Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

88.644exploits catalogados

40.922CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.560Exploit-DB 24.489GitHub PoC 18.407VulnCheck XDB 11.064Nuclei 4.584Metasploit 3.540✓ só verificadosrecentes populares risco

88.644 exploits

Exploit-DB✓ VexDay Proof

Goople 1.8.2 - 'FrontPage.php' Blind SQL Injection

CVE-2009-0121—webappsphp06 jan 2009

SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 allows remote attackers to execute arbitrary SQL comman

23RISCO

Exploit-DB✓ VexDay Proof

Destiny Media Player 1.61 - '.lst' Local Buffer Overflow (1)

CVE-2009-3429—localwindows04 jan 2009

Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code

50RISCO

Metasploit400

Destiny Media Player 1.61 PLS M3U Buffer Overflow

CVE-2009-3429—03 jan 2009

Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code

50RISCO

Exploit-DB✓ VexDay Proof

Destiny Media Player 1.61 - '.lst' Local Buffer Overflow (PoC)

CVE-2009-3429—doswindows03 jan 2009

Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code

50RISCO

Exploit-DB✓ VexDay Proof

Destiny Media Player 1.61 - '.m3u' Local Stack Overflow

CVE-2009-3429—localwindows03 jan 2009

Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code

50RISCO

Exploit-DB✓ VexDay Proof

Destiny Media Player 1.61 - '.m3u' Local Buffer Overflow (PoC)

CVE-2009-3429—doswindows02 jan 2009

Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code

50RISCO

Exploit-DB✓ VexDay Proof

PHP 5.2.8 gd library - 'imageRotate()' Information Leak

CVE-2008-5498—localmultiple02 jan 2009

Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the co

23RISCO

Exploit-DB✓ VexDay Proof

Apple Safari 3.2 WebKit - 'alink' Property Memory Leak Remote Denial of Service (2)

CVE-2008-5821—dososx01 jan 2009

Memory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows remote attackers to cause

23RISCO

Exploit-DB✓ VexDay Proof

Apple Safari 3.2 WebKit - 'alink' Property Memory Leak Remote Denial of Service (1)

CVE-2008-5821—dososx01 jan 2009

Memory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows remote attackers to cause

23RISCO

Exploit-DB✓ VexDay Proof

PHPFootball 1.6 - Remote Hash Disclosure

CVE-2009-0709—webappsphp01 jan 2009

SQL injection vulnerability in login.php in PHPFootball 1.6 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

Exploit-DB✓ VexDay Proof

PHPFootball 1.6 - Remote Hash Disclosure

CVE-2009-0710—webappsphp01 jan 2009

Multiple cross-site scripting (XSS) vulnerabilities in PHPFootball 1.6 allow remote attackers to inject arbitrary web sc

23RISCO

Exploit-DB✓ VexDay Proof

Viart shopping cart 3.5 - Multiple Vulnerabilities

CVE-2008-6758—webappsphp01 jan 2009

Cross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote att

23RISCO

Exploit-DB✓ VexDay Proof

Viart shopping cart 3.5 - Multiple Vulnerabilities

CVE-2008-6765—webappsphp01 jan 2009

ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to access the contents of an arbitrary shopping cart via a mo

23RISCO

Exploit-DB✓ VexDay Proof

Megacubo 5.0.7 - 'mega://' Arbitrary File Download and Execute

CVE-2008-6748—remotewindows01 jan 2009

Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the

23RISCO

Exploit-DB✓ VexDay Proof

Audio File Library 0.2.6 - libaudiofile 'msadpcm.c .WAV' File Processing Buffer Overflow

CVE-2008-5824—remotelinux30 dez 2008

Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a

23RISCO

Metasploit100

SasCam Webcam Server v.2.6.5 Get() Method Buffer Overflow

CVE-2008-6898—29 dez 2008

Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote

50RISCO

Exploit-DB✓ VexDay Proof

xterm - DECRQSS Remote Command Execution

CVE-2006-7236—remotelinux29 dez 2008

The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, whic

23RISCO

Exploit-DB✓ VexDay Proof

ViArt Shop 3.5 - 'manuals_search.php?manuals_search' Cross-Site Scripting

CVE-2008-6757—webappsphp29 dez 2008

Cross-site scripting (XSS) vulnerability in manuals_search.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attac

23RISCO

Exploit-DB✓ VexDay Proof

Microsoft Windows Media Player 9/10/11 - '.WAV' File Parsing Code Execution

CVE-2008-5745—remotewindows29 dez 2008

Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, includ

28RISCO

Exploit-DB✓ VexDay Proof

Chilkat FTP - ActiveX (SaveLastError) Insecure Method

CVE-2008-1647—remotewindows28 dez 2008

The ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in ChilkatHttp.dll 2.4.0.0, 2.3.0.0,

23RISCO

Exploit-DB✓ VexDay Proof

Miniweb 2.0 - Authentication Bypass

CVE-2008-2197—webappsphp28 dez 2008

SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL co

23RISCO

Exploit-DB✓ VexDay Proof

Chilkat FTP - ActiveX (SaveLastError) Insecure Method

CVE-2008-4584—remotewindows28 dez 2008

Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control (ChilkatCert.dll) allows remote attackers to overwrite

23RISCO

Exploit-DB✓ VexDay Proof

Joomla! Component 5starhotels - SQL Injection

CVE-2008-5875—webappsphp24 dez 2008

SQL injection vulnerability in the com_lowcosthotels component in the Hotel Booking Reservation System (aka HBS) for Joo

23RISCO

Exploit-DB✓ VexDay Proof

Joomla! Component 5starhotels - SQL Injection

CVE-2008-5864—webappsphp24 dez 2008

SQL injection vulnerability in the Top Hotel (com_tophotelmodule) component 1.0 in the Hotel Booking Reservation System

23RISCO

Exploit-DB✓ VexDay Proof

Joomla! Component 5starhotels - SQL Injection

CVE-2008-5865—webappsphp24 dez 2008

SQL injection vulnerability in the com_hbssearch component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 f

23RISCO

Exploit-DB✓ VexDay Proof

Joomla! Component com_lowcosthotels - Blind SQL Injection

CVE-2008-5865—webappsphp23 dez 2008

SQL injection vulnerability in the com_hbssearch component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 f

23RISCO

Exploit-DB✓ VexDay Proof

Joomla! Component com_lowcosthotels - Blind SQL Injection

CVE-2008-5874—webappsphp23 dez 2008

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attack

23RISCO

Exploit-DB✓ VexDay Proof

Joomla! Component com_allhotels - Blind SQL Injection

CVE-2008-5875—webappsphp23 dez 2008

SQL injection vulnerability in the com_lowcosthotels component in the Hotel Booking Reservation System (aka HBS) for Joo

23RISCO

Exploit-DB✓ VexDay Proof

Mozilla Firefox 3.0.5 - location.hash Remote Crash

CVE-2009-2953—doswindows23 dez 2008

Mozilla Firefox 3.0.6 through 3.0.13, and 3.5.x, allows remote attackers to cause a denial of service (CPU consumption)

23RISCO

Exploit-DB✓ VexDay Proof

Joomla! Component com_lowcosthotels - Blind SQL Injection

CVE-2008-5864—webappsphp23 dez 2008

SQL injection vulnerability in the Top Hotel (com_tophotelmodule) component 1.0 in the Hotel Booking Reservation System

23RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.