Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

81.003exploits catalogados
37.620CVEs com exploração pública
24.695testados em laboratório
24.482 exploits
Exploit-DB
Microsoft Windows - 'srv2.sys' SMB Negotiate ProcessID Function Table Dereference (MS09-050)
CVE-2009-2532remotewindows17 ago 2010
Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process t
35RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - nt!NtCreateThread Race Condition with Invalid Code Segment (MS10-047)
CVE-2010-1888doswindows17 ago 2010
Race condition in the kernel in Microsoft Windows XP SP3 allows local users to gain privileges via vectors involving thr
23RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - Win32k!GreStretchBltInternal() Does Not Handle src == dest
CVE-2010-1887doswindows17 ago 2010
The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vist
23RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - KTM Invalid Free with Reused Transaction GUID (MS10-047)
CVE-2010-1889HIGHdoswindows17 ago 2010
Double free vulnerability in the kernel in Microsoft Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2, al
41RISCO
abrir
Exploit-DBVexDay Proof
Free Simple Software 1.0 - Remote File Inclusion
CVE-2010-4298webappsphp17 ago 2010
SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitr
23RISCO
abrir
Exploit-DB
Microsoft Windows - 'srv2.sys' SMB Negotiate ProcessID Function Table Dereference (MS09-050)
CVE-2009-3103remotewindows17 ago 2010
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window
60RISCO
abrir
Exploit-DBVexDay Proof
Free Simple Software 1.0 - Remote File Inclusion
CVE-2010-3307webappsphp17 ago 2010
Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 and earlier allow
23RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Internet Explorer 8 - 'toStaticHTML()' HTML Sanitization Bypass
CVE-2010-3324remotewindows16 ago 2010
The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Se
28RISCO
abrir
Exploit-DB
PHP-Fusion - Local File Inclusion
CVE-2010-4931webappsphp15 ago 2010
Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary
28RISCO
abrir
Exploit-DBVexDay Proof
Joomla! Component Weblinks - 'Itemid' SQL Injection
CVE-2010-4938webappsphp15 ago 2010
SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbit
23RISCO
abrir
Exploit-DBVexDay Proof
CA Advantage Ingres 2.6 - Multiple Buffer Overflow Vulnerabilities (PoC)
CVE-2007-3336doswindows14 ago 2010
Multiple "pointer overwrite" vulnerabilities in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple
23RISCO
abrir
Exploit-DBVexDay Proof
Adobe ColdFusion - Directory Traversal
CVE-2010-2861CRITICALsob ataqueransomwareremotemultiple14 ago 2010
Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow re
100RISCO
abrir
Exploit-DBVexDay Proof
Acrobat Acrobat - Font Parsing Integer Overflow
CVE-2010-2862doswindows14 ago 2010
Integer overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3, allows remote attackers to execute
28RISCO
abrir
Exploit-DB
MailForm 1.2 - Remote File Inclusion
CVE-2010-4939webappsphp13 ago 2010
PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP co
23RISCO
abrir
Exploit-DB
Get Tube - SQL Injection
CVE-2010-4934webappsphp13 ago 2010
SQL injection vulnerability in video.php in Get Tube 4.51 and earlier allows remote attackers to execute arbitrary SQL c
23RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP) (MS07-017) (Metasploit)
CVE-2007-0038remotewindows12 ago 2010
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attack
60RISCO
abrir
Exploit-DBVexDay Proof
Rock Band CMS 0.10 - 'news.php' Multiple SQL Injections (2)
CVE-2009-3252webappsphp12 ago 2010
Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL
23RISCO
abrir
Exploit-DB
Saurus CMS 4.7.0 - Remote File Inclusion
CVE-2010-4943webappsphp11 ago 2010
Multiple PHP remote file inclusion vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to execute arbitrary PHP c
23RISCO
abrir
Exploit-DB
clearBudget 0.9.8 - Remote File Inclusion
CVE-2010-4924webappsphp11 ago 2010
PHP remote file inclusion vulnerability in logic/controller.class.php in clearBudget 0.9.8 allows remote attackers to ex
23RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Msxml2.XMLHTTP.3.0 - Response Handling Memory Corruption (MS10-051)
CVE-2010-2561doswindows10 ago 2010
Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to ex
28RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - Tracing Registry Key ACL Privilege Escalation
CVE-2010-2554HIGHlocalwindows10 ago 2010
The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Wind
41RISCO
abrir
Exploit-DBVexDay Proof
Nasim Guest Book - 'page' Cross-Site Scripting
CVE-2009-4869webappsphp10 ago 2010
Cross-site scripting (XSS) vulnerability in index.php in Nasim Guest Book 1.2 allows remote attackers to inject arbitrar
23RISCO
abrir
Exploit-DB
Microsoft Windows - 'SfnLOGONNOTIFY' Privilege Escalation (MS10-048)
CVE-2010-1894doswindows10 ago 2010
The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not p
23RISCO
abrir
Exploit-DBVexDay Proof
Joomla! Component Teams - Multiple Blind SQL Injections
CVE-2010-4941webappsphp10 ago 2010
SQL injection vulnerability in the Teams (com_teams) component 1_1028_100809_1711 for Joomla! allows remote attackers to
23RISCO
abrir
Exploit-DBVexDay Proof
Microsoft - SMB Server Trans2 Zero Size Pool Alloc (MS10-054)
CVE-2010-2550doswindows10 ago 2010
The SMB Server in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2
60RISCO
abrir
Exploit-DBVexDay Proof
Joomla! Component Amblog 1.0 - Multiple SQL Injections
CVE-2010-4937webappsphp10 ago 2010
Multiple SQL injection vulnerabilities in the Amblog (com_amblog) component 1.0 for Joomla! allow remote attackers to ex
23RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - CreateWindow Function Callback (MS10-048)
CVE-2010-1897doswindows10 ago 2010
The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vist
23RISCO
abrir
Exploit-DBVexDay Proof
Allinta CMS 22.07.2010 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities
CVE-2010-4922webappsasp09 ago 2010
Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL command
23RISCO
abrir
Exploit-DBVexDay Proof
Fat Player 0.6b - '.WAV' File Processing Buffer Overflow (SEH)
CVE-2009-4962localwindows09 ago 2010
Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a
50RISCO
abrir
Exploit-DBVexDay Proof
Linux Kernel 2.6.33.3 - SCTP INIT Remote Denial of Service
CVE-2010-1173doslinux09 ago 2010
The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is e
28RISCO
abrir
anteriorpágina 359 / 817próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.