Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.647exploits catalogados

34.986CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

24.443 exploits

Exploit-DB✓ VexDay Proof

KMSoft Guestbook 1.0 - Database Disclosure

CVE-2010-0978—webappsasp04 jan 2010

KMSoft Guestbook (aka GBook) 1.0 stores sensitive information under the web root with insufficient access control, which

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Joomla! Component com_abbrev - Local File Inclusion

CVE-2010-0985—webappsphp03 jan 2010

Directory traversal vulnerability in the Abbreviations Manager (com_abbrev) component 1.1 for Joomla! allows remote atta

43RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Joomla! Component com_cartweberp - Local File Inclusion

CVE-2010-0982—webappsphp03 jan 2010

Directory traversal vulnerability in the CARTwebERP (com_cartweberp) component 1.56.75 for Joomla! allows remote attacke

38RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Acidcat CMS 3.5 - Multiple Vulnerabilities

CVE-2010-0984—webappsasp03 jan 2010

Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which al

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Rezervi 3.0.2 - 'mail.inc.php' Remote File Inclusion

CVE-2010-0983—webappsphp03 jan 2010

PHP remote file inclusion vulnerability in include/mail.inc.php in Rezervi 3.0.2 and earlier, when register_globals is e

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Joomla! Component com_tpjobs - Blind SQL Injection

CVE-2010-0981—webappsphp03 jan 2010

SQL injection vulnerability in the TPJobs (com_tpjobs) component for Joomla! allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Elite Gaming Ladders 3.0 - SQL Injection

CVE-2010-5017—webappsphp03 jan 2010

SQL injection vulnerability in stats.php in Elite Gaming Ladders 3.0 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Acidcat CMS 3.5 - Multiple Vulnerabilities

CVE-2010-0976—webappsasp03 jan 2010

Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Joomla! Component com_bfsurvey_basic - SQL Injection

CVE-2010-2255—webappsphp03 jan 2010

SQL injection vulnerability in the BF Survey Pro (com_bfsurvey_pro) component before 1.3.1, BF Survey Pro Free (com_bfsu

23RISCO

abrir ↗

Exploit-DB

Joomla! Component com_hotbrackets - Blind SQL Injection

CVE-2010-0945—webappsphp03 jan 2010

SQL injection vulnerability in the HotBrackets Tournament Brackets (com_hotbrackets) component for Joomla! allows remote

23RISCO

abrir ↗

Exploit-DB

Joomla! Component Bamboo Simpla Admin Template - SQL Injection

CVE-2010-0158—webappsphp03 jan 2010

SQL injection vulnerability in the JoomlaBamboo (JB) Simpla Admin template for Joomla! allows remote attackers to execut

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Joomla! Component com_biblestudy - Local File Inclusion

CVE-2010-0157—webappsphp03 jan 2010

Directory traversal vulnerability in the Bible Study (com_biblestudy) component 6.1 for Joomla! allows remote attackers

43RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Joomla! Component com_bfsurvey - Local File Inclusion

CVE-2010-2259—webappsphp03 jan 2010

Directory traversal vulnerability in the BF Survey (com_bfsurvey) component for Joomla! allows remote attackers to inclu

43RISCO

abrir ↗

Exploit-DB

Joomla! Component Bridge of Hope Template - SQL Injection

CVE-2010-2254—webappsphp03 jan 2010

SQL injection vulnerability in the Shape5 Bridge of Hope template for Joomla! allows remote attackers to execute arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Left 4 Dead Stats 1.1 - SQL Injection

CVE-2010-0980—webappsphp02 jan 2010

SQL injection vulnerability in player.php in Left 4 Dead (L4D) Stats 1.1 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

LiveZilla 3.1.8.3 - Cross-Site Scripting

CVE-2009-4450—webappsphp30 dez 2009

Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DJ Studio Pro 5.1.6.5.2 - Local Overflow (SEH)

CVE-2009-4656—localwindows30 dez 2009

Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-as

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

UranyumSoft Ýlan Servisi - Database Disclosure

CVE-2009-4585—webappsasp30 dez 2009

UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which allo

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

I-Escorts Directory - 'country_escorts.php?country_id' SQL Injection

CVE-2009-4574—webappsphp30 dez 2009

SQL injection vulnerability in country_escorts.php in I-Escorts Directory Script allows remote attackers to execute arbi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

RoseOnlineCMS 3 B1 - 'admin' Local File Inclusion

CVE-2009-4581—webappsphp30 dez 2009

Directory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when magic_quotes_gpc is dis

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

XOOPS Module dictionary 2.0.18 - 'detail.php' SQL Injection

CVE-2009-4582—webappsphp30 dez 2009

SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

e-topbiz Slide Popups 1 PHP - Authentication Bypass

CVE-2008-6264—webappsphp30 dez 2009

SQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Joomla! Component iF Portfolio Nexus - 'Controller' Remote File Inclusion

CVE-2009-4679—webappsphp29 dez 2009

Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.5 for Joomla! allows

38RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Mini-stream Ripper 3.0.1.1 - '.pls' Universal Buffer Overflow

CVE-2009-5109—localwindows29 dez 2009

Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long e

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Joomla! Component com_if_nexus - Remote File Inclusion

CVE-2009-4679—webappsmultiple28 dez 2009

Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.5 for Joomla! allows

38RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FreePBX 2.5.2 - Zap Channel Addition Description Parameter Cross-Site Scripting

CVE-2009-4458—webappsphp28 dez 2009

Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.2 and 2.6.0rc2, and possibly other versions, allow re

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FreePBX 2.5.2 - '/admin/config.php?tech' Cross-Site Scripting

CVE-2009-4458—webappsphp28 dez 2009

Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.2 and 2.6.0rc2, and possibly other versions, allow re

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Joomla! Component com_qpersonel - Cross-Site Scripting

CVE-2009-4575—webappsphp27 dez 2009

Cross-site scripting (XSS) vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 RC2 for Joomla! allows remote

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Media Jukebox 8.0.400 - Local Buffer Overflow (SEH) (Metasploit)

CVE-2009-2650—localwindows27 dez 2009

Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a d

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Joomla! Component FacileForms - Cross-Site Scripting

CVE-2009-4578—webappsphp27 dez 2009

Cross-site scripting (XSS) vulnerability in the Facileforms (com_facileforms) component for Joomla! and Mambo allows rem

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.