Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,871cataloged exploits

40,961CVEs with public exploitation

24,696lab-tested

All Referência 26,571Exploit-DB 24,489GitHub PoC 18,446VulnCheck XDB 11,241Nuclei 4,584Metasploit 3,540✓ verified onlyrecent popular risk

26,571 exploits

Referência✓ VexDay Proof

WFTPD Explorer Pro 1.0 - Remote Heap Overflow (PoC)

CVE-2007-6473—doswindows

Heap-based buffer overflow in Texas Imperial Software WFTPD Pro Explorer 1.0 allows remote FTP servers to execute arbitr

23RISK

open ↗

Referência✓ VexDay Proof

Oreon 1.4 / Centreon 1.4.1 - Multiple Remote File Inclusion Vulnerabilities

CVE-2007-6485—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 (aka Oreon 1.4) allow remote attackers to execute a

28RISK

open ↗

Referência✓ VexDay Proof

hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities

CVE-2007-6495—webappsasp

inc_newuser.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the permis

23RISK

open ↗

Referência✓ VexDay Proof

hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities

CVE-2007-6498—webappsasp

Multiple SQL injection vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated user

23RISK

open ↗

Referência✓ VexDay Proof

hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities

CVE-2007-6503—webappsasp

Multiple unspecified vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users

23RISK

open ↗

Referência✓ VexDay Proof

RunCMS 1.6 - Multiple Vulnerabilities

CVE-2007-6545—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in RunCMS before 1.6.1 allow remote attackers to inject arbitrary we

23RISK

open ↗

Referência✓ VexDay Proof

MeGaCheatZ 1.1 - Multiple SQL Injections

CVE-2007-6557—webappsphp

Multiple SQL injection vulnerabilities in MeGaCheatZ 1.1 allow remote attackers to execute arbitrary SQL commands via th

23RISK

open ↗

Referência✓ VexDay Proof

Wallpaper Site 1.0.09 - 'category.php' SQL Injection

CVE-2007-6580—webappsphp

Multiple SQL injection vulnerabilities in Wallpaper Site 1.0.09 allow remote attackers to execute arbitrary SQL commands

23RISK

open ↗

Referência✓ VexDay Proof

nicLOR CMS - 'sezione_news.php' SQL Injection

CVE-2007-6586—webappsphp

SQL injection vulnerability in sezione_news.php in nicLOR-CMS allows remote attackers to execute arbitrary SQL commands

23RISK

open ↗

Referência✓ VexDay Proof

Hot or Not Clone by Jnshosts.com - Database Backup Dump

CVE-2007-6603—webappsphp

Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attacke

23RISK

open ↗

Referência✓ VexDay Proof

SkyFex Client 1.0 - ActiveX 'Start()' Method Remote Stack Overflow

CVE-2007-6605—doswindows

Buffer overflow in a certain ActiveX control in SkyFexClient.ocx 1.0.2.77 in SkyFex Client 1.0 allows remote attackers t

23RISK

open ↗

Referência✓ VexDay Proof

Mihalism Multi Host 2.0.7 - 'download.php' Remote File Disclosure

CVE-2007-6653—webappsphp

Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows remote attackers to read arbitrary

23RISK

open ↗

Referência✓ VexDay Proof

oneSCHOOL - 'admin/login.asp' SQL Injection

CVE-2007-6665—webappsasp

SQL injection vulnerability in admin/login.asp in Netchemia oneSCHOOL allows remote attackers to execute arbitrary SQL c

23RISK

open ↗

Referência✓ VexDay Proof

MyPHP Forum 3.0 (Final) - Multiple SQL Injections

CVE-2007-6667—webappsphp

SQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to execute arbitrary SQL c

23RISK

open ↗

Referência

CVE-2007-6673

CVE-2007-6673—

Cross-site scripting (XSS) vulnerability in Makale Scripti allows remote attackers to inject arbitrary web script or HTM

23RISK

open ↗

Referência✓ VexDay Proof

KnowledgeQuest 2.5 - Arbitrary Add Admin

CVE-2008-1727—webappsphp

KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers t

23RISK

open ↗

Referência✓ VexDay Proof

LiveCart 1.1.1 - 'id' Blind SQL Injection

CVE-2008-1750—webappsphp

SQL injection vulnerability in Integry Systems LiveCart 1.1.1 and earlier allows remote attackers to execute arbitrary S

23RISK

open ↗

Referência✓ VexDay Proof

Blogator-script 0.95 - 'incl_page' Remote File Inclusion

CVE-2008-1760—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow remote attackers to execute arbi

23RISK

open ↗

Referência✓ VexDay Proof

Akamai Download Manager < 2.2.3.7 - ActiveX Remote Download

CVE-2008-1770—remotewindows

CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force

28RISK

open ↗

Referência✓ VexDay Proof

Prozilla Top 100 1.2 - Arbitrary Delete Stats

CVE-2008-1785—webappsphp

delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary user

23RISK

open ↗

Referência✓ VexDay Proof

My Gaming Ladder 7.5 - 'ladderid' SQL Injection

CVE-2008-1791—webappsphp

SQL injection vulnerability in ladder.php in My Gaming Ladder 7.5 and earlier allows remote attackers to execute arbitra

23RISK

open ↗

Referência✓ VexDay Proof

Sabros.us 1.75 - 'thumbnails.php' Remote File Disclosure

CVE-2008-1799—webappsphp

Directory traversal vulnerability in thumbnails.php in sabros.us 1.75 allows remote attackers to read arbitrary files vi

23RISK

open ↗

Referência✓ VexDay Proof

BosClassifieds 3.0 - 'index.php' SQL Injection

CVE-2008-1838—webappsphp

SQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers to execute arbitrary SQL

23RISK

open ↗

Referência✓ VexDay Proof

Mcafee EPO 4.0 - 'FrameworkService.exe' Remote Denial of Service

CVE-2008-1855—doswindows

FrameworkService.exe in McAfee Common Management Agent (CMA) 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestra

23RISK

open ↗

Referência✓ VexDay Proof

Site Sift Listings - 'id' SQL Injection

CVE-2008-1869—webappsphp

SQL injection vulnerability in Site Sift Listings allows remote attackers to execute arbitrary SQL commands via the id p

23RISK

open ↗

Referência✓ VexDay Proof

Comdev News Publisher 4.1.2 - SQL Injection

CVE-2008-1872—webappsphp

SQL injection vulnerability in home.news.php in Comdev News Publisher 4.1.2 allows remote attackers to execute arbitrary

23RISK

open ↗

Referência✓ VexDay Proof

PHP Photo Gallery 1.0 - 'photo_id' SQL Injection

CVE-2008-1875—webappsphp

SQL injection vulnerability in index.php in Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 allows remote

23RISK

open ↗

Referência✓ VexDay Proof

DivX Player 6.7.0 - '.srt' File Buffer Overflow (PoC)

CVE-2008-1912—doswindows

Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause

28RISK

open ↗

Referência✓ VexDay Proof

E RESERV 2.1 - 'index.php' SQL Injection

CVE-2008-1975—webappsphp

SQL injection vulnerability in index.php in E-RESERV 2.1 allows remote attackers to execute arbitrary SQL commands via t

23RISK

open ↗

Referência✓ VexDay Proof

Acidcat CMS 3.4.1 - Multiple Vulnerabilities

CVE-2008-1990—webappsphp

Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.