Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

81.064exploits catalogados
37.667CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 24.044GitHub PoC 15.521VulnCheck XDB 9.080Nuclei 4.432Metasploit 3.505✓ só verificadosrecentespopularesrisco
24.482 exploits
Exploit-DB✓ VexDay Proof
ZipWrangler 1.20 - '.zip' File (SEH)
CVE-2010-1685—localwindows24 abr 2010
Stack-based buffer overflow in CursorArts ZipWrangler 1.20 allows user-assisted remote attackers to execute arbitrary co
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Openfoncier 2.00 - Local File Inclusion / Remote File Inclusion
CVE-2010-1948—webappsphp24 abr 2010
Directory traversal vulnerability in scr/soustab.php in openMairie Openfoncier 2.00, when register_globals is enabled, a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Openplanning 1.00 - Local File Inclusion / Remote File Inclusion
CVE-2010-1934—webappsphp24 abr 2010
Multiple PHP remote file inclusion vulnerabilities in openMairie openPlanning 1.00, when register_globals is enabled, al
23RISCO
abrir ↗
Exploit-DB
NKINFOWEB - SQL Injection
CVE-2010-1599—webappsphp23 abr 2010
SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary S
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache Tomcat 5.5.0 < 5.5.29 / 6.0.0 < 6.0.26 - Information Disclosure
CVE-2010-1157—remotemultiple22 abr 2010
Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostna
35RISCO
abrir ↗
Exploit-DB
Microsoft Windows XP/2000/2003 - 'win32k.sys' SfnLOGONNOTIFY Local kernel Denial of Service
CVE-2010-1735—doswindows22 abr 2010
The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local user
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache ActiveMQ 5.2/5.3 - Source Code Information Disclosure
CVE-2010-1587—remotemultiple22 abr 2010
The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenSSL - Remote Denial of Service
CVE-2010-0740—doslinux22 abr 2010
The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Cacti 0.8.7e - SQL Injection
CVE-2010-1431—webappsphp22 abr 2010
SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbit
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpGreetCards 3.7 - Cross-Site Scripting
CVE-2008-6848—webappsphp22 abr 2010
Cross-site scripting (XSS) vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to inject arbitrary w
23RISCO
abrir ↗
Exploit-DB
Microsoft Windows XP/2000/2003 - 'win32k.sys' SfnLOGONNOTIFY Local kernel Denial of Service
CVE-2010-1894—doswindows22 abr 2010
The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not p
23RISCO
abrir ↗
Exploit-DB
Microsoft Windows XP/2000/2003 - 'win32k.sys' SfnINSTRING Local kernel Denial of Service
CVE-2010-1734—doswindows22 abr 2010
The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AJ Matrix 3.1 - 'id' Multiple SQL Injections
CVE-2009-2779—webappsphp22 abr 2010
SQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
FlashCard 2.6.5 - 'id' Cross-Site Scripting
CVE-2010-1872—webappsphp22 abr 2010
Cross-site scripting (XSS) vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows remote attackers to inject a
23RISCO
abrir ↗
Exploit-DB
cms (id) 5.0 - SQL Injection
CVE-2009-2439—webappsphp22 abr 2010
Multiple SQL injection vulnerabilities in Web Development House Alibaba Clone allow remote attackers to execute arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AJ Shopping Cart 1.0 (maincatid) - SQL Injection
CVE-2010-1876—webappsphp22 abr 2010
SQL injection vulnerability in index.php in AJ Shopping Cart 1.0 allows remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
wb news (webmobo) 2.3.3 - Persistent Cross-Site Scripting
CVE-2010-1712—webappsphp21 abr 2010
Multiple cross-site scripting (XSS) vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component MMS Blog 2.3.0 - Local File Inclusion
CVE-2010-1491—webappsphp21 abr 2010
Directory traversal vulnerability in the MMS Blog (com_mmsblog) component 2.3.0 for Joomla! allows remote attackers to r
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component OrgChart 1.0.0 - Local File Inclusion
CVE-2010-1878—webappsphp21 abr 2010
Directory traversal vulnerability in the OrgChart (com_orgchart) component 1.0.0 for Joomla! allows remote attackers to
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Viscom Software Movie Player Pro SDK ActiveX 6.8 - Remote Buffer Overflow
CVE-2010-0356—remotewindows21 abr 2010
Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom So
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ZipGenius 6.3.1.2552 - 'zgtips.dll' Local Stack Buffer Overflow
CVE-2010-1597—localwindows21 abr 2010
Stack-based buffer overflow in zgtips.dll in ZipGenius 6.3.1.2552 allows user-assisted remote attackers to execute arbit
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component WMI 1.5.0 - Local File Inclusion
CVE-2010-1607—webappsphp21 abr 2010
Directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface (aka WMI or com_wmi) component 1.5.0
38RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache OFBiz - Multiple Cross-Site Scripting Vulnerabilities
CVE-2010-0432—webappsphp21 abr 2010
Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlie
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
CactuShop - User Invoices Persistent Cross-Site Scripting
CVE-2010-1486—webappsasp21 abr 2010
Multiple cross-site scripting (XSS) vulnerabilities in _invoice.asp in CactuShop before 6.155 allow remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JTM Reseller 1.9 Beta - SQL Injection
CVE-2010-1877—webappsphp20 abr 2010
SQL injection vulnerability in the JTM Reseller (com_jtm) component 1.9 Beta for Joomla! allows remote attackers to exec
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MIT Kerberos 5 - 'src/kdc/do_tgs_req.c' Ticket Renewal Double-Free Memory Corruption
CVE-2010-1320—remotelinux20 abr 2010
Double free vulnerability in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7.x and 1.
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Openregistrecil 1.02 - Local File Inclusion / Remote File Inclusion
CVE-2010-1946—webappsphp20 abr 2010
Multiple PHP remote file inclusion vulnerabilities in openMairie Openregistrecil 1.02, when register_globals is enabled,
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Online News Paper Manager 1.0 - 'cid' SQL Injection
CVE-2010-1950—webappsphp20 abr 2010
SQL injection vulnerability in the Online News Paper Manager (com_jnewspaper) component 1.0 for Joomla!, when magic_quot
23RISCO
abrir ↗
Exploit-DB
MusicBox 3.3 - SQL Injection
CVE-2010-1499—webappsphp20 abr 2010
SQL injection vulnerability in genre_artists.php in MusicBox 3.3 allows remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Online News Paper Manager 1.0 - 'cid' SQL Injection
CVE-2010-1949—webappsphp20 abr 2010
SQL injection vulnerability in the Online News Paper Manager (com_jnewspaper) component 1.0 for Joomla! allows remote at
23RISCO
abrir ↗
← anteriorpágina 386 / 817próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.