Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,337cataloged exploits
39,873CVEs with public exploitation
24,696lab-tested
AllReferência 25,822Exploit-DB 24,487GitHub PoC 17,115VulnCheck XDB 9,874Nuclei 4,511Metasploit 3,528✓ verified onlyrecentpopularrisk
3,523 exploits
Metasploit300
SCADA 3S CoDeSys CmpWebServer Stack Buffer Overflow
CVE-2011-5007—02 Dec 2011
Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB
60RISK
open ↗
Metasploit400
CCMPlayer 1.5 m3u Playlist Stack Based Buffer Overflow
CVE-2011-5170—30 Nov 2011
Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code vi
50RISK
open ↗
Metasploit200
MS11-080 AfdJoinLeaf Privilege Escalation
CVE-2011-2005HIGHunder attack30 Nov 2011
afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly valid
98RISK
open ↗
Metasploit600
WikkaWiki 1.3.2 Spam Logging PHP Injection
CVE-2011-4451—30 Nov 2011
libs/Wakka.class.php in WikkaWiki 1.3.1 and 1.3.2, when the spam_logging option is enabled, allows remote attackers to w
43RISK
open ↗
Metasploit300
Avid Media Composer 5.5 - Avid Phonetic Indexer Buffer Overflow
CVE-2011-5003—29 Nov 2011
Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier a
50RISK
open ↗
Metasploit600
Family Connections less.php Remote Command Execution
CVE-2011-5130—29 Nov 2011
dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers t
50RISK
open ↗
Metasploit600
V-CMS PHP File Upload and Execute
CVE-2011-4828—27 Nov 2011
Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote atta
50RISK
open ↗
Metasploit300
Yaws Web Server Directory Traversal
CVE-2011-4350—25 Nov 2011
Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user cou
23RISK
open ↗
Metasploit600
Hastymail 2.1.1 RC1 Command Injection
CVE-2011-4542—22 Nov 2011
Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs or (2) rsargs[] paramet
43RISK
open ↗
Metasploit300
VMware Update Manager 4 Directory Traversal
CVE-2011-4404—21 Nov 2011
The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 bef
50RISK
open ↗
Metasploit600
HP StorageWorks P4000 Virtual SAN Appliance Command Execution
CVE-2012-4361—11 Nov 2011
lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to exe
50RISK
open ↗
Metasploit600
Support Incident Tracker Remote Command Execution
CVE-2011-3829—10 Nov 2011
ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive in
43RISK
open ↗
Metasploit600
Support Incident Tracker Remote Command Execution
CVE-2011-3833—10 Nov 2011
Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote
43RISK
open ↗
Metasploit400
Aviosoft Digital TV Player Professional 1.0 Stack Buffer Overflow
CVE-2011-4496—09 Nov 2011
Buffer overflow in Aviosoft DTV Player 1.0.1.2 allows remote attackers to execute arbitrary code via a crafted .plf (aka
23RISK
open ↗
Metasploit600
PmWiki pagelist.php Remote PHP Code Injection Exploit
CVE-2011-4453—09 Nov 2011
The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitra
50RISK
open ↗
Metasploit300
AbsoluteFTP 1.9.6 - 2.2.10 LIST Command Remote Buffer Overflow
CVE-2011-5164—09 Nov 2011
Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute ar
43RISK
open ↗
Metasploit600
InduSoft Web Studio Arbitrary Upload Remote Code Execution
CVE-2011-4051—04 Nov 2011
CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require au
50RISK
open ↗
Metasploit600
HP Data Protector 6.10/6.11/6.20 Install Service
CVE-2011-0922—02 Nov 2011
The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that ref
50RISK
open ↗
Metasploit600
Novell ZENworks Asset Management Remote Execution
CVE-2011-2653—02 Nov 2011
Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote at
60RISK
open ↗
Metasploit300
HP OpenView Network Node Manager ov.dll _OVBuildPath Buffer Overflow
CVE-2011-3167—01 Nov 2011
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute
50RISK
open ↗
Metasploit300
NJStar Communicator 3.00 MiniSMTP Buffer Overflow
CVE-2011-4040—31 Oct 2011
Buffer overflow in MiniSmtp 3.0.11818 in NJStar Communicator allows remote attackers to execute arbitrary code via a cra
50RISK
open ↗
Metasploit600
phpLDAPadmin query_engine Remote PHP Code Injection
CVE-2011-4075—24 Oct 2011
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary
50RISK
open ↗
Metasploit300
HP Power Manager 'formExportDataLogs' Buffer Overflow
CVE-2009-3999—19 Oct 2011
Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to ex
60RISK
open ↗
Metasploit300
AdminStudio LaunchHelp.dll ActiveX Arbitrary Code Execution
CVE-2011-2657—19 Oct 2011
Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in Laun
50RISK
open ↗
Metasploit600
Java Applet Rhino Script Engine Remote Code Execution
CVE-2011-3544CRITICALunder attack18 Oct 2011
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and
100RISK
open ↗
Metasploit600
Java RMI Server Insecure Default Configuration Java Code Execution
CVE-2011-3556—15 Oct 2011
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ear
60RISK
open ↗
Metasploit300
Java RMI Server Insecure Endpoint Code Execution Scanner
CVE-2011-3556—15 Oct 2011
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ear
60RISK
open ↗
Metasploit300
Apple Safari file:// Arbitrary Code Execution
CVE-2011-3230—12 Oct 2011
Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers
50RISK
open ↗
Metasploit400
ScriptFTP LIST Remote Buffer Overflow
CVE-2011-3976—12 Oct 2011
Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long file
50RISK
open ↗
Metasploit600
myBB 1.6.4 Backdoor Arbitrary Command Execution
CVE-2011-10018CRITICAL06 Oct 2011
myBB 1.6.4 Backdoor Arbitrary Command Execution
63RISK
open ↗
← previouspage 77 / 118next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.