Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.386exploits catalogados
36.533CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.466Referência 23.104GitHub PoC 15.075VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentespopularesrisco
19.066 exploits
Exploit-DB✓ VexDay Proof
Sijio Community Software - SQL Injection / Persistent Cross-Site Scripting
CVE-2010-2696—webappsphp07 jul 2010
SQL injection vulnerability in gallery/index.php in Sijio Community Software allows remote attackers to execute arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Sijio Community Software - SQL Injection / Persistent Cross-Site Scripting
CVE-2010-2697—webappsphp07 jul 2010
Cross-site scripting (XSS) vulnerability in Sijio Community Software allows remote authenticated users to inject arbitra
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BadBlue 2.5 - 'ext.dll' Remote Buffer Overflow (Metasploit)
CVE-2005-0595—remotewindows07 jul 2010
Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DD-WRT HTTPd Daemon/Service - Arbitrary Command Execution (Metasploit)
CVE-2009-2765—webappscgi07 jul 2010
httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Exponent CMS 0.97 - 'Slideshow.js.php' Cross-Site Scripting
CVE-2010-5002—webappsphp07 jul 2010
Cross-site scripting (XSS) vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remot
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache (Windows x86) - Chunked Encoding (Metasploit)
CVE-2002-0392—remotewindows_x8607 jul 2010
Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possi
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Lyrics 3.0 - Engine SQL Injection
CVE-2010-2721—webappsphp06 jul 2010
SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component AutarTimonial 1.0.8 - SQL Injection
CVE-2010-5003—webappsphp06 jul 2010
SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Bladecenter Management - Multiple Web Application Vulnerabilities
CVE-2010-2655—webappsphp06 jul 2010
Directory traversal vulnerability in private/file_management.php on the IBM BladeCenter with Advanced Management Module
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX EvoCam Web Server (Snow Leopard) - ROP Remote Overflow
CVE-2010-2309—remoteosx06 jul 2010
Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary cod
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Bladecenter Management - Multiple Web Application Vulnerabilities
CVE-2010-2656—webappsphp06 jul 2010
The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BS Business Directory - 'articlesdetails.php' SQL Injection
CVE-2010-4969—webappsphp06 jul 2010
SQL injection vulnerability in articlesdetails.php in BrotherScripts (BS) Business Directory allows remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Bladecenter Management - Multiple Web Application Vulnerabilities
CVE-2010-2654—webappsphp06 jul 2010
Multiple cross-site scripting (XSS) vulnerabilities on the IBM BladeCenter with Advanced Management Module (AMM) firmwar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Orbis CMS 1.0.2 - 'editor-body.php' Cross-Site Scripting
CVE-2010-2669—webappsphp05 jul 2010
Cross-site scripting (XSS) vulnerability in admin/editors/text/editor-body.php in Orbis CMS 1.0.2 allows remote attacker
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WikiWebHelp 0.28 - SQL Injection
CVE-2010-4970—webappsphp05 jul 2010
SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary S
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NewsOffice 2.0.18 - 'news_show.php' Cross-Site Scripting
CVE-2010-2844—webappsphp05 jul 2010
Cross-site scripting (XSS) vulnerability in news_show.php in Newanz NewsOffice 2.0.18 allows remote attackers to inject
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Canteen 1.0 - Local File Inclusion
CVE-2010-4977—webappsphp05 jul 2010
SQL injection vulnerability in menu.php in the Canteen (com_canteen) component 1.0 for Joomla! allows remote attackers t
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Bs Recipes_Website Script - SQL Injection / Authentication Bypass
CVE-2010-2670—webappsphp05 jul 2010
SQL injection vulnerability in recipedetail.php in BrotherScripts Recipe Website allows remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
TCW PHP Album - Multiple Vulnerabilities
CVE-2010-2715—webappsphp04 jul 2010
Cross-site scripting (XSS) vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
TCW PHP Album - Multiple Vulnerabilities
CVE-2010-2714—webappsphp04 jul 2010
SQL injection vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Esoftpro Online Photo Pro 2 - Multiple Vulnerabilities
CVE-2010-4999—webappsphp04 jul 2010
SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary S
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Borland Interbase - 'INET_connect()' Remote Buffer Overflow (Metasploit)
CVE-2007-5243—remotelinux03 jul 2010
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SasCam WebCam Server 2.6.5 - ActiveX Overwrite (SEH)
CVE-2008-6898—remotewindows03 jul 2010
Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpBB - 'viewtopic.php' Arbitrary Code Execution (Metasploit)
CVE-2005-2086—webappsphp03 jul 2010
PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
TWiki - Search Function Arbitrary Command Execution (Metasploit)
CVE-2004-1037—webappsphp03 jul 2010
The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Sun Solaris sadmind - 'adm_build_path()' Remote Buffer Overflow (Metasploit)
CVE-2008-4556—remotesolaris03 jul 2010
Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allo
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Borland Interbase - 'open_marker_file()' Remote Buffer Overflow (Metasploit)
CVE-2007-5244—remotelinux03 jul 2010
Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versio
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Firebird Relational Database - 'SVC_attach()' Remote Buffer Overflow (Metasploit)
CVE-2007-5243—remotewindows03 jul 2010
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Firebird Relational Database - 'isc_create_database()' Remote Buffer Overflow (Metasploit)
CVE-2007-5243—remotewindows03 jul 2010
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Firebird Relational Database - 'isc_attach_database()' Remote Buffer Overflow (Metasploit)
CVE-2007-5243—remotewindows03 jul 2010
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RISCO
abrir ↗
← anteriorpágina 191 / 636próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.