Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
Metasploit300
Adobe Flash Player "Button" Remote Code Execution
CVE-2010-3654—28 out 2010
Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 o
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DATAC RealWin SCADA Server 1.06 - Remote Buffer Overflow
CVE-2010-4142—remotewindows27 out 2010
Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ACC IMoveis 4.0 - SQL Injection
CVE-2010-4273—webappsphp27 out 2010
SQL injection vulnerability in imoveis.php in DescargarVista ACC IMoveis 1.1 allows remote attackers to execute arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NinkoBB 1.3RC5 - Cross-Site Scripting
CVE-2010-4874—webappsphp27 out 2010
Multiple cross-site scripting (XSS) vulnerabilities in users.php in NinkoBB 1.3 RC5 allow remote attackers to inject arb
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BloofoxCMS Registration Plugin - SQL Injection
CVE-2010-4870—webappsphp27 out 2010
SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Energine CMS - SQL Injection
CVE-2010-4185—webappsphp27 out 2010
SQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows remote attackers to execute arb
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Alstrasoft e-Friends 4.96 - Multiple Vulnerabilities
CVE-2008-5751—webappsphp27 out 2010
SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attackers to exec
23RISCO
abrir ↗
Exploit-DB
NitroSecurity ESM 8.4.0a - Remote Code Execution
CVE-2010-4099—remotelinux26 out 2010
ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary c
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NitroView ESM - 'ess.pm' Remote Command Execution
CVE-2010-4099—remotelinux26 out 2010
ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary c
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Winamp 5.5.8.2985 (in_mod plugin) - Local Stack Overflow
CVE-2010-4371—localwindows25 out 2010
Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vect
23RISCO
abrir ↗
Metasploit300
Mozilla Firefox Interleaved document.write/appendChild Memory Corruption
CVE-2010-3765CRITICALsob ataque25 out 2010
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, a
100RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle VM Server Virtual Server Agent - Command Injection (Metasploit)
CVE-2010-3585—remotelinux25 out 2010
Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confi
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DBHcms 1.1.4 - 'dbhcms_pid' SQL Injection
CVE-2010-4869—webappsphp24 out 2010
SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
GNU C Library 2.x (libc6) - Dynamic Linker LD_AUDIT Arbitrary DSO Load Privilege Escalation
CVE-2010-3856—locallinux22 out 2010
ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager for E-Business - '/ibm/wpm/domain?method' Cross-Site Scripting
CVE-2010-4120—webappsmultiple22 out 2010
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Shockwave Player - rcsL Memory Corruption (Metasploit)
CVE-2010-3653—remotewindows22 out 2010
The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrar
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager for E-Business - '/ibm/wpm/acl?method' Cross-Site Scripting
CVE-2010-4120—webappsmultiple22 out 2010
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
W-Agora 4.2.1 - 'search.php?bn' Cross-Site Scripting
CVE-2010-4868—webappsphp22 out 2010
Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote atta
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager for E-Business - '/ibm/wpm/pop?method' Cross-Site Scripting
CVE-2010-4120—webappsmultiple22 out 2010
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager for E-Business - '/ibm/wpm/gso?method' Cross-Site Scripting
CVE-2010-4120—webappsmultiple22 out 2010
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager for E-Business - '/ibm/wpm/group?method' Cross-Site Scripting
CVE-2010-4120—webappsmultiple22 out 2010
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager for E-Business - '/ivt/ivtserver?parm1' Cross-Site Scripting
CVE-2010-4120—webappsmultiple22 out 2010
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
GNU C Library 2.x (libc6) - Dynamic Linker LD_AUDIT Arbitrary DSO Load Privilege Escalation
CVE-2010-3847—locallinux22 out 2010
elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not pro
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager for E-Business - '/ibm/wpm/os?method' Cross-Site Scripting
CVE-2010-4120—webappsmultiple22 out 2010
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
W-Agora 4.2.1 - 'search.php3?bn' Traversal Local File Inclusion
CVE-2010-4867—webappsphp22 out 2010
Directory traversal vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager for E-Business - '/ibm/wpm/rule?method' Cross-Site Scripting
CVE-2010-4120—webappsmultiple22 out 2010
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager for E-Business - '/ibm/wpm/user?method' Cross-Site Scripting
CVE-2010-4120—webappsmultiple22 out 2010
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager for E-Business - '/ibm/wpm/webseal?method' Cross-Site Scripting
CVE-2010-4120—webappsmultiple22 out 2010
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager for E-Business - '/ibm/wpm/gsogroup?method' Cross-Site Scripting
CVE-2010-4120—webappsmultiple22 out 2010
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Shockwave Player - 'rcsL chunk' Memory Corruption
CVE-2010-3653—remotewindows21 out 2010
The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrar
60RISCO
abrir ↗
← anteriorpágina 1391 / 2.936próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.