Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.464exploits catalogados
40.695CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4.577Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.464 exploits
Exploit-DB
DynPG 4.2.0 - Multiple Vulnerabilities
CVE-2010-4400—webappsphp30 nov 2010
SQL injection vulnerability in _rights.php in DynPG CMS 4.2.0 allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗
Exploit-DB
DynPG 4.2.0 - Multiple Vulnerabilities
CVE-2010-4399—webappsphp30 nov 2010
Directory traversal vulnerability in languages.inc.php in DynPG CMS 4.1.1 and 4.2.0, when magic_quotes_gpc is disabled,
23RISCO
abrir ↗
Metasploit600
Pandora FMS v3.1 Auth Bypass and Arbitrary File Upload Vulnerability
CVE-2010-4279—30 nov 2010
The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which al
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Pandora FMS 3.1 - Authentication Bypass
CVE-2010-4279—webappsphp30 nov 2010
The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which al
50RISCO
abrir ↗
Exploit-DB
Pandora Fms 3.1 - Directory Traversal / Local File Inclusion
CVE-2010-4281—webappsphp30 nov 2010
Incomplete blacklist vulnerability in the safe_url_extraclean function in ajax.php in Pandora FMS before 3.1.1 allows re
23RISCO
abrir ↗
Exploit-DB
Pandora Fms 3.1 - Directory Traversal / Local File Inclusion
CVE-2010-4283—webappsphp30 nov 2010
PHP remote file inclusion vulnerability in extras/pandora_diag.php in Pandora FMS before 3.1.1 allows remote attackers t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Pandora Fms 3.1 - OS Command Injection
CVE-2010-4278—webappsphp30 nov 2010
operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary comm
28RISCO
abrir ↗
Exploit-DB
Pandora Fms 3.1 - Blind SQL Injection
CVE-2010-4280—webappsphp30 nov 2010
Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrary
23RISCO
abrir ↗
Exploit-DB
DynPG 4.2.0 - Multiple Vulnerabilities
CVE-2010-4401—webappsphp30 nov 2010
languages.inc.php in DynPG CMS 4.2.0 allows remote attackers to obtain sensitive information via a direct request, which
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
POP Peeper 3.4 - UIDL Buffer Overflow (Metasploit)
CVE-2009-1029—remotewindows30 nov 2010
Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a
50RISCO
abrir ↗
Exploit-DB
Pandora Fms 3.1 - SQL Injection
CVE-2010-4280—webappsphp30 nov 2010
Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrary
23RISCO
abrir ↗
Exploit-DB
Orbis CMS 1.0.2 - Arbitrary File Upload
CVE-2010-4313—webappsphp30 nov 2010
Unrestricted file upload vulnerability in fileman_file_upload.php in Orbis CMS 1.0.2 allows remote authenticated users t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Eclime 1.1.2b - Multiple Vulnerabilities
CVE-2010-4852—webappsphp30 nov 2010
Cross-site scripting (XSS) vulnerability in login.php in Eclime 1.1.2b allows remote attackers to inject arbitrary web s
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WU-FTPD - Site EXEC/INDEX Format String (Metasploit)
CVE-2000-0573—remotelinux30 nov 2010
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remo
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
enano CMS 1.1.7pl1 - Multiple Vulnerabilities
CVE-2010-4780—webappsphp30 nov 2010
SQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and
23RISCO
abrir ↗
Exploit-DB
Diferior 8.03 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2010-4850—webappsphp29 nov 2010
Multiple cross-site scripting (XSS) vulnerabilities in Diferior 8.03 allow remote attackers to inject arbitrary web scri
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
HP LaserJet - Directory Traversal in PJL Interface
CVE-2010-4107—remotehardware29 nov 2010
The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printer
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MicroNetSoft RV Dealer Website - 'search.asp' / showAlllistings.asp' SQL Injection
CVE-2010-4362—webappsasp29 nov 2010
Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗
Metasploit400
MS11-003 Microsoft Internet Explorer CSS Recursive Import Use After Free
CVE-2010-3971—29 nov 2010
Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in msh
60RISCO
abrir ↗
Exploit-DB
Skeletonz CMS - Persistent Cross-Site Scripting
CVE-2010-4734—webappscgi28 nov 2010
Multiple cross-site scripting (XSS) vulnerabilities in the comment feature in Skeletonz CMS 1.0, when the Blog plugin is
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Site2Nite Big Truck Broker - 'txtSiteId' SQL Injection
CVE-2010-4356—webappsasp28 nov 2010
SQL injection vulnerability in news_default.asp in Site2Nite Big Truck Broker allows remote attackers to execute arbitra
23RISCO
abrir ↗
Exploit-DB
CA Internet Security Suite 2010 - 'KmxSbx.sys' Kernel Pool Overflow
CVE-2010-4502—localwindows28 nov 2010
Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite Plus 2010 allows local users to cause a denial of
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Jurpopage 0.2.0 - SQL Injection
CVE-2010-4359—webappsphp27 nov 2010
SQL injection vulnerability in index.php in Jurpopage 0.2.0 allows remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Jurpopage 0.2.0 - SQL Injection
CVE-2010-4360—webappsphp27 nov 2010
Multiple SQL injection vulnerabilities in index.php in Jurpopage 0.2.0 allow remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.37 - Unix Sockets Local Denial of Service
CVE-2010-4249—doslinux27 nov 2010
The wait_for_unix_gc function in net/unix/garbage.c in the Linux kernel before 2.6.37-rc3-next-20101125 does not properl
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Easy Banner 2009.05.18 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2010-4783—webappsphp26 nov 2010
Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18, when ma
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Easy Banner 2009.05.18 - '/member.php' Multiple SQL Injection / Authentication Bypass
CVE-2010-4784—webappsphp26 nov 2010
Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic_quotes_g
23RISCO
abrir ↗
Exploit-DB
Linux Kernel 2.6.37 - 'setup_arg_pages()' Denial of Service
CVE-2010-4243—doslinux26 nov 2010
fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays repre
23RISCO
abrir ↗
Exploit-DB
Linux Kernel 2.6.37 - 'setup_arg_pages()' Denial of Service
CVE-2010-3858—doslinux26 nov 2010
The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN is used, does n
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SystemTap - Local Privilege Escalation
CVE-2010-4170—locallinux26 nov 2010
The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allow
38RISCO
abrir ↗
← anteriorpágina 1367 / 2.916próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.