Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

86.991exploits catalogados
40.452CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4.561Metasploit 3.537✓ só verificadosrecentespopularesrisco
86.991 exploits
VulnCheck XDB
local
CVE-2014-3153HIGHsob ataque13 set 2014
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two diff
98RISCO
abrir ↗
Metasploit600
Phpwiki Ploticus Remote Code Execution
CVE-2014-5519—11 set 2014
The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a dev
50RISCO
abrir ↗
Metasploit600
Rejetto HttpFileServer Remote Command Execution
CVE-2014-6287CRITICALsob ataque11 set 2014
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a
100RISCO
abrir ↗
Metasploit300
MS14-052 Microsoft Internet Explorer XMLDOM Filename Disclosure
CVE-2013-7331MEDIUMsob ataque09 set 2014
The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the exist
70RISCO
abrir ↗
Metasploit300
HP Network Node Manager I PMD Buffer Overflow
CVE-2014-2624—09 set 2014
Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute ar
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ManageEngine Desktop Central StatusUpdate - Arbitrary File Upload (Metasploit)
CVE-2014-5006—remotewindows09 set 2014
Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ManageEngine Desktop Central StatusUpdate - Arbitrary File Upload (Metasploit)
CVE-2014-5005—remotewindows09 set 2014
Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers
60RISCO
abrir ↗
Exploit-DB
Mpay24 PrestaShop Payment Module 1.5 - Multiple Vulnerabilities
CVE-2014-2009—webappsphp08 set 2014
The mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to obtain credentials, the installation path
23RISCO
abrir ↗
Exploit-DB
phpMyFAQ 2.8.x - Multiple Vulnerabilities
CVE-2014-6045—webappsphp08 set 2014
SQL injection vulnerability in phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to exec
23RISCO
abrir ↗
Exploit-DB
phpMyFAQ 2.8.x - Multiple Vulnerabilities
CVE-2014-6046—webappsphp08 set 2014
Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyFAQ before 2.8.13 allow remote attackers to hijack th
23RISCO
abrir ↗
Exploit-DB
phpMyFAQ 2.8.x - Multiple Vulnerabilities
CVE-2014-6048—webappsphp08 set 2014
phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request.
23RISCO
abrir ↗
Exploit-DB
Mpay24 PrestaShop Payment Module 1.5 - Multiple Vulnerabilities
CVE-2014-2008—webappsphp08 set 2014
SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attacker
23RISCO
abrir ↗
Exploit-DB
phpMyFAQ 2.8.x - Multiple Vulnerabilities
CVE-2014-6050—webappsphp08 set 2014
phpMyFAQ before 2.8.13 allows remote attackers to bypass the CAPTCHA protection mechanism by replaying the request.
23RISCO
abrir ↗
Exploit-DB
phpMyFAQ 2.8.x - Multiple Vulnerabilities
CVE-2014-6047—webappsphp08 set 2014
phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by lever
23RISCO
abrir ↗
Exploit-DB
phpMyFAQ 2.8.x - Multiple Vulnerabilities
CVE-2014-6049—webappsphp08 set 2014
phpMyFAQ before 2.8.13 allows remote authenticated users with admin privileges to bypass authorization via a crafted ins
23RISCO
abrir ↗
Exploit-DB
PhpOnlineChat 3.0 - Cross-Site Scripting
CVE-2014-100017—webappsphp07 set 2014
Cross-site scripting (XSS) vulnerability in canned_opr.php in PhpOnlineChat 3.0 allows remote attackers to inject arbitr
23RISCO
abrir ↗
Exploit-DB
LoadedCommerce7 - Systemic Query Factory
CVE-2014-5140—webappsphp07 set 2014
The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly ha
23RISCO
abrir ↗
GitHub PoC★ 15
Scans NTP servers for CVE-2013-5211 NTP DDOS amplification vulnerability.
CVE-2013-5211—07 set 2014
The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BulletProof FTP Client 2010 - Buffer Overflow (SEH)
CVE-2014-2973—doswindows05 set 2014
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox 9.0.1 / Thunderbird 3.1.20 - Information Disclosure
CVE-2014-1564—remotemultiple02 set 2014
Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize m
23RISCO
abrir ↗
Exploit-DB
Syslog LogAnalyzer 3.6.5 - Persistent Cross-Site Scripting
CVE-2014-6070—webappsmultiple02 set 2014
Multiple cross-site scripting (XSS) vulnerabilities in Adiscon LogAnalyzer before 3.6.6 allow remote attackers to inject
23RISCO
abrir ↗
Exploit-DB
WordPress Plugin Huge-IT Image Gallery 1.0.1 - (Authenticated) SQL Injection
CVE-2014-7153—webappsphp02 set 2014
SQL injection vulnerability in the editgallery function in admin/gallery_func.php in the Huge-IT Image Gallery plugin 1.
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mulitple WordPress Themes - 'admin-ajax.php?img' Arbitrary File Download
CVE-2014-9734—webappsphp01 set 2014
Directory traversal vulnerability in the Slider Revolution (revslider) plugin before 4.2 for WordPress allows remote att
28RISCO
abrir ↗
Exploit-DB
ManageEngine Desktop Central - Arbitrary File Upload / Remote Code Execution
CVE-2014-5005—webappsjsp01 set 2014
Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers
60RISCO
abrir ↗
Exploit-DB
ManageEngine Desktop Central - Arbitrary File Upload / Remote Code Execution
CVE-2014-5006—webappsjsp01 set 2014
Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Wing FTP Server - (Authenticated) Command Execution (Metasploit)
CVE-2015-4107—remotewindows01 set 2014
20RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mulitple WordPress Themes - 'admin-ajax.php?img' Arbitrary File Download
CVE-2015-1579—webappsphp01 set 2014
Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitra
43RISCO
abrir ↗
Exploit-DB
ManageEngine Desktop Central - Arbitrary File Upload / Remote Code Execution
CVE-2013-7390—webappsjsp01 set 2014
Unrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7.x and 8.0.0 before buil
60RISCO
abrir ↗
Exploit-DB
ManageEngine EventLog Analyzer - Multiple Vulnerabilities (1)
CVE-2014-6037—webappsjsp01 set 2014
Directory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8
60RISCO
abrir ↗
Exploit-DB
ManageEngine EventLog Analyzer - Multiple Vulnerabilities (1)
CVE-2014-6043—webappsjsp01 set 2014
ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database
28RISCO
abrir ↗
← anteriorpágina 1211 / 2.900próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.