Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,337cataloged exploits
39,873CVEs with public exploitation
24,696lab-tested
AllReferência 25,822Exploit-DB 24,487GitHub PoC 17,115VulnCheck XDB 9,874Nuclei 4,511Metasploit 3,528✓ verified onlyrecentpopularrisk
3,528 exploits
Metasploit600
UnrealIRCD 3.2.8.1 Backdoor Command Execution
CVE-2010-2075—12 Jun 2010
UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally
60RISK
open ↗
Metasploit600
Oracle BeeHive 2 voice-servlet processEvaluation() Vulnerability
CVE-2010-4417—09 Jun 2010
Unspecified vulnerability in the Services for Beehive component in Oracle Fusion Middleware 2.0.1.0, 2.0.1.1, 2.0.1.2, 2
60RISK
open ↗
Metasploit600
Microsoft Help Center XSS and Command Execution
CVE-2010-1885—09 Jun 2010
The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server
60RISK
open ↗
Metasploit300
MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow
CVE-2010-0822—08 Jun 2010
Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML F
60RISK
open ↗
Metasploit500
HP OpenView Network Node Manager ovwebsnmpsrv.exe Unrecognized Option Buffer Overflow
CVE-2010-1960—08 Jun 2010
Buffer overflow in the error handling functionality in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.5
50RISK
open ↗
Metasploit300
Easy CD-DA Recorder PLS Buffer Overflow
CVE-2010-2343—07 Jun 2010
Stack-based buffer overflow in D.R. Software Audio Converter 8.1, 2007, and 8.05 allows remote attackers to execute arbi
50RISK
open ↗
Metasploit300
Adobe Flash Player "newfunction" Invalid Pointer Use
CVE-2010-1297HIGHunder attack04 Jun 2010
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrob
100RISK
open ↗
Metasploit300
Adobe Flash Player "newfunction" Invalid Pointer Use
CVE-2010-1297HIGHunder attack04 Jun 2010
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrob
100RISK
open ↗
Metasploit200
MacOS X EvoCam HTTP GET Buffer Overflow
CVE-2010-2309—01 Jun 2010
Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary cod
50RISK
open ↗
Metasploit600
Outlook ATTACH_BY_REF_ONLY File Execution
CVE-2010-0266—01 Jun 2010
Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_
50RISK
open ↗
Metasploit600
Outlook ATTACH_BY_REF_RESOLVE File Execution
CVE-2010-0266—01 Jun 2010
Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_
50RISK
open ↗
Metasploit300
SolarWinds TFTP Server 10.4.0.10 Denial of Service
CVE-2010-2115—21 May 2010
SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted
50RISK
open ↗
Metasploit500
CommuniCrypt Mail 1.16 SMTP ActiveX Stack Buffer Overflow
CVE-2010-20119HIGH19 May 2010
CommuniCrypt Mail <= 1.16 ANSMTP/AOSMTP ActiveX Control Buffer Overflow
36RISK
open ↗
Metasploit500
HP OpenView Network Node Manager getnnmdata.exe (MaxAge) CGI Buffer Overflow
CVE-2010-1553—11 May 2010
Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows r
60RISK
open ↗
Metasploit500
HP OpenView Network Node Manager getnnmdata.exe (Hostname) CGI Buffer Overflow
CVE-2010-1555—11 May 2010
Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows r
50RISK
open ↗
Metasploit500
HP OpenView Network Node Manager getnnmdata.exe (ICount) CGI Buffer Overflow
CVE-2010-1554—11 May 2010
Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows r
50RISK
open ↗
Metasploit500
HP OpenView Network Node Manager snmpviewer.exe Buffer Overflow
CVE-2010-1552—11 May 2010
Stack-based buffer overflow in the doLoad function in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01,
50RISK
open ↗
Metasploit600
HP Mercury LoadRunner Agent magentproc.exe Remote Command Execution
CVE-2010-1549—06 May 2010
Unspecified vulnerability in the Agent in HP LoadRunner before 9.50 and HP Performance Center before 9.50 allows remote
60RISK
open ↗
Metasploit400
Microsoft Office Visio VISIODWG.DLL DXF File Handling Vulnerability
CVE-2010-1681—04 May 2010
Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to ex
50RISK
open ↗
Metasploit600
Maple Maplet File Creation and Command Execution
CVE-2010-20120HIGH26 Apr 2010
Maple <= v13 Maplet File Creation and Command Execution
36RISK
open ↗
Metasploit600
JBoss Java Class DeploymentFileRepository WAR Deployment
CVE-2010-0738LOWunder attackransomware26 Apr 2010
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2
95RISK
open ↗
Metasploit600
JBoss JMX Console Beanshell Deployer WAR Upload and Deployment
CVE-2010-0738LOWunder attackransomware26 Apr 2010
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2
95RISK
open ↗
Metasploit300
Oracle DB SQL Injection via SYS.DBMS_CDC_PUBLISH.DROP_CHANGE_SOURCE
CVE-2010-0870—26 Apr 2010
Unspecified vulnerability in the Change Data Capture component in Oracle Database 9.2.0.8 and 9.2.0.8DV allows remote au
23RISK
open ↗
Metasploit300
Xftp FTP Client 3.0 PWD Remote Buffer Overflow
CVE-2010-20122CRITICAL22 Apr 2010
Xftp FTP Client <= 3.0 PWD Response Buffer Overflow
43RISK
open ↗
Metasploit400
AgentX++ Master AgentX::receive_agentx Stack Buffer Overflow
CVE-2010-1318—16 Apr 2010
Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Ser
50RISK
open ↗
Metasploit300
MS10-026 Microsoft MPEG Layer-3 Audio Stack Based Overflow
CVE-2010-0480—13 Apr 2010
Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Se
50RISK
open ↗
Metasploit500
Windows Media Services ConnectFunnel Stack Buffer Overflow
CVE-2010-0478—13 Apr 2010
Stack-based buffer overflow in nsum.exe in the Windows Media Unicast Service in Media Services for Microsoft Windows 200
50RISK
open ↗
Metasploit300
Trellian FTP Client 3.01 PASV Remote Buffer Overflow
CVE-2010-1465—11 Apr 2010
Stack-based buffer overflow in Trellian FTP client 3.01, including 3.1.3.1789, allows remote attackers to execute arbitr
50RISK
open ↗
Metasploit600
Sun Java Web Start Plugin Command Line Argument Injection
CVE-2010-0886—09 Apr 2010
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6
50RISK
open ↗
Metasploit600
Sun Java Web Start Plugin Command Line Argument Injection
CVE-2010-1423—09 Apr 2010
Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 U
50RISK
open ↗
← previouspage 85 / 118next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.