Acrotxt 1 allows remote attackers to execute arbitrary SQL com

23RISK

open ↗

Referência✓ VexDay Proof

Novus 1.0 - 'notas.asp?nota_id' SQL Injection

CVE-2007-5123—webappsasp

SQL injection vulnerability in notas.asp in Novus 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RISK

open ↗

Referência✓ VexDay Proof

actSite 1.991 Beta - 'base.php' Remote File Inclusion

CVE-2007-5175—webappsphp

PHP remote file inclusion vulnerability lib/base.php in actSite 1.991 Beta allows remote attackers to execute arbitrary

23RISK

open ↗

Referência✓ VexDay Proof

Zomplog 3.8.1 - Arbitrary File Upload

CVE-2007-5230—webappsphp

admin/upload_files.php in Zomplog 3.8.1 and earlier does not check for administrative credentials, which allows remote a

23RISK

open ↗

Referência✓ VexDay Proof

Ossigeno CMS 2.2a3 - 'footer.php' Remote File Inclusion

CVE-2007-5234—webappsphp

PHP remote file inclusion vulnerability in upload/common/footer.php in Ossigeno CMS 2.2 alpha3 allows remote attackers t

35RISK

open ↗

Referência✓ VexDay Proof

AV Arcade 2.1b - 'index.php?id' SQL Injection

CVE-2007-3563—webappsphp

SQL injection vulnerability in includes/view_page.php in AV Arcade 2.1b allows remote attackers to execute arbitrary SQL

23RISK

open ↗

Referência✓ VexDay Proof

A-Blog 2.0 - Cross-Site Scripting / SQL Injection

CVE-2008-0676—webappsphp

Cross-site scripting (XSS) vulnerability in search.php in A-Blog 2 allows remote attackers to inject arbitrary web scrip

23RISK

open ↗

Referência✓ VexDay Proof

Ubuntu 6.06 - DHCPd Remote Denial of Service

CVE-2007-5365—dosmultiple

Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some othe

45RISK

open ↗

Referência✓ VexDay Proof

Pindorama 0.1 - 'client.php' Remote File Inclusion

CVE-2007-5387—webappsphp

PHP remote file inclusion vulnerability in active/components/xmlrpc/client.php in Pindorama 0.1 allows remote attackers

28RISK

open ↗

Referência✓ VexDay Proof

KwsPHP 1.0 mg2 Module - SQL Injection

CVE-2007-5485—webappsphp

SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary S

23RISK

open ↗

Referência✓ VexDay Proof

Easybe 1-2-3 Music Store - 'process.php' SQL Injection

CVE-2007-3520—webappsphp

SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbitrary SQL

23RISK

open ↗

Referência✓ VexDay Proof

SonicWALL SSL-VPN - 'NeLaunchCtrl' ActiveX Control Remote Command Execution

CVE-2007-5603—remotewindows

Stack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x

50RISK

open ↗

Referência✓ VexDay Proof

SimpNews 2.40.01 - 'newnr' SQL Injection

CVE-2007-2750—webappsphp

SQL injection vulnerability in print.php in SimpNews 2.40.01 and earlier allows remote attackers to execute arbitrary SQ

23RISK

open ↗

Referência✓ VexDay Proof

Jakarta Slide 2.1 RC1 - Remote File Disclosure

CVE-2007-5731—remotemultiple

Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read

23RISK

open ↗

Referência✓ VexDay Proof

GOM Player 2.1.6.3499 - 'GomWeb3.dll 1.0.0.12' Remote Overflow

CVE-2007-5779—remotewindows

Buffer overflow in the GomManager (GomWeb Control) ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Playe

60RISK

open ↗

Referência✓ VexDay Proof

FireConfig 0.5 - 'dl.php' Remote File Disclosure

CVE-2007-5782—webappsphp

Directory traversal vulnerability in dl.php in FireConfig 0.5 allows remote attackers to read arbitrary files via a .. (

23RISK

open ↗

Referência✓ VexDay Proof

XOOPS Module Camportail 1.1 - 'camid' SQL Injection

CVE-2007-1808—webappsphp

SQL injection vulnerability in show.php in the Camportail 1.1 and earlier module for Xoops allows remote attackers to ex

23RISK

open ↗

Referência✓ VexDay Proof

ISPworker 1.21 - 'download.php' Remote File Disclosure

CVE-2007-5813—webappsphp

Multiple directory traversal vulnerabilities in download.php in ISPworker 1.21 allow remote attackers to read arbitrary

23RISK

open ↗

Referência✓ VexDay Proof

Powies MatchMaker 4.05 - 'matchdetail.php' SQL Injection

CVE-2006-6039—webappsphp

SQL injection vulnerability in matchdetail.php in Powie's PHP MatchMaker 4.05 and earlier allows remote attackers to exe

23RISK

open ↗

Referência✓ VexDay Proof

Now SMS/Mms Gateway 5.5 - Remote Buffer Overflow

CVE-2008-0871—remotewindows

Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute ar

50RISK

open ↗

Referência✓ VexDay Proof

JobSitePro 1.0 - 'search.php' SQL Injection

CVE-2007-1428—webappsphp

SQL injection vulnerability in search.php in PHP Labs JobSitePro 1.0 allows remote attackers to execute arbitrary SQL co

23RISK

open ↗

Referência✓ VexDay Proof

AspWebCalendar 4.5 - 'eventid' SQL Injection

CVE-2004-1552—webappsasp

SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the us

23RISK

open ↗

Referência✓ VexDay Proof

aspwebalbum 3.2 - Multiple Vulnerabilities

CVE-2004-1553—webappsasp

SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the usern

23RISK

open ↗

Referência✓ VexDay Proof

Hpecs Shopping Cart - Remote Authentication Bypass

CVE-2006-5962—webappsasp

Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands v

23RISK

open ↗

Referência✓ VexDay Proof

PHP-Nuke Module Inhalt - 'cid' SQL Injection

CVE-2008-0907—webappsphp

SQL injection vulnerability in the Inhalt module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands

23RISK

open ↗

Referência✓ VexDay Proof

moziloCMS 1.11 - Local File Inclusion / Full Path Disclosure / Cross-Site Scripting

CVE-2009-1368—webappsphp

Directory traversal vulnerability in index.php in moziloCMS 1.11 allows remote attackers to read arbitrary files via a .

23RISK

open ↗

Referência✓ VexDay Proof

MultiCart 2.0 - 'productdetails.php' SQL Injection

CVE-2008-0911—webappsphp

SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote authenticated users to execute

23RISK

open ↗

Referência✓ VexDay Proof

BeContent 031 - 'id' SQL Injection

CVE-2008-0921—webappsphp

SQL injection vulnerability in news.php in beContent 0.3.1 allows remote attackers to execute arbitrary SQL commands via

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.