Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
Exploit-DB✓ VexDay Proof
Microsoft Windows - ASN.1 Library Bitstring Heap Overflow (MS04-007) (Metasploit)
CVE-2003-0818—remotewindows25 jul 2010
Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microso
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell ZENworks 6.5 - Desktop/Server Management Overflow (Metasploit)
CVE-2005-1543—remotewindows25 jul 2010
Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENwor
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AKY Blog - SQL Injection
CVE-2010-2922—webappsasp24 jul 2010
SQL injection vulnerability in default.asp in AKY Blog allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Joomdle 0.24 - SQL Injection
CVE-2010-2908—webappsphp24 jul 2010
SQL injection vulnerability in the Joomdle (com_joomdle) component 0.24 and earlier for Joomla! allows remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
sNews 1.7 - 'index.php?category' SQL Injection
CVE-2010-2926—webappsphp24 jul 2010
SQL injection vulnerability in index.php in sNews 1.7 allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗
Exploit-DB
Joomla! Component YouTube 1.5 - SQL Injection
CVE-2010-2923—webappsphp24 jul 2010
SQL injection vulnerability in the YouTube (com_youtube) component 1.5 for Joomla! allows remote attackers to execute ar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM AIX 5l - 'FTPd' Remote DES Hash
CVE-2010-3187—remoteaix24 jul 2010
Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST com
28RISCO
abrir ↗
Exploit-DB
Joomla! Component Ozio Gallery - SQL Injection
CVE-2010-2910—webappsphp24 jul 2010
SQL injection vulnerability in the Ozio Gallery (com_oziogallery) component for Joomla! allows remote attackers to execu
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Golf Course Guide 0.9.6.0 - SQL Injection
CVE-2010-2921—webappsphp23 jul 2010
SQL injection vulnerability in the Golf Course Guide (com_golfcourseguide) component 0.9.6.0 beta and 1 beta for Joomla!
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Huru Helpdesk - SQL Injection (2)
CVE-2010-2907—webappsphp23 jul 2010
SQL injection vulnerability in the Huru Helpdesk (com_huruhelpdesk) component for Joomla! allows remote attackers to exe
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PhotoPost PHP 4.6.5 - 'ecard.php' SQL Injection
CVE-2004-0239—webappsphp23 jul 2010
SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unauth
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PhotoPost PHP 4.6.5 - 'ecard.php' SQL Injection
CVE-2005-0929—webappsphp23 jul 2010
SQL injection vulnerability in PhotoPost PHP Pro 5.x may allow remote attackers to execute arbitrary SQL commands via (1
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin myLDlinker - SQL Injection
CVE-2010-2924—webappsphp22 jul 2010
SQL injection vulnerability in myLDlinker.php in the myLinksDump Plugin 1.2 for WordPress allows remote attackers to exe
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AJ HYIP PRIME - 'welcome.php?id' Blind SQL Injection
CVE-2010-2915—webappsphp22 jul 2010
SQL injection vulnerability in welcome.php in AJ Square AJ HYIP PRIME allows remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AJ HYIP MERIDIAN - 'news.php?id' Blind SQL Injection
CVE-2010-2916—webappsphp22 jul 2010
SQL injection vulnerability in news.php in AJ Square AJ HYIP MERIDIAN allows remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗
Exploit-DB
Free PHP Photo Gallery Script - Remote File Inclusion
CVE-2010-4948—webappsphp22 jul 2010
PHP remote file inclusion vulnerability in libs/adodb/adodb.inc.php in PHP Free Photo Gallery script allows remote attac
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ZipCentral - '.zip' Local Buffer Overflow (SEH)
CVE-2006-2439—localwindows21 jul 2010
Stack-based buffer overflow in ZipCentral 4.01 allows remote user-assisted attackers to execute arbitrary code via a ZIP
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
libpng 1.4.2 - Denial of Service
CVE-2010-1205—dosmultiple20 jul 2010
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might
35RISCO
abrir ↗
Metasploit500
HP OpenView Network Node Manager execvp_nc Buffer Overflow
CVE-2010-2703—20 jul 2010
Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM)
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Office Web Components (OWC) Spreadsheet - msDataSourceObject Memory Corruption (MS09-043) (Metasploit)
CVE-2009-1136—remotewindows20 jul 2010
The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 an
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox and SeaMonkey Plugin Parameters - Remote Buffer Overflow
CVE-2010-1214—remotelinux20 jul 2010
Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remot
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenLDAP 2.4.22 - 'modrdn' Multiple Vulnerabilities
CVE-2010-0211—doslinux19 jul 2010
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normal
28RISCO
abrir ↗
Metasploit300
JBoss Seam 2 Remote Command Execution
CVE-2010-1871HIGHsob ataque19 jul 2010
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly
100RISCO
abrir ↗
Exploit-DB
Kayako eSupport 3.70.02 - 'functions.php' SQL Injection
CVE-2010-2912—webappsphp18 jul 2010
SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
rpc.pcnfsd - Remote Format String
CVE-2010-1039—remoteaix18 jul 2010
Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, a
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AIX5l with FTP-Server - Hash Disclosure
CVE-2010-3187—remoteaix18 jul 2010
Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST com
28RISCO
abrir ↗
Exploit-DB
Kayako eSupport 3.70.02 - 'functions.php' SQL Injection
CVE-2010-2911—webappsphp18 jul 2010
SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Ghostscript - '.PostScript' File Stack Overflow
CVE-2010-1869—localbsd18 jul 2010
Stack-based buffer overflow in the parser function in GhostScript 8.70 and 8.64 allows context-dependent attackers to ex
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Automatic .LNK Shortcut File Code Execution
CVE-2010-2568HIGHsob ataquelocalwindows18 jul 2010
Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 all
100RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Automatic .LNK Shortcut File Code Execution
CVE-2015-0096—localwindows18 jul 2010
Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and
60RISCO
abrir ↗
← anteriorpágina 1411 / 2.936próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.