Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

86.991exploits catalogados
40.452CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4.561Metasploit 3.537✓ só verificadosrecentespopularesrisco
86.991 exploits
Exploit-DB✓ VexDay Proof
WordPress Plugin WP Symposium 14.11 - Arbitrary File Upload (Metasploit)
CVE-2014-10021—remotephp13 jan 2015
Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remote
50RISCO
abrir ↗
Exploit-DB
Gecko CMS 2.3 - Multiple Vulnerabilities
CVE-2015-1422—webappsphp13 jan 2015
Multiple cross-site scripting (XSS) vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote attackers to inject arbitrary
23RISCO
abrir ↗
Exploit-DB
Gecko CMS 2.3 - Multiple Vulnerabilities
CVE-2015-1423—webappsphp13 jan 2015
Multiple SQL injection vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote administrators to execute arbitrary SQL com
23RISCO
abrir ↗
VulnCheck XDB
local
CVE-2014-3153HIGHsob ataque12 jan 2015
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two diff
98RISCO
abrir ↗
GitHub PoC★ 18
cve2014-3153 exploit for ubuntu x86
CVE-2014-3153HIGHsob ataque12 jan 2015
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two diff
98RISCO
abrir ↗
Exploit-DB
D-Link DSL-2730B Modem - 'Lancfg2get.cgi Persistent Cross-Site Scripting
CVE-2015-1028—webappshardware11 jan 2015
Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2730B router (rev C1) with firmware GE_1.01 allow remo
23RISCO
abrir ↗
Exploit-DB
D-Link DSL-2730B Modem - Cross-Site Scripting Injection Stored Wlsecrefresh.wl & Wlsecurity.wl
CVE-2015-1028—webappshardware11 jan 2015
Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2730B router (rev C1) with firmware GE_1.01 allow remo
23RISCO
abrir ↗
Exploit-DB
D-Link DSL-2730B Modem - Cross-Site Scripting Injection Stored DnsProxy.cmd
CVE-2015-1028—webappshardware11 jan 2015
Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2730B router (rev C1) with firmware GE_1.01 allow remo
23RISCO
abrir ↗
Exploit-DB
Apple Mac OSX 10.9.x - sysmond XPC Privilege Escalation
CVE-2014-8835—localosx10 jan 2015
The xpc_data_get_bytes function in libxpc in Apple OS X before 10.10.2 does not verify that a dictionary's Attributes ke
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Pandora FMS 3.1 - Authentication Bypass / Arbitrary File Upload (Metasploit)
CVE-2010-4279—remotephp08 jan 2015
The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which al
50RISCO
abrir ↗
Metasploit600
WordPress WP EasyCart Unrestricted File Upload
CVE-2014-9308—08 jan 2015
Unrestricted file upload vulnerability in inc/amfphp/administration/banneruploaderscript.php in the WP EasyCart (aka Wor
50RISCO
abrir ↗
Exploit-DB
WordPress Plugin Shopping Cart 3.0.4 - Unrestricted Arbitrary File Upload
CVE-2014-9308—webappsphp08 jan 2015
Unrestricted file upload vulnerability in inc/amfphp/administration/banneruploaderscript.php in the WP EasyCart (aka Wor
50RISCO
abrir ↗
Exploit-DB
Microweber CMS 0.95 - SQL Injection
CVE-2014-9464—webappsphp07 jan 2015
SQL injection vulnerability in Category.php in Microweber CMS 0.95 before 20141209 allows remote attackers to execute ar
23RISCO
abrir ↗
Exploit-DB
Sefrengo CMS 1.6.0 - SQL Injection
CVE-2015-0919—webappsphp07 jan 2015
Multiple SQL injection vulnerabilities in the administrative backend in Sefrengo before 1.6.1 allow remote administrator
23RISCO
abrir ↗
Exploit-DB
Pirelli ADSL2/2+ Wireless Router P.DGA4001N - Information Disclosure
CVE-2015-0554—webappshardware07 jan 2015
The ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG_TEF_SP_4.06L.6 does not properly rest
50RISCO
abrir ↗
Exploit-DB
AdaptCMS 3.0.3 - Multiple Vulnerabilities
CVE-2015-1060—webappsphp06 jan 2015
Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect
23RISCO
abrir ↗
Exploit-DB
Nexus 5 Android 5.0 - Local Privilege Escalation
CVE-2014-4322—localandroid06 jan 2015
drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Andr
23RISCO
abrir ↗
Exploit-DB
AdaptCMS 3.0.3 - Multiple Vulnerabilities
CVE-2015-1058—webappsphp06 jan 2015
Multiple cross-site scripting (XSS) vulnerabilities in AdaptCMS 3.0.3 allow remote attackers to inject arbitrary web scr
23RISCO
abrir ↗
Metasploit300
McAfee ePolicy Orchestrator Authenticated XXE Credentials Exposure
CVE-2015-0921—06 jan 2015
XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x
23RISCO
abrir ↗
Metasploit300
McAfee ePolicy Orchestrator Authenticated XXE Credentials Exposure
CVE-2015-0922—06 jan 2015
McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 uses the same secret key across different customers'
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BulletProof FTP Client - BPS Buffer Overflow (Metasploit)
CVE-2014-2973—localwindows06 jan 2015
35RISCO
abrir ↗
Exploit-DB
AdaptCMS 3.0.3 - Multiple Vulnerabilities
CVE-2015-1059—webappsphp06 jan 2015
Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute
23RISCO
abrir ↗
Exploit-DB
SkinCrafter3 vs2005 3.8.1.0 - Multiple ActiveX Buffer Overflows
CVE-2012-2271—remotewindows05 jan 2015
Buffer overflow in the InitLicenKeys function in a certain ActiveX control in SkinCrafter3_vs2005.dll in SkinCrafter 3.0
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OP5 5.3.5/5.4.0/5.4.2/5.5.0/5.5.1 - 'welcome' Remote Command Execution (Metasploit)
CVE-2012-0262—webappsmultiple05 jan 2015
op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers
60RISCO
abrir ↗
Metasploit600
ASUS infosvr Auth Bypass Command Execution
CVE-2014-9583—04 jan 2015
common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC
60RISCO
abrir ↗
Exploit-DB
Crea8Social 2.0 - Cross-Site Scripting Change Interface
CVE-2015-1054—webappsphp04 jan 2015
Cross-site scripting (XSS) vulnerability in the Games feature in Crea8Social 2.0 allows remote authenticated users to in
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ASUSWRT 3.0.0.4.376_1071 - LAN Backdoor Command Execution
CVE-2014-9583—remotehardware04 jan 2015
common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC
60RISCO
abrir ↗
Exploit-DB
PhotoPost < 4.85 - Multiple Vulnerabilities
CVE-2005-0274—webappsphp03 jan 2015
Multiple cross-site scripting (XSS) vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
e107 2 Bootstrap CMS - Cross-Site Scripting
CVE-2015-1057—webappsphp03 jan 2015
Cross-site scripting (XSS) vulnerability in usersettings.php in e107 2.0.0 allows remote attackers to inject arbitrary w
23RISCO
abrir ↗
Exploit-DB
PhotoPost < 4.85 - Multiple Vulnerabilities
CVE-2005-0273—webappsphp03 jan 2015
Multiple SQL injection vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to execute arb
23RISCO
abrir ↗
← anteriorpágina 1193 / 2.900próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.