Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.647exploits catalogados
34.986CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentespopularesrisco
24.443 exploits
Exploit-DB✓ VexDay Proof
Web Server Creator Web Portal 0.1 - Multiple Vulnerabilities
CVE-2010-1114—webappsphp24 fev 2010
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to exec
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WikyBlog 1.7.3rc2 - Multiple Vulnerabilities
CVE-2010-0754—webappsphp24 fev 2010
Cross-site scripting (XSS) vulnerability in index.php/Special/Main/Templates in WikyBlog 1.7.2 and 1.7.3 rc2 allows remo
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WikyBlog 1.7.3rc2 - Multiple Vulnerabilities
CVE-2010-0755—webappsphp24 fev 2010
PHP remote file inclusion vulnerability in include/WBmap.php in WikyBlog 1.7.3 rc2 allows remote attackers to execute ar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP Auktion Pro SQL - 'news.php' SQL Injection
CVE-2010-0722—webappsphp23 fev 2010
SQL injection vulnerability in news.php in Php Auktion Pro allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component user_id com_sqlreport - Blind SQL Injection
CVE-2010-0753—webappsphp23 fev 2010
SQL injection vulnerability in the SQL Reports (com_sqlreport) component 1.1 for Joomla! allows remote attackers to exec
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WampServer 2.0i - 'lang' Cross-Site Scripting
CVE-2010-0700—remotewindows22 fev 2010
Cross-site scripting (XSS) vulnerability in index.php in WampServer 2.0i allows remote attackers to inject arbitrary web
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
vBSEO 3.1.0 - Local File Inclusion
CVE-2010-1077—webappsphp22 fev 2010
Directory traversal vulnerability in vbseo.php in Crawlability vBSEO plugin 3.1.0 for vBulletin allows remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe (Multiple Products) - XML External Entity / XML Injection
CVE-2009-3960MEDIUMsob ataqueransomwaredosmultiple22 fev 2010
Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Service
100RISCO
abrir ↗
Exploit-DB
Arab Cart 1.0.2.0 - Multiple Vulnerabilities
CVE-2010-0725—webappsphp22 fev 2010
Cross-site scripting (XSS) vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to inject arbitrary
23RISCO
abrir ↗
Exploit-DB
Arab Cart 1.0.2.0 - Multiple Vulnerabilities
CVE-2010-0724—webappsphp22 fev 2010
SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Ero Auktion 2.0 - 'news.php' SQL Injection
CVE-2010-0723—webappsphp22 fev 2010
SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Ero Auktion 2010 - 'news.php' SQL Injection
CVE-2010-0723—webappsphp22 fev 2010
SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows Media Player 11.0.5721.5145 - '.mpg' Buffer Overflow
CVE-2010-0718—doswindows22 fev 2010
Buffer overflow in Microsoft Windows Media Player 9 and 11.0.5721.5145 allows remote attackers to cause a denial of serv
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Softbiz Jobs - 'news_desc' SQL Injection
CVE-2010-0758—webappsphp22 fev 2010
SQL injection vulnerability in news_desc.php in Softbiz Jobs allows remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
TimeClock 0.99 - Cross-Site Request Forgery (Add Admin)
CVE-2010-0707—webappsphp20 fev 2010
Cross-site request forgery (CSRF) vulnerability in add_user.php in Employee Timeclock Software 0.99 allows remote attack
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WSC CMS - Authentication Bypass
CVE-2010-0698—webappsphp19 fev 2010
SQL injection vulnerability in backoffice/login.asp in Dynamicsoft WSC CMS 2.2 allows remote attackers to execute arbitr
23RISCO
abrir ↗
Exploit-DB
Fonality trixbox 2.2.4 - 'PhonecDirectory.php' SQL Injection
CVE-2010-0702—webappsphp19 fev 2010
SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to e
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component com_communitypolls 1.5.2 - Local File Inclusion
CVE-2010-1081—webappsphp19 fev 2010
Directory traversal vulnerability in the Community Polls (com_communitypolls) component 1.5.2, and possibly earlier, for
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PortWise SSL VPN 4.6 - 'reloadFrame' Cross-Site Scripting
CVE-2010-0703—remotemultiple18 fev 2010
Cross-site scripting (XSS) vulnerability in wa/auth in PortWise SSL VPN 4.6 allows remote attackers to inject arbitrary
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Plugin Core Design Scriptegrator - Local File Inclusion
CVE-2010-0759—webappsphp18 fev 2010
Directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Desi
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Subex Nikira Fraud Management System GUI - 'message' Cross-Site Scripting
CVE-2010-0706—webappsphp18 fev 2010
Cross-site scripting (XSS) vulnerability in the login/prompt component in Subex Nikira Fraud Management System allows re
23RISCO
abrir ↗
Exploit-DB
gitWeb 1.5.2 - Remote Command Execution
CVE-2008-5517—remotelinux18 fev 2010
The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute arbitrary commands via shell met
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Plugin Core Design Scriptegrator - Local File Inclusion
CVE-2010-0760—webappsphp18 fev 2010
Multiple directory traversal vulnerabilities in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allow remote atta
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
XlentProjects SphereCMS 1.1 - 'archive.php' SQL Injection
CVE-2010-1078—webappsphp18 fev 2010
SQL injection vulnerability in archive.php in XlentProjects SphereCMS 1.1 alpha allows remote attackers to execute arbit
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple iTunes 9.0.1 - '.pls' Handling Buffer Overflow
CVE-2009-2817—localmultiple17 fev 2010
Buffer overflow in Apple iTunes before 9.0.1 allows remote attackers to execute arbitrary code or cause a denial of serv
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Erotik Auktionshaus - 'news.php' SQL Injection
CVE-2010-0720—webappsphp17 fev 2010
SQL injection vulnerability in news.php in Erotik Auktionshaus allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Auktionshaus Gelb 3 - 'news.php' SQL Injection
CVE-2010-0721—webappsphp17 fev 2010
SQL injection vulnerability in news.php in Auktionshaus Gelb 3.0 allows remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Symantec (Multiple Products) - Client Proxy ActiveX 'CLIproxy.dll' Remote Overflow
CVE-2010-0108—remotewindows17 fev 2010
Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVi
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BGSvetionik BGS CMS - 'search' Cross-Site Scripting
CVE-2010-0675—webappsphp16 fev 2010
Cross-site scripting (XSS) vulnerability in index.php in BGSvetionik BGS CMS 2.2.1 allows remote attackers to inject arb
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Pogodny CMS - SQL Injection
CVE-2010-0671—webappsphp16 fev 2010
SQL injection vulnerability in index.php in KR MEDIA Pogodny CMS allows remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗
← anteriorpágina 395 / 815próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.