Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
Exploit-DB✓ VexDay Proof
Orbis CMS 1.0.2 - 'editor-body.php' Cross-Site Scripting
CVE-2010-2669—webappsphp05 jul 2010
Cross-site scripting (XSS) vulnerability in admin/editors/text/editor-body.php in Orbis CMS 1.0.2 allows remote attacker
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NewsOffice 2.0.18 - 'news_show.php' Cross-Site Scripting
CVE-2010-2844—webappsphp05 jul 2010
Cross-site scripting (XSS) vulnerability in news_show.php in Newanz NewsOffice 2.0.18 allows remote attackers to inject
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Bs Recipes_Website Script - SQL Injection / Authentication Bypass
CVE-2010-2670—webappsphp05 jul 2010
SQL injection vulnerability in recipedetail.php in BrotherScripts Recipe Website allows remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Canteen 1.0 - Local File Inclusion
CVE-2010-4977—webappsphp05 jul 2010
SQL injection vulnerability in menu.php in the Canteen (com_canteen) component 1.0 for Joomla! allows remote attackers t
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WikiWebHelp 0.28 - SQL Injection
CVE-2010-4970—webappsphp05 jul 2010
SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary S
23RISCO
abrir ↗
Metasploit500
EasyFTP Server LIST Command Stack Buffer Overflow
CVE-2024-0546MEDIUM05 jul 2010
EasyFTP LIST Command denial of service
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
TCW PHP Album - Multiple Vulnerabilities
CVE-2010-2714—webappsphp04 jul 2010
SQL injection vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗
Exploit-DB
Esoftpro Online Contact Manager - Multiple Vulnerabilities
CVE-2010-5001—webappsphp04 jul 2010
SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitr
23RISCO
abrir ↗
Exploit-DB
Joomla! Component NinjaMonials - Blind SQL Injection
CVE-2010-4991—webappsphp04 jul 2010
SQL injection vulnerability in the NinjaMonials (com_ninjamonials) component for Joomla! allows remote attackers to exec
23RISCO
abrir ↗
Exploit-DB
Esoftpro Online Guestbook Pro - Multiple Vulnerabilities
CVE-2010-4996—webappsphp04 jul 2010
SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB
PHPaaCMS - 'list.php?id' SQL Injection
CVE-2010-2720—webappsphp04 jul 2010
SQL injection vulnerability in list.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to
23RISCO
abrir ↗
Exploit-DB
PHPaaCMS 0.3.1 - 'show.php?id' SQL Injection
CVE-2010-2719—webappsphp04 jul 2010
SQL injection vulnerability in show.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Esoftpro Online Photo Pro 2 - Multiple Vulnerabilities
CVE-2010-4999—webappsphp04 jul 2010
SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary S
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
TCW PHP Album - Multiple Vulnerabilities
CVE-2010-2715—webappsphp04 jul 2010
Cross-site scripting (XSS) vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arbi
23RISCO
abrir ↗
Exploit-DB
Esoftpro Online Guestbook Pro - Multiple Vulnerabilities
CVE-2009-4935—webappsphp04 jul 2010
SQL injection vulnerability in ogp_show.php in Online Guestbook Pro allows remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗
Exploit-DB
Joomla! Component Address Book - Blind SQL Injection
CVE-2010-4990—webappsphp04 jul 2010
SQL injection vulnerability in the Front-edit Address Book (com_addressbook) component for Joomla! allows remote attacke
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Firebird Relational Database - 'SVC_attach()' Remote Buffer Overflow (Metasploit)
CVE-2007-5243—remotewindows03 jul 2010
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Netgear WG111v2 Wireless Driver - Long Beacon Overflow (Metasploit)
CVE-2006-5972—remotehardware03 jul 2010
Stack-based buffer overflow in WG111v2.SYS in NetGear WG111v2 wireless adapter (USB) allows remote attackers to execute
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Firebird Relational Database - 'isc_create_database()' Remote Buffer Overflow (Metasploit)
CVE-2007-5243—remotewindows03 jul 2010
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - 'srv2.sys' SMB Negotiate ProcessID Function Table Dereference (MS09-050) (Metasploit)
CVE-2009-3103—remotewindows03 jul 2010
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Zabbix Agent - 'net.tcp.listen' Command Injection (Metasploit)
CVE-2009-4502—remotefreebsd03 jul 2010
The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote att
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'connectedNodes.ovp'l Remote Command Execution (Metasploit)
CVE-2005-2773CRITICALsob ataqueremotelinux03 jul 2010
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metach
100RISCO
abrir ↗
Exploit-DB
Ziggurat Farsi CMS - SQL Injection
CVE-2010-4989—webappsasp03 jul 2010
SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Borland Interbase - 'PWD_db_aliased()' Remote Buffer Overflow (Metasploit)
CVE-2007-5243—remotelinux03 jul 2010
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Core 1.5.1.3 - 'cache_lastpostdate' Arbitrary Code Execution (Metasploit)
CVE-2005-2612—webappsphp03 jul 2010
Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP co
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Borland Interbase - 'jrd8_create_database()' Remote Buffer Overflow (Metasploit)
CVE-2007-5243—remotelinux03 jul 2010
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpBB - 'viewtopic.php' Arbitrary Code Execution (Metasploit)
CVE-2005-2086—webappsphp03 jul 2010
PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - WebViewFolderIcon setSlice() Overflow (MS06-057) (Metasploit) (2)
CVE-2006-3730HIGHremotewindows03 jul 2010
Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service
68RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
The Matt Wright Guestbook.pl - Arbitrary Command Execution (Metasploit)
CVE-1999-1053—webappscgi03 jul 2010
guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remo
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Borland Interbase - 'INET_connect()' Remote Buffer Overflow (Metasploit)
CVE-2007-5243—remotelinux03 jul 2010
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RISCO
abrir ↗
← anteriorpágina 1415 / 2.936próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.