Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

86.991exploits catalogados
40.452CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4.561Metasploit 3.537✓ só verificadosrecentespopularesrisco
86.991 exploits
Exploit-DB
Gogs - 'users'/'repos' '?q' SQL Injection
CVE-2014-8682—webappsmultiple14 nov 2014
Multiple SQL injection vulnerabilities in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.x before 0.5.6.1105 Beta allow r
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - OLE Package Manager Code Execution (via Python) (MS14-064) (Metasploit)
CVE-2014-4114HIGHsob ataquelocalwindows14 nov 2014
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2
100RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - OLE Package Manager Code Execution (via Python) (MS14-064) (Metasploit)
CVE-2014-6352HIGHsob ataquelocalwindows14 nov 2014
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2
100RISCO
abrir ↗
Exploit-DB
MyBB 1.8.x - Multiple Vulnerabilities
CVE-2014-9240—webappsphp13 nov 2014
SQL injection vulnerability in member.php in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allows remote attackers to ex
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Digi Online Examination System 2.0 - Unrestricted Arbitrary File Upload
CVE-2014-8997—webappsphp13 nov 2014
Unrestricted file upload vulnerability in the Photo functionality in DigitalVidhya Digi Online Examination System 2.0 al
23RISCO
abrir ↗
Exploit-DB
Piwigo 2.6.0 - 'picture.php?rate' SQL Injection
CVE-2014-9115—webappsphp13 nov 2014
SQL injection vulnerability in the rate_picture function in include/functions_rate.inc.php in Piwigo before 2.5.5, 2.6.x
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 11 - OLE Automation Array Remote Code Execution (1)
CVE-2014-6332HIGHsob ataqueremotewindows13 nov 2014
OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows
100RISCO
abrir ↗
Exploit-DB
F5 BIG-IP 10.1.0 - Directory Traversal
CVE-2014-8727—webappsjsp13 nov 2014
Multiple directory traversal vulnerabilities in F5 BIG-IP before 10.2.2 allow local users with the "Resource Administrat
23RISCO
abrir ↗
Exploit-DB
Microsoft Internet Explorer < 11 - OLE Automation Array Remote Code Execution (Metasploit)
CVE-2014-6332HIGHsob ataqueremotewindows13 nov 2014
OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows
100RISCO
abrir ↗
Exploit-DB
MyBB 1.8.x - Multiple Vulnerabilities
CVE-2014-9241—webappsphp13 nov 2014
Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allow remote attack
23RISCO
abrir ↗
Exploit-DB
Proticaret E-Commerce Script 3.0 - SQL Injection (1)
CVE-2014-9237—webappsmultiple13 nov 2014
SQL injection vulnerability in Proticaret E-Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via a
23RISCO
abrir ↗
Metasploit400
MS14-064 Microsoft Internet Explorer Windows OLE Automation Array Remote Code Execution
CVE-2014-6332HIGHsob ataque13 nov 2014
OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows
100RISCO
abrir ↗
Metasploit600
MS14-064 Microsoft Windows OLE Package Manager Code Execution Through Python
CVE-2014-6352HIGHsob ataque12 nov 2014
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2
100RISCO
abrir ↗
Exploit-DB
Microsoft Office 2007/2010 - OLE Arbitrary Command Execution
CVE-2014-4114HIGHsob ataquelocalwindows12 nov 2014
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2
100RISCO
abrir ↗
Exploit-DB
Microsoft Office 2007/2010 - OLE Arbitrary Command Execution
CVE-2014-6352HIGHsob ataquelocalwindows12 nov 2014
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2
100RISCO
abrir ↗
Exploit-DB
WordPress Plugin SupportEzzy Ticket System 1.2.5 - Persistent Cross-Site Scripting
CVE-2014-9179—webappsphp12 nov 2014
Cross-site scripting (XSS) vulnerability in the SupportEzzy Ticket System plugin 1.2.5 for WordPress allows remote authe
23RISCO
abrir ↗
Exploit-DB
Subex Fms 7.4 - SQL Injection
CVE-2014-8728—webappsmultiple11 nov 2014
SQL injection vulnerability in the login page (login/login) in Subex ROC Fraud Management (aka Fraud Management System a
23RISCO
abrir ↗
Metasploit600
WordPress Photo Gallery Unrestricted File Upload
CVE-2014-9312—11 nov 2014
Unrestricted File Upload vulnerability in Photo Gallery 1.2.5.
50RISCO
abrir ↗
Metasploit400
Adobe Flash Player UncompressViaZlibVariant Uninitialized Memory
CVE-2014-8440—11 nov 2014
Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on
60RISCO
abrir ↗
Metasploit200
MS14-070 Windows tcpip!SetAddrOptions NULL Pointer Dereference
CVE-2014-4076—11 nov 2014
Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2)
43RISCO
abrir ↗
Exploit-DB
WordPress Plugin Photo Gallery 1.2.5 - Unrestricted Arbitrary File Upload
CVE-2014-9312—webappsphp11 nov 2014
Unrestricted File Upload vulnerability in Photo Gallery 1.2.5.
50RISCO
abrir ↗
Exploit-DB
PHP-Fusion 7.02.07 - SQL Injection
CVE-2014-8596—webappsphp10 nov 2014
Multiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to execute arbitrary SQL c
23RISCO
abrir ↗
Exploit-DB
WordPress Plugin / Joomla! Component XCloner - Multiple Vulnerabilities
CVE-2014-8606—webappsphp10 nov 2014
Directory traversal vulnerability in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote administ
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpSound Music Sharing Platform 1.0.5 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2014-8954—webappsphp10 nov 2014
Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web scr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
vldPersonals 2.7 - Multiple Vulnerabilities
CVE-2014-9004—webappsphp10 nov 2014
Cross-site scripting (XSS) vulnerability in vldPersonals before 2.7.1 allows remote attackers to inject arbitrary web sc
23RISCO
abrir ↗
Exploit-DB
WordPress Plugin / Joomla! Component XCloner - Multiple Vulnerabilities
CVE-2014-8603—webappsphp10 nov 2014
cloner.functions.php in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote administrators to exe
23RISCO
abrir ↗
Exploit-DB
WordPress Plugin / Joomla! Component XCloner - Multiple Vulnerabilities
CVE-2014-8605—webappsphp10 nov 2014
The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! stores database backup files with predictable names under t
23RISCO
abrir ↗
Exploit-DB
WordPress Plugin / Joomla! Component XCloner - Multiple Vulnerabilities
CVE-2014-8604—webappsphp10 nov 2014
The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! returns the MySQL password in cleartext to a text box in th
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
vldPersonals 2.7 - Multiple Vulnerabilities
CVE-2014-9005—webappsphp10 nov 2014
Multiple SQL injection vulnerabilities in vldPersonals before 2.7.1 allow remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗
Exploit-DB
ManageEngine OpManager / Social IT Plus / IT360 - Multiple Vulnerabilities
CVE-2014-7866—webappsjsp10 nov 2014
Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) through 11.4, IT360 10.3 and
45RISCO
abrir ↗
← anteriorpágina 1199 / 2.900próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.