Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.164exploits catalogados
40.551CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.076VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.165 exploits
Exploit-DB✓ VexDay Proof
Oracle Demantra 12.2.1 - Database Credentials Disclosure
CVE-2013-5795—webappswindows01 mar 2014
Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle Demantra 12.2.1 - SQL Injection
CVE-2014-0372—webappswindows01 mar 2014
Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0
23RISCO
abrir ↗
Exploit-DB
SpagoBI 4.0 - Privilege Escalation
CVE-2013-6231—webappsmultiple28 fev 2014
SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script
23RISCO
abrir ↗
Exploit-DB
WordPress Plugin VideoWhisper 4.27.3 - Multiple Vulnerabilities
CVE-2014-1908—webappsphp28 fev 2014
The error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3) ls/rtmp.inc.php in the VideoWhisper Li
23RISCO
abrir ↗
Exploit-DB
WordPress Plugin VideoWhisper 4.27.3 - Multiple Vulnerabilities
CVE-2014-1905—webappsphp28 fev 2014
Unrestricted file upload vulnerability in ls/vw_snapshots.php in the VideoWhisper Live Streaming Integration plugin befo
23RISCO
abrir ↗
Exploit-DB
Plex Media Server 0.9.9.2.374-aa23a69 - Multiple Vulnerabilities
CVE-2014-9304—webappsmultiple28 fev 2014
Plex Media Server before 0.9.9.3 allows remote attackers to bypass the web server whitelist, conduct SSRF attacks, and e
23RISCO
abrir ↗
Metasploit300
Oracle Demantra Database Credentials Leak
CVE-2013-5880—28 fev 2014
Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.
50RISCO
abrir ↗
Metasploit300
Oracle Demantra Database Credentials Leak
CVE-2013-5795—28 fev 2014
Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0
50RISCO
abrir ↗
Metasploit300
Oracle Demantra Arbitrary File Retrieval with Authentication Bypass
CVE-2013-5877—28 fev 2014
Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0
50RISCO
abrir ↗
Metasploit300
Oracle Demantra Arbitrary File Retrieval with Authentication Bypass
CVE-2013-5880—28 fev 2014
Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
GE Proficy CIMPLICITY - 'gefebt.exe' Remote Code Execution (Metasploit)
CVE-2014-0750—remotewindows28 fev 2014
GE Proficy HMI/SCADA Path Traversal
68RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
VCDGear 3.50 - '.cue' Local Stack Buffer Overflow
CVE-2007-2568—localwindows28 fev 2014
Multiple stack-based buffer overflows in VCDGear 3.55 allow user-assisted remote attackers to execute arbitrary code via
23RISCO
abrir ↗
Metasploit300
MantisBT Admin SQL Injection Arbitrary File Read
CVE-2014-2238—28 fev 2014
SQL injection vulnerability in the manage configuration page (adm_config_report.php) in MantisBT 1.2.13 through 1.2.16 a
23RISCO
abrir ↗
Exploit-DB
Webuzo 2.1.3 - Multiple Vulnerabilities
CVE-2013-6043—webappsphp28 fev 2014
The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attem
23RISCO
abrir ↗
Exploit-DB
Plex Media Server 0.9.9.2.374-aa23a69 - Multiple Vulnerabilities
CVE-2014-9181—webappsmultiple28 fev 2014
Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote attackers to read arbitrar
23RISCO
abrir ↗
Exploit-DB
WordPress Plugin VideoWhisper 4.27.3 - Multiple Vulnerabilities
CVE-2014-1907—webappsphp28 fev 2014
Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for Wor
28RISCO
abrir ↗
Exploit-DB
Webuzo 2.1.3 - Multiple Vulnerabilities
CVE-2013-6041—webappsphp28 fev 2014
index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharact
23RISCO
abrir ↗
Exploit-DB
Webuzo 2.1.3 - Multiple Vulnerabilities
CVE-2013-6042—webappsphp28 fev 2014
Cross-site scripting (XSS) vulnerability in filemanager/login.php in the File Manager module in Softaculous Webuzo befor
23RISCO
abrir ↗
Exploit-DB
WordPress Plugin VideoWhisper 4.27.3 - Multiple Vulnerabilities
CVE-2014-1906—webappsphp28 fev 2014
Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5
23RISCO
abrir ↗
Exploit-DB
GDL 4.2 - Multiple Vulnerabilities
CVE-2014-100031—webappsphp27 fev 2014
Multiple SQL injection vulnerabilities in Ganesha Digital Library (GDL) 4.2 allow remote attackers to execute arbitrary
23RISCO
abrir ↗
Exploit-DB
GDL 4.2 - Multiple Vulnerabilities
CVE-2014-100030—webappsphp27 fev 2014
Cross-site scripting (XSS) vulnerability in module/search/function.php in Ganesha Digital Library (GDL) 4.2 allows remot
23RISCO
abrir ↗
Exploit-DB
GDL 4.2 - Multiple Vulnerabilities
CVE-2014-100029—webappsphp27 fev 2014
Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library (GDL) 4.2 allow remote atta
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
POSH 3.1.x - 'addtoapplication.php' SQL Injection
CVE-2014-2211—webappsphp26 fev 2014
SQL injection vulnerability in portal/addtoapplication.php in POSH (aka Posh portal or Portaneo) 3.0 before 3.3.0 allows
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Symantec Endpoint Protection Manager - Remote Command Execution (Metasploit)
CVE-2013-5014—remotewindows26 fev 2014
The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.40
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Symantec Endpoint Protection Manager - Remote Command Execution (Metasploit)
CVE-2013-5015—remotewindows26 fev 2014
SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.74
43RISCO
abrir ↗
Metasploit300
JIRA Issues Collector Directory Traversal
CVE-2014-2314—26 fev 2014
Directory traversal vulnerability in the Issue Collector plugin in Atlassian JIRA before 6.0.4 allows remote attackers t
43RISCO
abrir ↗
Exploit-DB
Piwigo 2.6.1 - Cross-Site Request Forgery
CVE-2014-4613—webappsphp26 fev 2014
Cross-site request forgery (CSRF) vulnerability in the administration panel in Piwigo before 2.6.2 allows remote attacke
23RISCO
abrir ↗
Exploit-DB
Technicolor TC7200 - Credentials Disclosure
CVE-2014-1677—webappshardware25 fev 2014
Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information.
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Sendy 1.1.8.4 - SQL Injection
CVE-2014-100012—webappsphp25 fev 2014
SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i
23RISCO
abrir ↗
Exploit-DB
Python - 'socket.recvfrom_into()' Remote Buffer Overflow
CVE-2014-1912—remotelinux24 fev 2014
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.
28RISCO
abrir ↗
← anteriorpágina 1235 / 2.906próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.