Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.899exploits catalogados
40.763CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.463Exploit-DB 24.489GitHub PoC 18.324VulnCheck XDB 10.507Nuclei 4.577Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.900 exploits
Exploit-DB✓ VexDay Proof
Coppermine Photo Gallery 1.5.10 - 'help.php' Cross-Site Scripting
CVE-2010-4693—webappsphp28 dez 2010
Multiple cross-site scripting (XSS) vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attacker
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
LiveZilla 3.2.0.2 - 'Track' Module 'server.php' Cross-Site Scripting
CVE-2010-4276—webappsphp27 dez 2010
Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in templates/jscript/jstrack.tpl in Live
23RISCO
abrir ↗
Metasploit400
Kolibri HTTP Server HEAD Buffer Overflow
CVE-2002-2268—26 dez 2010
Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Kolibri 2.0 - 'HEAD' Remote Buffer Overflow RET (SEH)
CVE-2010-5301—remotewindows26 dez 2010
Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a HEAD re
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NIPrint LPD - Request Overflow (Metasploit)
CVE-2003-1141—remotewindows25 dez 2010
Buffer overflow in NIPrint 4.10 allows remote attackers to execute arbitrary code via a long string to TCP port 515.
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBB 1.6 - 'search.php?keywords' SQL Injection
CVE-2010-5096—webappsphp23 dez 2010
Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.1 allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBB 1.6 - 'private.php?keywords' SQL Injection
CVE-2010-5096—webappsphp23 dez 2010
Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.1 allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft WMITools - ActiveX Remote Command Execution
CVE-2010-4588—remotewindows22 dez 2010
The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote a
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Citrix Access Gateway - Command Injection
CVE-2010-4566—remotelinux22 dez 2010
The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft WMITools - ActiveX Remote Command Execution
CVE-2010-3973—remotewindows22 dez 2010
The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in
60RISCO
abrir ↗
Exploit-DB
html-edit CMS - Multiple Vulnerabilities
CVE-2010-4610—webappsphp21 dez 2010
Cross-site scripting (XSS) vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to inject arbitrary
23RISCO
abrir ↗
Exploit-DB
Hycus CMS - Multiple Vulnerabilities
CVE-2010-4612—webappsphp21 dez 2010
Multiple SQL injection vulnerabilities in index.php in Hycus CMS 1.0.3, when magic_quotes_gpc is disabled, allow remote
23RISCO
abrir ↗
Exploit-DB
html-edit CMS - Multiple Vulnerabilities
CVE-2010-4611—webappsphp21 dez 2010
Html-edit CMS 3.1.8 allows remote attackers to obtain sensitive information via a direct request to (1) pages.php and (2
23RISCO
abrir ↗
Exploit-DB
Habari Blog - Multiple Vulnerabilities
CVE-2010-4607—webappsphp21 dez 2010
Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, when register_globals is enabled, allow remote atta
23RISCO
abrir ↗
Exploit-DB
Hycus CMS - Multiple Vulnerabilities
CVE-2010-4613—webappsphp21 dez 2010
Multiple directory traversal vulnerabilities in Hycus CMS 1.0.3 allow remote attackers to include and execute arbitrary
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft IIS 7.5 (Windows 7) - FTPSVC Unauthorized Remote Denial of Service (PoC)
CVE-2010-3972—doswindows21 dez 2010
Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft SQL Server - Payload Execution (Metasploit)
CVE-2000-0402—remotewindows21 dez 2010
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in pla
60RISCO
abrir ↗
Metasploit500
Microsoft WMI Administration Tools ActiveX Buffer Overflow
CVE-2010-3973—21 dez 2010
The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in
60RISCO
abrir ↗
Exploit-DB
ecava IntegraXor 3.6.4000.0 - Directory Traversal
CVE-2010-4598—remotewindows21 dez 2010
Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary f
28RISCO
abrir ↗
Exploit-DB
Habari Blog - Multiple Vulnerabilities
CVE-2010-4608—webappsphp21 dez 2010
Habari 0.6.5 allows remote attackers to obtain sensitive information via a direct request to (1) header.php and (2) comm
23RISCO
abrir ↗
Exploit-DB
html-edit CMS - Multiple Vulnerabilities
CVE-2010-4609—webappsphp21 dez 2010
SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MHonArc 2.6.16 - Tag Nesting Remote Denial of Service
CVE-2010-1677—doslinux21 dez 2010
MHonArc 2.6.16 allows remote attackers to cause a denial of service (CPU consumption) via start tags that are placed wit
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft SQL Server - Payload Execution (Metasploit)
CVE-2000-1209—remotewindows21 dez 2010
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3)
60RISCO
abrir ↗
Metasploit600
Citrix Access Gateway Command Execution
CVE-2010-4566—21 dez 2010
The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and
43RISCO
abrir ↗
Metasploit300
Microsoft IIS FTP Server Encoded Response Overflow Trigger
CVE-2010-3972—21 dez 2010
Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mafya Oyun Scrpti - 'profil.php' SQL Injection
CVE-2010-4619—webappsphp20 dez 2010
SQL injection vulnerability in profil.php in Mafya Oyun Scrpti (aka Mafia Game Script) allows remote attackers to execut
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JotLoader 2.2.1 - Local File Inclusion
CVE-2010-4617—webappsphp20 dez 2010
Directory traversal vulnerability in the JotLoader (com_jotloader) component 2.2.1 for Joomla! allows remote attackers t
38RISCO
abrir ↗
Exploit-DB
PHP Web Scripts Ad Manager Pro 3.0 - SQL Injection
CVE-2010-4843—webappsphp20 dez 2010
SQL injection vulnerability in website-page.php in PHP Web Scripts Ad Manager Pro 3.0 allows remote attackers to execute
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Redmine SCM Repository - Arbitrary Command Execution (Metasploit)
CVE-2011-4929—remotelinux19 dez 2010
Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and 1.0.x before 1.0.5 allows remote attacke
50RISCO
abrir ↗
Metasploit600
Redmine SCM Repository Arbitrary Command Execution
CVE-2011-4929—19 dez 2010
Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and 1.0.x before 1.0.5 allows remote attacke
50RISCO
abrir ↗
← anteriorpágina 1376 / 2.930próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.