Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

85,482cataloged exploits
39,907CVEs with public exploitation
24,696lab-tested
AllReferência 25,846Exploit-DB 24,487GitHub PoC 17,231VulnCheck XDB 9,877Nuclei 4,513Metasploit 3,528✓ verified onlyrecentpopularrisk
3,528 exploits
Metasploit300
MS09-072 Microsoft Internet Explorer Style getElementsByTagName Memory Corruption
CVE-2009-3672—20 Nov 2009
Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that (1) were not properly initialized or
60RISK
open ↗
Metasploit500
HTTPDX tolog() Function Format String Vulnerability
CVE-2009-4769—17 Nov 2009
Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) remo
50RISK
open ↗
Metasploit500
HTTPDX tolog() Function Format String Vulnerability
CVE-2009-4769—17 Nov 2009
Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) remo
50RISK
open ↗
Metasploit600
AwingSoft Winds3D Player 3.5 SceneURL Download and Execute
CVE-2009-4850—14 Nov 2009
The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneU
43RISK
open ↗
Metasploit300
Microsoft Windows EOT Font Table Directory Integer Overflow
CVE-2009-2514—10 Nov 2009
win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse fon
50RISK
open ↗
Metasploit400
MS09-067 Microsoft Excel Malformed FEATHEADER Record Vulnerability
CVE-2009-3129HIGHunder attack10 Nov 2009
Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Conv
100RISK
open ↗
Metasploit600
Apache Tomcat Manager Authenticated Upload Code Execution
CVE-2009-3843—09 Nov 2009
HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which all
60RISK
open ↗
Metasploit600
Apache Tomcat Manager Authenticated Upload Code Execution
CVE-2009-3548—09 Nov 2009
The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a
60RISK
open ↗
Metasploit600
Apache Tomcat Manager Authenticated Upload Code Execution
CVE-2009-4188—09 Nov 2009
HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers t
50RISK
open ↗
Metasploit600
Apache Tomcat Manager Authenticated Upload Code Execution
CVE-2010-4094—09 Nov 2009
The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN acc
50RISK
open ↗
Metasploit600
Apache Tomcat Manager Authenticated Upload Code Execution
CVE-2010-0557—09 Nov 2009
IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial
50RISK
open ↗
Metasploit600
Apache Tomcat Manager Authenticated Upload Code Execution
CVE-2009-4189—09 Nov 2009
HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to exe
60RISK
open ↗
Metasploit600
Apache Tomcat Manager Application Deployer Authenticated Code Execution
CVE-2010-4094—09 Nov 2009
The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN acc
50RISK
open ↗
Metasploit600
Apache Tomcat Manager Application Deployer Authenticated Code Execution
CVE-2009-3843—09 Nov 2009
HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which all
60RISK
open ↗
Metasploit600
Apache Tomcat Manager Application Deployer Authenticated Code Execution
CVE-2010-0557—09 Nov 2009
IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial
50RISK
open ↗
Metasploit600
Apache Tomcat Manager Application Deployer Authenticated Code Execution
CVE-2009-4188—09 Nov 2009
HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers t
50RISK
open ↗
Metasploit600
Apache Tomcat Manager Application Deployer Authenticated Code Execution
CVE-2009-3548—09 Nov 2009
The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a
60RISK
open ↗
Metasploit600
Apache Tomcat Manager Application Deployer Authenticated Code Execution
CVE-2009-4189—09 Nov 2009
HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to exe
60RISK
open ↗
Metasploit500
Sun Java JRE getSoundbank file:// URI Buffer Overflow
CVE-2009-3867—04 Nov 2009
Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, J
60RISK
open ↗
Metasploit300
Symantec Altiris Deployment Solution ActiveX Control Buffer Overflow
CVE-2009-3033—04 Nov 2009
Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilitie
50RISK
open ↗
Metasploit200
Hewlett-Packard Power Manager Administration Buffer Overflow
CVE-2009-2685—04 Nov 2009
Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers t
60RISK
open ↗
Metasploit500
IBM Tivoli Storage Manager Express RCA Service Buffer Overflow
CVE-2008-4828—04 Nov 2009
Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM
60RISK
open ↗
Metasploit400
IBM Tivoli Storage Manager Express CAD Service Buffer Overflow
CVE-2009-3853—04 Nov 2009
Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (T
50RISK
open ↗
Metasploit500
Sun Java JRE AWT setDiffICM Buffer Overflow
CVE-2009-3869—04 Nov 2009
Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment
50RISK
open ↗
Metasploit300
Symantec ConsoleUtilities ActiveX Control Buffer Overflow
CVE-2009-3031—02 Nov 2009
Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6
50RISK
open ↗
Metasploit200
CA eTrust PestPatrol ActiveX Control Buffer Overflow
CVE-2009-4225—02 Nov 2009
Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote
50RISK
open ↗
Metasploit400
Rhinosoft Serv-U Session Cookie Buffer Overflow
CVE-2009-4006—01 Nov 2009
Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other ver
60RISK
open ↗
Metasploit400
SafeNet SoftRemote GROUPNAME Buffer Overflow
CVE-2009-3861—30 Oct 2009
Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions bef
38RISK
open ↗
Metasploit200
UFO: Alien Invasion IRC Client Buffer Overflow
CVE-2009-10006CRITICAL28 Oct 2009
UFO: Alien Invasion <= 2.2.1 IRC Client Buffer Overflow
43RISK
open ↗
Metasploit200
UFO: Alien Invasion IRC Client Buffer Overflow
CVE-2009-10006CRITICAL28 Oct 2009
UFO: Alien Invasion <= 2.2.1 IRC Client Buffer Overflow
43RISK
open ↗
← previouspage 88 / 118next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.