Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.166exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.078VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.166 exploits
Metasploit0
Firefox Proxy Prototype Privileged Javascript Injection
CVE-2014-8636—20 jan 2014
The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with
50RISCO
abrir ↗
Metasploit0
Firefox Proxy Prototype Privileged Javascript Injection
CVE-2015-0802—20 jan 2014
Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl
50RISCO
abrir ↗
Exploit-DB
ASUS RT-N56U - Remote Buffer Overflow (ROP)
CVE-2013-6343—remotehardware19 jan 2014
Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374_979 allow
23RISCO
abrir ↗
Metasploit300
Mac OS X Safari file:// Redirection Sandbox Escape
CVE-2015-1155—16 jan 2014
The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allo
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Sexy polling 1.0.8 - 'answer_id' SQL Injection
CVE-2013-7219—webappsphp16 jan 2014
SQL injection vulnerability in vote.php in the 2Glux Sexy Polling (com_sexypolling) component before 1.0.9 for Joomla! a
23RISCO
abrir ↗
Metasploit500
Oracle Forms and Reports Remote Code Execution
CVE-2012-3152CRITICALsob ataque15 jan 2014
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and
100RISCO
abrir ↗
Metasploit500
Oracle Forms and Reports Remote Code Execution
CVE-2012-3153—15 jan 2014
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and
60RISCO
abrir ↗
Exploit-DB
Collabtive 1.1 - 'managetimetracker.php' SQL Injection
CVE-2013-6872—webappsphp15 jan 2014
SQL injection vulnerability in managetimetracker.php in Collabtive before 1.2 allows remote authenticated users to execu
23RISCO
abrir ↗
Exploit-DB
PHPJabbers Appointment Scheduler 2.0 - Multiple Vulnerabilities
CVE-2014-10001—webappsphp14 jan 2014
Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attacker
23RISCO
abrir ↗
Exploit-DB
Linux Kernel (Ubuntu 11.10/12.04) - binfmt_script Stack Data Disclosure
CVE-2012-4530—doslinux14 jan 2014
The load_script function in fs/binfmt_script.c in the Linux kernel before 3.7.2 does not properly handle recursion, whic
23RISCO
abrir ↗
Exploit-DB
PHPJabbers Event Booking Calendar 2.0 - Multiple Vulnerabilities
CVE-2014-10014—webappsphp14 jan 2014
Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attacke
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle Supply Chain Products Suite - Remote Security
CVE-2013-5880—remotemultiple14 jan 2014
Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.
50RISCO
abrir ↗
Exploit-DB
SoapUI 4.6.3 - Remote Code Execution
CVE-2014-1202—remotewindows14 jan 2014
The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a c
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache Struts2 2.0.0 < 2.3.15 - Prefixed Parameters OGNL Injection
CVE-2013-2251CRITICALsob ataquewebappsmultiple14 jan 2014
Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a
100RISCO
abrir ↗
Exploit-DB
Horizon QCMS 4.0 - Multiple Vulnerabilities
CVE-2013-7139—webappsphp14 jan 2014
SQL injection vulnerability in download.php in Horizon Quick Content Management System (QCMS) 4.0 and earlier allows rem
23RISCO
abrir ↗
Exploit-DB
PHPJabbers Event Booking Calendar 2.0 - Multiple Vulnerabilities
CVE-2014-10015—webappsphp14 jan 2014
SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to exe
23RISCO
abrir ↗
Exploit-DB
PHPJabbers Appointment Scheduler 2.0 - Multiple Vulnerabilities
CVE-2014-10010—webappsphp14 jan 2014
Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary file
23RISCO
abrir ↗
Metasploit400
KingScada kxClientDownload.ocx ActiveX Remote Code Execution
CVE-2013-2827—14 jan 2014
An unspecified ActiveX control in WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before
50RISCO
abrir ↗
Exploit-DB
Conceptronic Wireless Pan & Tilt Network Camera - Cross-Site Request Forgery
CVE-2013-7204—webappshardware14 jan 2014
Cross-site request forgery (CSRF) vulnerability in set_users.cgi in Conceptronic CIPCAMPTIWL Camera 1.0 with firmware 21
28RISCO
abrir ↗
Exploit-DB
Burden 1.8 - Authentication Bypass
CVE-2013-7137—webappsphp14 jan 2014
The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Atmail Webmail Server - Email Body HTML Injection
CVE-2013-6017—webappsphp14 jan 2014
Cross-site scripting (XSS) vulnerability in Atmail Webmail Server before 7.2 allows remote attackers to inject arbitrary
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SerComm Device - Remote Code Execution (Metasploit)
CVE-2014-0659—remotehardware14 jan 2014
The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DomPHP 0.83 - SQL Injection
CVE-2014-10038—webappsphp13 jan 2014
SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Dell Kace 1000 Systems Management Appliance DS-2014-001 - Multiple SQL Injections
CVE-2014-1671—webappsphp13 jan 2014
Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow remote attackers or remot
23RISCO
abrir ↗
Exploit-DB
DomPHP 0.83 - Local Directory Traversal
CVE-2014-10037—webappsphp12 jan 2014
Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a ..
43RISCO
abrir ↗
Metasploit500
HP AutoPass License Server File Upload
CVE-2013-6221—10 jan 2014
Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoP
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
UAEPD Shopping Script - 'products.php' Multiple SQL Injections
CVE-2014-1618—webappsphp08 jan 2014
Multiple SQL injection vulnerabilities in UAEPD Shopping Cart Script allow remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
UAEPD Shopping Script - 'news.php?id' SQL Injection
CVE-2014-1618—webappsphp08 jan 2014
Multiple SQL injection vulnerabilities in UAEPD Shopping Cart Script allow remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Command School Student Management System - '/sw/add_topic.php' Cross-Site Request Forgery (Topic Creation)
CVE-2014-1915—webappsphp07 jan 2014
Multiple cross-site request forgery (CSRF) vulnerabilities in Command School Student Management System 1.06.01 allow rem
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
vTiger CRM 5.4.0 SOAP - AddEmailAttachment Arbitrary File Upload (Metasploit)
CVE-2013-3214—remotephp07 jan 2014
vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.
60RISCO
abrir ↗
← anteriorpágina 1240 / 2.906próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.