Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
88.056 exploits
Exploit-DB✓ VexDay Proof
Joomla! Component Jfeedback 1.2 - Local File Inclusion
CVE-2010-1478—webappsphp11 abr 2010
Directory traversal vulnerability in the Ternaria Informatica Jfeedback! (com_jfeedback) component 1.2 for Joomla! allow
38RISCO
abrir ↗
Exploit-DB
Joomla! Component Real Estate Property 3.1.22-03 - 'aid' SQL Injection
CVE-2010-1874—webappsphp10 abr 2010
SQL injection vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows remote a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Foobla Suggestions 1.5.1.2 - Local File Inclusion
CVE-2010-2920—webappsphp09 abr 2010
Directory traversal vulnerability in the Foobla Suggestions (com_foobla_suggestions) component 1.5.1.2 for Joomla! allow
38RISCO
abrir ↗
Metasploit600
Sun Java Web Start Plugin Command Line Argument Injection
CVE-2010-0886—09 abr 2010
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6
50RISCO
abrir ↗
Metasploit600
Sun Java Web Start Plugin Command Line Argument Injection
CVE-2010-1423—09 abr 2010
Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 U
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ReiserFS (Linux Kernel 2.6.34-rc3 / RedHat / Ubuntu 9.10) - 'xattr' Local Privilege Escalation
CVE-2010-1146—locallinux09 abr 2010
The Linux kernel 2.6.33.2 and earlier, when a ReiserFS filesystem exists, does not restrict read or write access to the
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
JAVA Web Start - Arbitrary Command-Line Injection
CVE-2010-0886—remotemultiple09 abr 2010
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Tembria Server Monitor 5.6.0 - Denial of Service
CVE-2010-1316—doswindows09 abr 2010
Multiple stack-based buffer overflows in Tembria Server Monitor before 5.6.1 allow remote attackers to cause a denial of
23RISCO
abrir ↗
Exploit-DB
Joomla! Component Agenda Address Book 1.0.1 - 'id' SQL Injection
CVE-2010-1716—webappsphp09 abr 2010
SQL injection vulnerability in the Agenda Address Book (com_agenda) component 1.0.1 for Joomla! allows remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Java Deployment Toolkit - Performs Insufficient Validation of Parameters
CVE-2010-0886—remotewindows09 abr 2010
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusion
CVE-2010-1532—webappsphp09 abr 2010
Directory traversal vulnerability in the givesight PowerMail Pro (com_powermail) component 1.5.3 for Joomla! allows remo
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Sun Java Web Start Plugin - Command Line Argument Injection (Metasploit)
CVE-2010-1423—localwindows09 abr 2010
Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 U
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Sun Java Web Start Plugin - Command Line Argument Injection (Metasploit)
CVE-2010-0886—localwindows09 abr 2010
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JA Voice 2.0 - Local File Inclusion
CVE-2010-1982—webappsphp09 abr 2010
Directory traversal vulnerability in the JA Voice (com_javoice) component 2.0 for Joomla! allows remote attackers to rea
38RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Multiple Vendor 'librpc.dll' Signedness Error - Remote Code Execution
CVE-2009-2754—dosmultiple08 abr 2010
Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmap
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Multiple Vendor 'librpc.dll' Signedness Error - Remote Code Execution
CVE-2009-2753—dosmultiple08 abr 2010
Multiple buffer overflows in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portma
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component AWDwall 1.5.4 - Local File Inclusion / SQL Injection
CVE-2010-1494—webappsphp08 abr 2010
Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to re
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component AWDwall 1.5.4 - Local File Inclusion / SQL Injection
CVE-2010-1493—webappsphp08 abr 2010
SQL injection vulnerability in the AWDwall (com_awdwall) component before 1.5.5 for Joomla! allows remote attackers to e
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component VJDEO 1.0 - Local File Inclusion
CVE-2010-1354—webappsphp07 abr 2010
Directory traversal vulnerability in the VJDEO (com_vjdeo) component 1.0 and 1.0.1 for Joomla! allows remote attackers t
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component XOBBIX 1.0 - 'prodid' SQL Injection
CVE-2010-5053—webappsphp06 abr 2010
SQL injection vulnerability in the XOBBIX (com_xobbix) component 1.0.1 for Joomla! allows remote attackers to execute ar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin NextGEN Gallery 1.5.1 - Cross-Site Scripting
CVE-2010-1186—webappsphp06 abr 2010
Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Juke Box 1.7 - Local File Inclusion
CVE-2010-1352—webappsphp06 abr 2010
Directory traversal vulnerability in the JOOFORGE Jutebox (com_jukebox) component 1.0 and 1.7 for Joomla! allows remote
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Saber Cart 1.0.0.12 - Local File Inclusion
CVE-2010-1313—webappsphp06 abr 2010
Directory traversal vulnerability in the Seber Cart (com_sebercart) component 1.0.0.12 and 1.0.0.13 for Joomla!, when ma
38RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Jzip 1.3 - '.zip' Unicode Buffer Overflow (PoC)
CVE-2010-5300—doswindows06 abr 2010
Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service (crash
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Fabrik 2.0 - Local File Inclusion
CVE-2010-1981—webappsphp06 abr 2010
Directory traversal vulnerability in the Fabrik (com_fabrik) component 2.0 for Joomla! allows remote attackers to read a
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Joomla! Flickr 1.0 - Local File Inclusion
CVE-2010-1980—webappsphp06 abr 2010
Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr (com_joomlaflickr) component 1.0.3 for Joomla
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Highslide 1.5 - Local File Inclusion
CVE-2010-1314—webappsphp06 abr 2010
Directory traversal vulnerability in the Highslide JS (com_hsconfig) component 1.5 and 2.0.9 for Joomla! allows remote a
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Freestyle FAQ Lite 1.3 - 'faqid' SQL Injection
CVE-2010-1529—webappsphp06 abr 2010
SQL injection vulnerability in the Freestyle FAQs Lite (com_fsf) component, possibly 1.3, for Joomla! allows remote atta
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Affiliate Datafeeds 880 - Local File Inclusion
CVE-2010-1979—webappsphp06 abr 2010
Directory traversal vulnerability in the Affiliate Datafeeds (com_datafeeds) component build 880 for Joomla! allows remo
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component News Portal 1.5.x - Local File Inclusion
CVE-2010-1312—webappsphp06 abr 2010
Directory traversal vulnerability in the iJoomla News Portal (com_news_portal) component 1.5.x for Joomla! allows remote
43RISCO
abrir ↗
← anteriorpágina 1440 / 2.936próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.