Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,871cataloged exploits

40,961CVEs with public exploitation

24,696lab-tested

All Referência 26,571Exploit-DB 24,489GitHub PoC 18,446VulnCheck XDB 11,241Nuclei 4,584Metasploit 3,540✓ verified onlyrecent popular risk

26,571 exploits

Referência✓ VexDay Proof

vbLOGIX Tutorial Script 1.0 - 'cat_id' SQL Injection

CVE-2008-4350—webappsphp

SQL injection vulnerability in main.php in vbLOGIX Tutorial Script 1.0 and earlier allows remote attackers to execute ar

23RISK

open ↗

Referência✓ VexDay Proof

DESlock+ < 3.2.7 - 'probe read' Local Kernel Denial of Service (PoC)

CVE-2008-4363—doswindows

DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) or potentially exe

23RISK

open ↗

Referência✓ VexDay Proof

Camera Life 2.6.2b4 - Arbitrary File Upload

CVE-2008-4366—webappsphp

Unrestricted file upload vulnerability in the image upload component in Camera Life 2.6.2b4 allows remote authenticated

23RISK

open ↗

Referência✓ VexDay Proof

AvailScript Photo Album - 'pics.php' Multiple Vulnerabilities

CVE-2008-4369—webappsphp

SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL comm

23RISK

open ↗

Referência✓ VexDay Proof

AvailScript Classmate Script - 'viewprofile.php' SQL Injection

CVE-2008-4375—webappsphp

SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitr

23RISK

open ↗

Referência✓ VexDay Proof

Live TV Script - 'index.php?mid' SQL Injection

CVE-2008-4376—webappsphp

SQL injection vulnerability in index.php in Live TV Script allows remote attackers to execute arbitrary SQL commands via

23RISK

open ↗

Referência✓ VexDay Proof

pPIM 1.0 - Upload/Change Password

CVE-2008-4428—webappsphp

Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier

23RISK

open ↗

Referência

CVE-2008-4447

CVE-2008-4447—

Cross-site scripting (XSS) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote atta

23RISK

open ↗

Referência✓ VexDay Proof

MySQL Quick Admin 1.5.5 - 'cookie' Local File Inclusion

CVE-2008-4455—webappsphp

Directory traversal vulnerability in index.php in EKINdesigns MySQL Quick Admin 1.5.5 and earlier, when magic_quotes_gpc

23RISK

open ↗

Referência

CVE-2008-4458

CVE-2008-4458—

SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute a

23RISK

open ↗

Referência✓ VexDay Proof

WEBBDOMAIN Polls 1.01 - Authentication Bypass

CVE-2008-6625—webappsphp

SQL injection vulnerability in getin.php in WEBBDOMAIN Polls (aka Poll) 1.0 and 1.01 allows remote attackers to execute

23RISK

open ↗

Referência✓ VexDay Proof

Ktools Photostore 3.5.2 - Multiple SQL Injections

CVE-2008-6649—webappsphp

SQL injection vulnerability in manager/image_details_editor.php in Ktools PhotoStore 2.5, 2.9.8, 3.1.0, and other versio

23RISK

open ↗

Referência✓ VexDay Proof

Butterfly ORGanizer 2.0.0 - SQL Injection / Cross-Site Scripting

CVE-2008-6700—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Butterfly Organizer 2.0.0 allow remote attackers to inject arbitr

23RISK

open ↗

Referência✓ VexDay Proof

xeCMS 1.0.0 RC2 - Insecure Cookie Handling

CVE-2008-6714—webappsphp

admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by

28RISK

open ↗

Referência✓ VexDay Proof

ReVou Twitter Clone - Arbitrary File Upload

CVE-2008-6751—webappsphp

Unrestricted file upload vulnerability in index.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging allows

23RISK

open ↗

Referência✓ VexDay Proof

SFS EZ Affiliate - 'cat_id' SQL Injection

CVE-2008-6780—webappsphp

SQL injection vulnerability in directory.php in Scripts for Sites (SFS) SFS EZ Affiliate allows remote attackers to exec

23RISK

open ↗

Referência✓ VexDay Proof

MindDezign Photo Gallery 2.2 - SQL Injection

CVE-2008-6788—webappsphp

SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magic_quotes_gpc is disabled, allows remote attackers

23RISK

open ↗

Referência✓ VexDay Proof

MindDezign Photo Gallery 2.2 - Arbitrary Add Admin

CVE-2008-6789—webappsphp

SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands vi

23RISK

open ↗

Referência✓ VexDay Proof

Vibro-School-CMS - 'nID' SQL Injection

CVE-2008-6795—webappsphp

SQL injection vulnerability in view_news.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQL

23RISK

open ↗

Referência✓ VexDay Proof

PHPwebnews 0.2 MySQL Edition - 'det' SQL Injection

CVE-2008-6812—webappsphp

SQL injection vulnerability in bukutamu.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary

23RISK

open ↗

Referência✓ VexDay Proof

Mambo Component SimpleBoard 1.0.1 - Arbitrary File Upload

CVE-2008-6814—webappsphp

Unrestricted file upload vulnerability in image_upload.php in the SimpleBoard (com_simpleboard) component 1.0.1 and earl

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.