Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

81.003exploits catalogados
37.620CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 24.011GitHub PoC 15.501VulnCheck XDB 9.077Nuclei 4.427Metasploit 3.505✓ só verificadosrecentespopularesrisco
24.482 exploits
Exploit-DB✓ VexDay Proof
Datetopia Buy Dating Site - Cross-Site Scripting
CVE-2009-3355—webappsphp10 set 2010
Cross-site scripting (XSS) vulnerability in profile.php in Datetopia Buy Dating Site 1.0 allows remote attackers to inje
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Jphone 1.0 Alpha 3 - Local File Inclusion
CVE-2010-3426—webappsphp10 set 2010
Directory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3 for Joomla! allows remo
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Excel RTD - Memory Corruption
CVE-2010-1247—localwindows10 set 2010
Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Ex
28RISCO
abrir ↗
Exploit-DB
symphony 2.0.7 - Multiple Vulnerabilities
CVE-2010-3457—webappsphp10 set 2010
Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arb
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Webkit (Apple Safari < 4.1.2/5.0.2 / Google Chrome < 5.0.375.125) - Memory Corruption
CVE-2010-1813—doswindows10 set 2010
WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a
23RISCO
abrir ↗
Exploit-DB
symphony 2.0.7 - Multiple Vulnerabilities
CVE-2010-3458—webappsphp10 set 2010
SQL injection vulnerability in lib/toolkit/events/event.section.php in Symphony CMS 2.0.7 and 2.1.1 allows remote attack
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox 3.6.3 - XSLT Sort Remote Code Execution
CVE-2010-1199—doswindows09 set 2010
Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
festos CMS 2.3b - Multiple Vulnerabilities
CVE-2010-4893—webappsphp09 set 2010
Cross-site scripting (XSS) vulnerability in foodvendors.php in FestOS 2.3b allows remote attackers to inject arbitrary w
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ES Simple Download 1.0. - Local File Inclusion
CVE-2010-3456—webappsphp09 set 2010
Directory traversal vulnerability in download.php in EnergyScripts (ES) Simple Download 1.0 allows remote attackers to r
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Visio 2002 - '.DXF' Local Stack Overflow
CVE-2010-1681—localwindows08 set 2010
Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to ex
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
weborf 0.12.2 - Directory Traversal
CVE-2010-3306—remotelinux07 set 2010
Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
1024 CMS 2.1.1 - Blind SQL Injection
CVE-2010-1093—webappsphp07 set 2010
SQL injection vulnerability in rss.php in 1024 CMS 2.1.1, when magic_quotes_gpc is disabled, allows remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ColdCalendar 2.06 - SQL Injection
CVE-2010-4910—webappswindows07 set 2010
SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ZenPhoto 1.3 - '/zp-core/admin.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2010-4907—webappsphp07 set 2010
Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote attackers to inject arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ColdBookmarks 1.22 - SQL Injection
CVE-2010-4915—webappswindows07 set 2010
SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Internet Download Accelerator 5.8 - Remote Buffer Overflow (PoC)
CVE-2007-3162—doswindows07 set 2010
Buffer overflow in the NotSafe function in the idaiehlp ActiveX control in idaiehlp.dll 1.9.1.74 in Internet Download Ac
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ZenPhoto 1.3 - '/zp-core/full-image.php?a' SQL Injection
CVE-2010-4906—webappsphp07 set 2010
SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote attackers to execute arb
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ColdUserGroup 1.06 - Blind SQL Injection
CVE-2010-4916—webappswindows07 set 2010
Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ColdUserGroup 1.06 - Blind SQL Injection
CVE-2010-4913—webappswindows07 set 2010
Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'webappmon.exe execvp_nc' Remote Code Execution
CVE-2010-2703—doswindows06 set 2010
Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM)
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Micronetsoft RV Dealer Website - SQL Injection
CVE-2010-4919—webappsasp06 set 2010
SQL injection vulnerability in detail.asp in Micronetsoft RV Dealer Website 1.0 allows remote attackers to execute arbit
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Aardvertiser 2.1 - Blind SQL Injection
CVE-2010-4904—webappsphp06 set 2010
SQL injection vulnerability in the Aardvertiser (com_aardvertiser) component 2.1 and 2.1.1 for Joomla! allows remote att
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Micronetsoft Rental Property Management Website - SQL Injection
CVE-2010-4920—webappsasp06 set 2010
SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 7/8 - CSS Handling Cross Domain Information Disclosure
CVE-2010-3325—doswindows06 set 2010
Microsoft Internet Explorer 6 through 8 does not properly handle unspecified special characters in Cascading Style Sheet
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Horde Application Framework 3.3.8 - 'icon_browser.php' Cross-Site Scripting
CVE-2010-3077—webappsphp06 set 2010
Cross-site scripting (XSS) vulnerability in util/icon_browser.php in the Horde Application Framework before 3.3.9 allows
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MySource Matrix - 'char_map.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2010-4901—webappsphp06 set 2010
Multiple cross-site scripting (XSS) vulnerabilities in char_map.php in MySource Matrix 3.28.3 allow remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft MPEG Layer-3 - Remote Command Execution
CVE-2010-0480—remotewindows05 set 2010
Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Se
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Softbiz Article Directory Script - 'sbiz_id' Blind SQL Injection
CVE-2010-4905—webappsphp05 set 2010
SQL injection vulnerability in article_details.php in Softbiz Article Directory Script allows remote attackers to execut
23RISCO
abrir ↗
Exploit-DB
Joomla! Component iJoomla! Magazine 3.0.1 - Remote File Inclusion
CVE-2010-4918—webappsphp05 set 2010
PHP remote file inclusion vulnerability in iJoomla Magazine (com_magazine) component 3.0.1 for Joomla! allows remote att
23RISCO
abrir ↗
Exploit-DB
Joomla! Component Gantry 3.0.10 - Blind SQL Injection
CVE-2010-4898—webappsphp05 set 2010
SQL injection vulnerability in the Gantry (com_gantry) component 3.0.10 for Joomla! allows remote attackers to execute a
23RISCO
abrir ↗
← anteriorpágina 354 / 817próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.