Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.457exploits catalogados
36.589CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.466Referência 23.152GitHub PoC 15.098VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentespopularesrisco
19.066 exploits
Exploit-DB✓ VexDay Proof
PHP RapidKill Pro 5.x - Arbitrary File Upload
CVE-2006-5918—webappsphp17 abr 2010
Unrestricted file upload vulnerability in RapidKill (aka PHP Rapid Kill) 5.7 Pro, and certain other versions, allows rem
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows 7/2008 R2 - SMB Client Trans2 Stack Overflow (MS10-020) (PoC)
CVE-2010-0270—doswindows17 abr 2010
The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction re
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SIESTTA 2.0 - Local File Inclusion / Cross-Site Scripting
CVE-2010-1711—webappsphp16 abr 2010
Cross-site scripting (XSS) vulnerability in carga_foto_al.php in Siestta 2.0, when register_globals is enabled, allows r
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SIESTTA 2.0 - Local File Inclusion / Cross-Site Scripting
CVE-2010-1710—webappsphp16 abr 2010
Directory traversal vulnerability in login.php in Siestta 2.0, when register_globals is enabled, allows remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JoltCard 1.2.1 - SQL Injection
CVE-2010-1496—webappsphp16 abr 2010
SQL injection vulnerability in the JoltCard (com_joltcard) component 1.2.1 for Joomla! allows remote attackers to execut
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache OFBiz - Remote Execution (via SQL Execution)
CVE-2010-0432—remotemultiple16 abr 2010
Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlie
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache OFBiz - Admin Creator
CVE-2010-0432—remotemultiple16 abr 2010
Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlie
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - SMB Client-Side Bug (PoC) (MS10-006)
CVE-2010-0017—doswindows16 abr 2010
Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB serv
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
60cycleCMS 2.5.2 - 'DOCUMENT_ROOT' Multiple Local File Inclusions
CVE-2010-1951—webappsphp15 abr 2010
Multiple directory traversal vulnerabilities in 60cycleCMS allow remote attackers to include and execute arbitrary local
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Bladecenter Management Module - Denial of Service
CVE-2010-1460—doshardware15 abr 2010
The IBM BladeCenter with Advanced Management Module (AMM) firmware before bpet50g does not properly perform interrupt sh
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Media Mall Factory 1.0.4 - Blind SQL Injection
CVE-2010-1600—webappsphp14 abr 2010
SQL injection vulnerability in the Media Mall Factory (com_mediamall) component 1.0.4 for Joomla! allows remote attacker
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Love Factory 1.3.4 - Local File Inclusion
CVE-2010-1957—webappsphp14 abr 2010
Directory traversal vulnerability in the Love Factory (com_lovefactory) component 1.3.4 for Joomla! allows remote attack
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JA Comment - Local File Inclusion
CVE-2010-1601—webappsphp14 abr 2010
Directory traversal vulnerability in the JA Comment (com_jacomment) component for Joomla! allows remote attackers to rea
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Aircrack-NG Tools svn r1675 - Remote Heap Buffer Overflow (PoC)
CVE-2010-1159—dosmultiple14 abr 2010
Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a denial of service (cras
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component BeeHeard 1.0 - Local File Inclusion
CVE-2010-1952—webappsphp14 abr 2010
Directory traversal vulnerability in the BeeHeard (com_beeheard) and BeeHeard Lite (com_beeheardlite) component 1.0 for
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component MT Fire Eagle 1.2 - Local File Inclusion
CVE-2010-1719—webappsphp14 abr 2010
Directory traversal vulnerability in the MT Fire Eagle (com_mtfireeagle) component 1.2 for Joomla! allows remote attacke
38RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mocha LPD 1.9 - Remote Buffer Overflow (Denial of Service) (PoC)
CVE-2010-1687—doswindows14 abr 2010
Stack-based buffer overflow in lpd.exe in Mocha W32 LPD 1.9 allows remote attackers to cause a denial of service (crash)
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Almnzm 2.1 - SQL Injection
CVE-2010-5055—webappsphp14 abr 2010
SQL injection vulnerability in index.php in Almnzm 2.1 allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Deluxe Blog Factory 1.1.2 - Local File Inclusion
CVE-2010-1955—webappsphp14 abr 2010
Directory traversal vulnerability in the Deluxe Blog Factory (com_blogfactory) component 1.1.2 for Joomla! allows remote
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Bild Flirt System 1.0 - SQL Injection
CVE-2010-0955—webappsphp14 abr 2010
SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Photo Battle 1.0.1 - Local File Inclusion
CVE-2010-1461—webappsphp14 abr 2010
Directory traversal vulnerability in the Photo Battle (com_photobattle) component 1.0.1 for Joomla! allows remote attack
38RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Jvehicles 1.0/2.0 - 'aid' SQL Injection
CVE-2010-1873—webappsphp13 abr 2010
SQL injection vulnerability in the Jvehicles (com_jvehicles) component 1.0, 2.0, and 2.1111 for Joomla! allows remote at
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Zikula Application Framework 1.2.2 - 'ZLanguage.php?lang' Cross-Site Scripting
CVE-2010-1724—webappsphp13 abr 2010
Multiple cross-site scripting (XSS) vulnerabilities in Zikula Application Framework 1.2.2, and possibly earlier, allow r
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Zikula Application Framework 1.2.2 - 'index.php?func' Cross-Site Scripting
CVE-2010-1724—webappsphp13 abr 2010
Multiple cross-site scripting (XSS) vulnerabilities in Zikula Application Framework 1.2.2, and possibly earlier, allow r
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Openurgence vaccin 1.03 - Local File Inclusion / Remote File Inclusion
CVE-2010-1466—webappsphp13 abr 2010
Directory traversal vulnerability in scr/soustab.php in openUrgence Vaccin 1.03 allows remote attackers to read arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JP Jobs 1.2.0 - 'id' SQL Injection
CVE-2010-1350—webappsphp13 abr 2010
SQL injection vulnerability in the JP Jobs (com_jp_jobs) component 1.4.1 and earlier for Joomla! allows remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Openurgence vaccin 1.03 - Local File Inclusion / Remote File Inclusion
CVE-2010-1467—webappsphp13 abr 2010
Multiple PHP remote file inclusion vulnerabilities in openUrgence Vaccin 1.03 allow remote attackers to execute arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component QPersonel 1.0.2 - SQL Injection
CVE-2010-1720—webappsphp13 abr 2010
SQL injection vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 and earlier for Joomla! allows remote atta
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Horoscope 1.5.0 - Local File Inclusion
CVE-2010-1472—webappsphp12 abr 2010
Directory traversal vulnerability in the Daily Horoscope (com_horoscope) component 1.5.0 for Joomla! allows remote attac
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
VMware Remote Console e.x.p build-158248 - Format String
CVE-2009-3732—dosmultiple12 abr 2010
Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers
28RISCO
abrir ↗
← anteriorpágina 211 / 636próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.