Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.166exploits catalogados

40.553CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.078VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentes populares risco

87.166 exploits

VulnCheck XDB

initial-access

CVE-2012-3152CRITICALsob ataque28 jan 2014

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and

100RISCO

abrir ↗

Metasploit0

Kloxo SQL Injection and Remote Code Execution

CVE-2014-125123CRITICAL28 jan 2014

Kloxo < 6.1.12 Unauthenticated SQL Injection RCE

43RISCO

abrir ↗

VulnCheck XDB

remote-with-credentials

CVE-2012-3153—28 jan 2014

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and

60RISCO

abrir ↗

GitHub PoC★ 8

Automated exploit for CVE-2012-3153 / CVE-2012-3152

CVE-2012-3153—28 jan 2014

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Eventum 2.3.4 - 'hostname' Remote Code Execution

CVE-2014-1632—webappsphp28 jan 2014

htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Eventum 2.3.4 - 'hostname' Remote Code Execution

CVE-2014-1631—webappsphp28 jan 2014

Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Eventum - Insecure File Permissions

CVE-2014-1631—webappsphp27 jan 2014

Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MP3Info 0.8.5a - Buffer Overflow

CVE-2006-2465—doslinux27 jan 2014

Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument. NOTE: if

23RISCO

abrir ↗

Exploit-DB

Mozilla Thunderbird 17.0.6 - Input Validation Filter Bypass

CVE-2013-6674—dosmultiple27 jan 2014

Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.1

23RISCO

abrir ↗

Exploit-DB

Oracle Outside In MDB - File Parsing Stack Buffer Overflow (PoC)

CVE-2013-5791—doswindows27 jan 2014

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allo

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Franklin Fueling TS-550 evo 2.0.0.6833 - Multiple Vulnerabilities

CVE-2013-7247—webappshardware24 jan 2014

cgi-bin/tsaws.cgi in Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 allows

23RISCO

abrir ↗

Exploit-DB

Joomla! Component JV Comment 3.0.2 - 'id' SQL Injection

CVE-2014-0794—webappsphp24 jan 2014

SQL injection vulnerability in the JV Comment (com_jvcomment) component before 3.0.3 for Joomla! allows remote authentic

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Franklin Fueling TS-550 evo 2.0.0.6833 - Multiple Vulnerabilities

CVE-2013-7248—webappshardware24 jan 2014

Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 has a hardcoded password fo

23RISCO

abrir ↗

Exploit-DB

MW6 Technologies Aztec - ActiveX 'Data' Buffer Overflow (PoC)

CVE-2013-6040HIGHdoswindows24 jan 2014

MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls versions before 4.0 are vulnerable to arbitrary code via crafted HTML document.

41RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Skybluecanvas CMS 1.1 r248-03 - Remote Command Execution

CVE-2014-1683—webappsphp24 jan 2014

The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

HP Data Protector - Backup Client Service Directory Traversal (Metasploit)

CVE-2013-6194—remotewindows24 jan 2014

Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a

50RISCO

abrir ↗

Exploit-DB

MW6 Technologies MaxiCode - ActiveX 'Data' Buffer Overflow (PoC)

CVE-2013-6040HIGHdoswindows24 jan 2014

MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls versions before 4.0 are vulnerable to arbitrary code via crafted HTML document.

41RISCO

abrir ↗

Exploit-DB

Joomla! Component Komento 1.7.2 - Persistent Cross-Site Scripting

CVE-2014-0793—webappsphp24 jan 2014

Multiple cross-site scripting (XSS) vulnerabilities in the StackIdeas Komento (com_komento) component before 1.7.3 for J

23RISCO

abrir ↗

Exploit-DB

Ammyy Admin 3.2 - Authentication Bypass

CVE-2013-5582—localwindows24 jan 2014

Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assiste

23RISCO

abrir ↗

Exploit-DB

MW6 Technologies Datamatrix - ActiveX 'Data' Buffer Overflow

CVE-2013-6040HIGHdoswindows24 jan 2014

MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls versions before 4.0 are vulnerable to arbitrary code via crafted HTML document.

41RISCO

abrir ↗

Exploit-DB

Ammyy Admin 3.2 - Authentication Bypass

CVE-2013-5581—localwindows24 jan 2014

20RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Daum Game 1.1.0.5 - ActiveX 'IconCreate Method' Remote Stack Buffer Overflow

CVE-2013-7246—remotewindows24 jan 2014

Buffer overflow in the IconCreate method in an ActiveX control in the DaumGame ActiveX plugin 1.1.0.4 and 1.1.0.5 allows

28RISCO

abrir ↗

Exploit-DB

iTechClassifieds 3.03.057 - SQL Injection

CVE-2014-100020—webappsphp23 jan 2014

SQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Metasploit600

Simple E-Document Arbitrary File Upload

CVE-2014-125126CRITICAL23 jan 2014

Simple E-Document Arbitrary File Upload RCE

63RISCO

abrir ↗

Metasploit600

GE Proficy CIMPLICITY gefebt.exe Remote Code Execution

CVE-2014-0750—23 jan 2014

GE Proficy HMI/SCADA Path Traversal

68RISCO

abrir ↗

Exploit-DB

iTechClassifieds 3.03.057 - SQL Injection

CVE-2008-0685—webappsphp23 jan 2014

SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Exploit-DB

Simple E-document 1.31 - Authentication Bypass

CVE-2014-10020—webappsphp23 jan 2014

SQL injection vulnerability in login.php in Simple e-document 1.31 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

GoToMeeting for Android - Multiple Local Information Disclosure Vulnerabilities

CVE-2014-1664—localandroid23 jan 2014

The Citrix GoToMeeting application 5.0.799.1238 for Android logs HTTP requests containing sensitive information, which a

23RISCO

abrir ↗

Exploit-DB

Teracom Modem T2-B-Gawv1.4U10Y-BI - Persistent Cross-Site Scripting

CVE-2014-10018—webappshardware20 jan 2014

Cross-site scripting (XSS) vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MuPDF 1.3 - 'xps_parse_color()' Stack Buffer Overflow

CVE-2014-2013—localwindows20 jan 2014

Stack-based buffer overflow in the xps_parse_color function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote a

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.