Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.166exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.078VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.166 exploits
Exploit-DB✓ VexDay Proof
Horde Groupware Web Mail Edition 5.1.2 - Cross-Site Request Forgery (2)
CVE-2013-6364—webappsphp08 nov 2013
Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
VICIdial Manager - Send OS Command Injection (Metasploit)
CVE-2013-4467—remotelinux08 nov 2013
Multiple SQL injection vulnerabilities in the agent interface (agc/) in VICIDIAL dialer (aka Asterisk GUI client) 2.8-40
50RISCO
abrir ↗
Exploit-DB
Sagemcom F@st 3184 2.1.11 - Multiple Vulnerabilities
CVE-2013-5220—webappshardware08 nov 2013
goform/login on the HOT HOTBOX router with software 2.1.11 allows remote attackers to cause a denial of service (device
23RISCO
abrir ↗
Exploit-DB
Sagemcom F@st 3184 2.1.11 - Multiple Vulnerabilities
CVE-2013-5037—webappshardware08 nov 2013
The HOT HOTBOX router with software 2.1.11 has a default WPS PIN of 12345670, which makes it easier for remote attackers
23RISCO
abrir ↗
Exploit-DB
appRain 3.0.2 - Blind SQL Injection
CVE-2013-6058—webappsphp08 nov 2013
SQL injection vulnerability in appRain CMF 3.0.2 and earlier allows remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Vanilla Forums 2.0 < 2.0.18.5 - 'class.utilitycontroller.php' PHP Object Injection
CVE-2013-2749—webappsphp08 nov 2013
20RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Vivotek IP Cameras - RTSP Authentication Bypass
CVE-2013-4985—webappshardware08 nov 2013
Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream
23RISCO
abrir ↗
Exploit-DB
Sagemcom F@st 3184 2.1.11 - Multiple Vulnerabilities
CVE-2013-5038—webappshardware08 nov 2013
The HOT HOTBOX router with software 2.1.11 allows remote attackers to bypass authentication by configuring a source IP a
23RISCO
abrir ↗
Exploit-DB
Sagemcom F@st 3184 2.1.11 - Multiple Vulnerabilities
CVE-2013-5218—webappshardware08 nov 2013
Cross-site scripting (XSS) vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to inject
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
VICIdial Manager - Send OS Command Injection (Metasploit)
CVE-2013-7382—remotelinux08 nov 2013
VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier has a hardcoded password of donotedit for t
23RISCO
abrir ↗
Metasploit300
IBM Lotus Sametime WebPlayer DoS
CVE-2013-3986—07 nov 2013
IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote attackers to cause a denial of service (WebPlayer Firefox extension c
18RISCO
abrir ↗
Metasploit300
Supermicro Onboard IPMI CGI Vulnerability Scanner
CVE-2013-3621—06 nov 2013
15RISCO
abrir ↗
Metasploit300
Supermicro Onboard IPMI CGI Vulnerability Scanner
CVE-2013-3623—06 nov 2013
Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Managemen
60RISCO
abrir ↗
Metasploit300
Supermicro Onboard IPMI Static SSL Certificate Scanner
CVE-2013-3619—06 nov 2013
Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_3
18RISCO
abrir ↗
Metasploit300
Supermicro Onboard IPMI url_redirect.cgi Authenticated Directory Traversal
CVE-2013-6785—06 nov 2013
Directory traversal vulnerability in url_redirect.cgi in Supermicro IPMI before SMT_X9_315 allows authenticated attacker
18RISCO
abrir ↗
Metasploit400
Supermicro Onboard IPMI close_window.cgi Buffer Overflow
CVE-2013-3623—06 nov 2013
Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Managemen
60RISCO
abrir ↗
Metasploit200
MS13-096 Microsoft Tagged Image File Format (TIFF) Integer Overflow
CVE-2013-3906HIGHsob ataque05 nov 2013
GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compati
100RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Hanso Player 2.5.0 - 'm3u' Buffer Overflow (Denial of Service)
CVE-2013-7280—doswindows05 nov 2013
Buffer overflow in HansoTools Hanso Player 2.1.0, 2.5.0, and earlier allows remote attackers to cause a denial of servic
23RISCO
abrir ↗
Exploit-DB
Apache Tomcat 5.5.25 - Cross-Site Request Forgery
CVE-2013-6357—webappsmultiple04 nov 2013
Cross-site request forgery (CSRF) vulnerability in the Manager application in Apache Tomcat 5.5.25 and earlier allows re
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Google Android - Signature Verification Security Bypass
CVE-2013-6792—remoteandroid04 nov 2013
Google Android prior to 4.4 has an APK Signature Security Bypass Vulnerability
23RISCO
abrir ↗
Metasploit600
Gitlab-shell Code Execution
CVE-2013-4490—04 nov 2013
The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x
50RISCO
abrir ↗
Metasploit300
Watermark Master Buffer Overflow (SEH)
CVE-2013-6935—01 nov 2013
Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Watermark Master 2.2.23 - Local Buffer Overflow (SEH)
CVE-2013-6935—localwindows01 nov 2013
Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a
50RISCO
abrir ↗
Exploit-DB
Apache + PHP < 5.3.12 / < 5.4.2 - Remote Code Execution + Scanner
CVE-2012-2336—remotephp31 out 2013
sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not
35RISCO
abrir ↗
Exploit-DB
Opsview pre 4.4.1 - Blind SQL Injection
CVE-2013-5694—webappsphp31 out 2013
SQL injection vulnerability in status/service/acknowledge in Opsview before 4.4.1 allows remote attackers to execute arb
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Moodle - Remote Command Execution (Metasploit)
CVE-2013-3630—remotelinux31 out 2013
Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Zabbix - (Authenticated) Remote Command Execution (Metasploit)
CVE-2013-3628—remotelinux31 out 2013
Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenMediaVault Cron - Remote Command Execution (Metasploit)
CVE-2013-3632HIGHremotelinux31 out 2013
The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users
68RISCO
abrir ↗
Exploit-DB
Apache + PHP < 5.3.12 / < 5.4.2 - Remote Code Execution + Scanner
CVE-2012-2311—remotephp31 out 2013
sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not
35RISCO
abrir ↗
Metasploit600
Synology DiskStation Manager SLICEUPLOAD Remote Command Execution
CVE-2013-6955—31 out 2013
webman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before
60RISCO
abrir ↗
← anteriorpágina 1247 / 2.906próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.