Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
Exploit-DB✓ VexDay Proof
Uiga Fan Club 1.0 - Authentication Bypass
CVE-2010-1366—webappsphp27 fev 2010
Multiple SQL injection vulnerabilities in admin/admin_login.php in Uiga Fan Club 1.0 and earlier allow remote attackers
23RISCO
abrir ↗
Exploit-DB
Scripts Feed Business Directory - SQL Injection
CVE-2010-1092—webappsphp27 fev 2010
Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ARISg 5.0 - 'wflogin.jsp' Cross-Site Scripting
CVE-2010-2130—webappsjsp26 fev 2010
Cross-site scripting (XSS) vulnerability in wflogin.jsp in Aris Global ARISg 5.0 allows remote attackers to inject arbit
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Orbital Viewer 1.04 - '.orb' File Local Universal Overflow (SEH)
CVE-2010-0688—localwindows26 fev 2010
Stack-based buffer overflow in Orbital Viewer 1.04 allows user-assisted remote attackers to execute arbitrary code via a
50RISCO
abrir ↗
Metasploit500
MS10-022 Microsoft Internet Explorer Winhlp32.exe MsgBox Code Execution
CVE-2010-0483—26 fev 2010
vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP 5.3.1 - LCG Entropy Security
CVE-2010-1128—dosphp26 fev 2010
The Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected entropy, which makes it easie
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
GameScript 3.0 - SQL Injection
CVE-2010-1368—webappsphp25 fev 2010
SQL injection vulnerability in index.php in GameScript (GS) 3.0 allows remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM (Multiple Products) - Login Page Cross-Site Scripting
CVE-2010-0714—webappsjsp25 fev 2010
Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WikyBlog 1.7.3rc2 - Multiple Vulnerabilities
CVE-2010-0756—webappsphp24 fev 2010
Session fixation vulnerability in WikyBlog 1.7.3 rc2 allows remote attackers to hijack web sessions by setting the jsess
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WikyBlog 1.7.3rc2 - Multiple Vulnerabilities
CVE-2010-0757—webappsphp24 fev 2010
Unrestricted file upload vulnerability in index.php/Attach in WikyBlog 1.7.3rc2 allows remote authenticated users to exe
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Web Server Creator Web Portal 0.1 - Multiple Vulnerabilities
CVE-2010-1114—webappsphp24 fev 2010
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to exec
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WikyBlog 1.7.3rc2 - Multiple Vulnerabilities
CVE-2010-0754—webappsphp24 fev 2010
Cross-site scripting (XSS) vulnerability in index.php/Special/Main/Templates in WikyBlog 1.7.2 and 1.7.3 rc2 allows remo
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Safari 4.0.4 / Google Chrome 4.0.249 - CSS style Stack Overflow Denial of Service (PoC)
CVE-2010-1029—dosmultiple24 fev 2010
Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Saf
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Web Server Creator Web Portal 0.1 - Multiple Vulnerabilities
CVE-2010-1113—webappsphp24 fev 2010
Cross-site scripting (XSS) vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remote attacker
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WikyBlog 1.7.3rc2 - Multiple Vulnerabilities
CVE-2010-0755—webappsphp24 fev 2010
PHP remote file inclusion vulnerability in include/WBmap.php in WikyBlog 1.7.3 rc2 allows remote attackers to execute ar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component HD FLV Player - 'id' SQL Injection
CVE-2010-1372—webappsphp24 fev 2010
SQL injection vulnerability in the HD FLV Player (com_hdflvplayer) component 1.3 for Joomla! allows remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WikyBlog 1.7.3rc2 - Multiple Vulnerabilities
CVE-2012-1913—webappsphp24 fev 2010
20RISCO
abrir ↗
Exploit-DB
iPhone - 'WebCore::CSSSelector()' Remote Crash
CVE-2010-1029—doshardware24 fev 2010
Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Saf
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP Auktion Pro SQL - 'news.php' SQL Injection
CVE-2010-0722—webappsphp23 fev 2010
SQL injection vulnerability in news.php in Php Auktion Pro allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component user_id com_sqlreport - Blind SQL Injection
CVE-2010-0753—webappsphp23 fev 2010
SQL injection vulnerability in the SQL Reports (com_sqlreport) component 1.1 for Joomla! allows remote attackers to exec
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Ero Auktion 2010 - 'news.php' SQL Injection
CVE-2010-0723—webappsphp22 fev 2010
SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗
Exploit-DB
Arab Cart 1.0.2.0 - Multiple Vulnerabilities
CVE-2010-0724—webappsphp22 fev 2010
SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows Media Player 11.0.5721.5145 - '.mpg' Buffer Overflow
CVE-2010-0718—doswindows22 fev 2010
Buffer overflow in Microsoft Windows Media Player 9 and 11.0.5721.5145 allows remote attackers to cause a denial of serv
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe (Multiple Products) - XML External Entity / XML Injection
CVE-2009-3960MEDIUMsob ataqueransomwaredosmultiple22 fev 2010
Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Service
100RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Ero Auktion 2.0 - 'news.php' SQL Injection
CVE-2010-0723—webappsphp22 fev 2010
SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WampServer 2.0i - 'lang' Cross-Site Scripting
CVE-2010-0700—remotewindows22 fev 2010
Cross-site scripting (XSS) vulnerability in index.php in WampServer 2.0i allows remote attackers to inject arbitrary web
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Softbiz Jobs - 'news_desc' SQL Injection
CVE-2010-0758—webappsphp22 fev 2010
SQL injection vulnerability in news_desc.php in Softbiz Jobs allows remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
vBSEO 3.1.0 - Local File Inclusion
CVE-2010-1077—webappsphp22 fev 2010
Directory traversal vulnerability in vbseo.php in Crawlability vBSEO plugin 3.1.0 for vBulletin allows remote attackers
23RISCO
abrir ↗
Exploit-DB
Arab Cart 1.0.2.0 - Multiple Vulnerabilities
CVE-2010-0725—webappsphp22 fev 2010
Cross-site scripting (XSS) vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to inject arbitrary
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
TimeClock 0.99 - Cross-Site Request Forgery (Add Admin)
CVE-2010-0707—webappsphp20 fev 2010
Cross-site request forgery (CSRF) vulnerability in add_user.php in Employee Timeclock Software 0.99 allows remote attack
23RISCO
abrir ↗
← anteriorpágina 1447 / 2.936próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.