Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.165exploits catalogados
40.552CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.077VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.166 exploits
Exploit-DB
ownCloud 6.0.0a - Multiple Vulnerabilities
CVE-2014-1665—webappsphp05 fev 2014
Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary
23RISCO
abrir ↗
Exploit-DB
D-Link DIR-100 - Multiple Vulnerabilities
CVE-2013-7051—webappshardware05 fev 2014
D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Skybluecanvas CMS - Remote Code Execution (Metasploit)
CVE-2014-1683—remotelinux05 fev 2014
The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248
50RISCO
abrir ↗
Exploit-DB
VideoLAN VLC Media Player 2.1.2 - '.asf' Crash (PoC)
CVE-2014-1684—dosmultiple05 fev 2014
The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Playe
23RISCO
abrir ↗
Exploit-DB
D-Link DIR-100 - Multiple Vulnerabilities
CVE-2013-7053—webappshardware05 fev 2014
D-Link DIR-100 4.03B07: cli.cgi CSRF
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache Struts - Developer Mode OGNL Execution (Metasploit)
CVE-2012-0394—remotejava05 fev 2014
The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers
60RISCO
abrir ↗
Exploit-DB
D-Link DIR-100 - Multiple Vulnerabilities
CVE-2013-7052—webappshardware05 fev 2014
D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script
28RISCO
abrir ↗
Metasploit300
Publish-It PUI Buffer Overflow (SEH)
CVE-2014-0980—05 fev 2014
Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI f
50RISCO
abrir ↗
Exploit-DB
TopicsViewer 3.0 Beta 1 - Multiple Vulnerabilities
CVE-2014-10023—webappsphp05 fev 2014
Multiple SQL injection vulnerabilities in TopicsViewer 3.0 Beta 1 allow remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗
Metasploit600
Array Networks vAPV and vxAG Private Key Privilege Escalation Code Execution
CVE-2014-125121CRITICAL03 fev 2014
Array Networks vAPV and vxAG Default Credential Privilege Escalation
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Seowon Intech WiMAX SWC-9100 Router - '/cgi-bin/reboot.cgi' Remote Reboot (Denial of Service)
CVE-2013-7183—doscgi03 fev 2014
cgi-bin/reboot.cgi on Seowon Intech SWC-9100 routers allows remote attackers to (1) cause a denial of service (reboot) v
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Seowon Intech WiMAX SWC-9100 Router - '/cgi-bin/diagnostic.cgi?ping_ipaddr' Remote Code Execution
CVE-2013-7179—remotecgi03 fev 2014
The ping functionality in cgi-bin/diagnostic.cgi on Seowon Intech SWC-9100 routers allows remote attackers to execute ar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.04/13.10 x64) - 'CONFIG_X86_X32=y' Local Privilege Escalation (3)
CVE-2014-0038—locallinux_x86-6402 fev 2014
The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allo
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.10) - 'CONFIG_X86_X32' Arbitrary Write (2)
CVE-2014-0038—locallinux02 fev 2014
The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allo
50RISCO
abrir ↗
GitHub PoC★ 199
Linux local root exploit for CVE-2014-0038
CVE-2014-0038—02 fev 2014
The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allo
50RISCO
abrir ↗
Metasploit400
Linux Kernel recvmmsg Privilege Escalation
CVE-2014-0038—02 fev 2014
The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allo
50RISCO
abrir ↗
Metasploit600
Pandora FMS Default Credential / SQLi Remote Code Execution
CVE-2014-125115CRITICAL01 fev 2014
Pandora FMS ≤ 5.0 SP2 Default Credential SQL Injection RCE
63RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MediaWiki 1.22.1 PdfHandler - Remote Code Execution
CVE-2014-1610—webappsmultiple01 fev 2014
MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is
50RISCO
abrir ↗
Exploit-DB
Linux Kernel 3.4 < 3.13.2 - recvmmsg x32 compat (PoC)
CVE-2014-0038—doslinux31 jan 2014
The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allo
50RISCO
abrir ↗
Metasploit600
Zpanel Remote Unauthenticated RCE
CVE-2013-2097—30 jan 2014
ZPanel through 10.1.0 has Remote Command Execution
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PCMan FTP Server 2.07 - 'ABOR' Remote Buffer Overflow
CVE-2013-4730—remotewindows29 jan 2014
Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USE
50RISCO
abrir ↗
Exploit-DB
Oracle Forms and Reports 11.1 - Arbitrary Code Execution
CVE-2012-3153—remotejsp29 jan 2014
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and
60RISCO
abrir ↗
Exploit-DB
ManageEngine Support Center Plus 7916 - Directory Traversal
CVE-2014-100002—webappsphp29 jan 2014
Directory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows remote attackers to read arb
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PCMan FTP Server 2.07 - 'CWD' Remote Buffer Overflow
CVE-2013-4730—remotewindows29 jan 2014
Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USE
50RISCO
abrir ↗
Metasploit600
Pandora FMS Remote Code Execution
CVE-2014-125124CRITICAL29 jan 2014
Pandora FMS <= 5.0RC1 Anyterm Unauthenticated Command Injection
63RISCO
abrir ↗
Exploit-DB
Oracle Forms and Reports 11.1 - Arbitrary Code Execution
CVE-2012-3152CRITICALsob ataqueremotejsp29 jan 2014
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2012-3152CRITICALsob ataque28 jan 2014
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and
100RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Eventum 2.3.4 - 'hostname' Remote Code Execution
CVE-2014-1632—webappsphp28 jan 2014
htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the
28RISCO
abrir ↗
GitHub PoC★ 8
Automated exploit for CVE-2012-3153 / CVE-2012-3152
CVE-2012-3153—28 jan 2014
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and
60RISCO
abrir ↗
Metasploit0
Kloxo SQL Injection and Remote Code Execution
CVE-2014-125123CRITICAL28 jan 2014
Kloxo < 6.1.12 Unauthenticated SQL Injection RCE
43RISCO
abrir ↗
← anteriorpágina 1238 / 2.906próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.