Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
Exploit-DB✓ VexDay Proof
WSN Guest 1.02 - 'orderlinks' SQL Injection
CVE-2010-0672—webappsphp13 fev 2010
SQL injection vulnerability in index.php in WSN Guest 1.02 allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ZeusCMS 0.2 - Database Backup Dump / Local File Inclusion
CVE-2010-0680—webappsphp13 fev 2010
Directory traversal vulnerability in index.php in ZeusCMS 0.2 allows remote attackers to include and execute arbitrary l
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
statcountex 3.1 - Multiple Vulnerabilities
CVE-2010-0674—webappsphp13 fev 2010
StatCounteX 3.1 stores sensitive information under the web root with insufficient access control, which allows remote at
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ZeusCMS 0.2 - Database Backup Dump / Local File Inclusion
CVE-2010-0681—webappsphp13 fev 2010
ZeusCMS 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attack
23RISCO
abrir ↗
Exploit-DB
Hyleos ChemView 1.9.5.1 - ActiveX Control Buffer Overflow (Metasploit)
CVE-2010-0679—remotewindows12 fev 2010
Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos Ch
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Basic-CMS - 'nav_id' Cross-Site Scripting
CVE-2010-0695—webappsphp12 fev 2010
Cross-site scripting (XSS) vulnerability in pages/index.php in BASIC-CMS allows remote attackers to inject arbitrary web
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
CD Rentals Script - SQL Injection
CVE-2010-0762—webappsphp11 fev 2010
SQL injection vulnerability in index.php in CommodityRentals CD Rental Software allows remote attackers to execute arbit
23RISCO
abrir ↗
Exploit-DB
Omnidocs - SQL Injection
CVE-2010-0701—webappsjsp11 fev 2010
SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows remote attackers to execute ar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Cisco Collaboration Server 5 - Cross-Site Scripting / Source Code Disclosure
CVE-2010-0641—webappsmultiple11 fev 2010
Cross-site scripting (XSS) vulnerability in webline/html/admin/wcs/LoginPage.jhtml in Cisco Collaboration Server (CCS) 5
23RISCO
abrir ↗
Exploit-DB
J.A.G (Just Another Guestbook) 1.14 - Database Disclosure
CVE-2010-0665—webappswindows11 fev 2010
JAG (Just Another Guestbook) 1.14 stores sensitive information under the web root with insufficient access control, whic
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
RSA - SecurID Cross-Site Scripting
CVE-2008-1470—webappsmultiple11 fev 2010
Incomplete blacklist vulnerability in IISWebAgentIF.dll in the WebID RSA Authentication Agent 5.3, and possibly earlier,
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Video Games Rentals Script - SQL Injection
CVE-2010-0690—webappsmultiple11 fev 2010
SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP 5.3.1 - 'session_save_path() Safe_mode()' Restriction Bypass Exploiot
CVE-2010-1130—dosphp11 fev 2010
session.c in the session extension in PHP before 5.2.13, and 5.3.1, does not properly interpret ; (semicolon) characters
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Trade Manager Script - SQL Injection
CVE-2010-0693—webappsphp11 fev 2010
SQL injection vulnerability in products.php in CommodityRentals Trade Manager Script allows remote attackers to execute
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Books/eBooks Rental Software - SQL Injection
CVE-2010-0761—webappsphp11 fev 2010
SQL injection vulnerability in index.php in CommodityRentals Books/eBooks Rentals Script allows remote attackers to exec
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Vacation Rental Script - SQL Injection
CVE-2010-0763—webappsphp11 fev 2010
SQL injection vulnerability in index.php in CommodityRentals Vacation Rental Software allows remote attackers to execute
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Wireshark - LWRES Dissector getaddrsbyname_request Buffer Overflow (Metasploit)
CVE-2010-0304—remotelinux11 fev 2010
Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Cisco Collaboration Server 5 - Cross-Site Scripting / Source Code Disclosure
CVE-2010-0642—webappsmultiple11 fev 2010
Cisco Collaboration Server (CCS) 5 allows remote attackers to read the source code of JHTML files via URL encoded charac
23RISCO
abrir ↗
Metasploit400
Hyleos ChemView ActiveX Control Stack Buffer Overflow
CVE-2010-0679—10 fev 2010
Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos Ch
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
eSmile Script - 'index.php' SQL Injection
CVE-2010-0764—webappsphp10 fev 2010
SQL injection vulnerability in index.php in KuwaitPHP eSmile allows remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Accellion File Transfer - 'Appliance web_client_user_guide.html?lang' Traversal Arbitrary File Access
CVE-2009-4645—remotelinux10 fev 2010
Directory traversal vulnerability in web_client_user_guide.html in Accellion Secure File Transfer Appliance before 8_0_1
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Accellion Secure File Transfer Appliance - Multiple Command Restriction / Privilege Escalations
CVE-2009-4648—locallinux10 fev 2010
Accellion Secure File Transfer Appliance before 8_0_105 does not properly restrict access to sensitive commands and argu
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
osTicket 1.6 RC5 - Multiple Vulnerabilities
CVE-2010-0605—webappsphp09 fev 2010
SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Sta
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
fipsForum 2.6 - Remote Database Disclosure
CVE-2010-0765—webappsasp09 fev 2010
fipsForum 2.6 stores sensitive information under the web root with insufficient access control, which allows remote atta
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows Vista/2008 - ICMPv6 Router Advertisement Remote Code Execution
CVE-2010-0239—remotewindows09 fev 2010
The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabl
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows XP/Vista/2000/2003 - Double-Free Memory Corruption Privilege Escalation
CVE-2010-0233—localwindows09 fev 2010
Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1,
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
feedDemon 3.1.0.9 - '.opml' File Buffer Overflow
CVE-2009-0546—localwindows09 fev 2010
Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbi
50RISCO
abrir ↗
Metasploit400
MS10-004 Microsoft PowerPoint Viewer TextBytesAtom Stack Buffer Overflow
CVE-2010-0033—09 fev 2010
Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code vi
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
JaxCMS 1.0 - Local File Inclusion
CVE-2010-1043—webappsphp08 fev 2010
Directory traversal vulnerability in index.php in jaxCMS 1.0 allows remote attackers to include and execute arbitrary lo
23RISCO
abrir ↗
Exploit-DB
Linux Kernel 2.6.18 - 'move_pages()' Information Leak
CVE-2010-0415—locallinux08 fev 2010
The do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which al
23RISCO
abrir ↗
← anteriorpágina 1449 / 2.936próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.