Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.166exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.078VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.166 exploits
Exploit-DB✓ VexDay Proof
vTiger CRM 5.3.0 5.4.0 - (Authenticated) Remote Code Execution (Metasploit)
CVE-2013-3591—remotephp31 out 2013
vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability
50RISCO
abrir ↗
Exploit-DB
Apache + PHP < 5.3.12 / < 5.4.2 - Remote Code Execution + Scanner
CVE-2012-2336—remotephp31 out 2013
sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not
35RISCO
abrir ↗
Metasploit600
Apache Roller OGNL Injection
CVE-2013-4212—31 out 2013
Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NAS4Free - Remote Code Execution (Metasploit)
CVE-2013-3631—remotephp31 out 2013
NAS4Free 9.1.0.1.804 and earlier allows remote authenticated users to execute arbitrary PHP code via a request to exec.p
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ISPConfig - (Authenticated) Arbitrary PHP Code Execution (Metasploit)
CVE-2013-3629—remotephp31 out 2013
ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution
50RISCO
abrir ↗
Metasploit600
HP LoadRunner EmulationAdmin Web Service Directory Traversal
CVE-2013-4837—30 out 2013
Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arb
50RISCO
abrir ↗
Metasploit600
Moodle Authenticated Spelling Binary RCE
CVE-2013-4341—30 out 2013
Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, an
43RISCO
abrir ↗
Metasploit500
HP SiteScope issueSiebelCmd Remote Code Execution
CVE-2013-4835—30 out 2013
The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authenti
60RISCO
abrir ↗
Metasploit600
Moodle Authenticated Spelling Binary RCE
CVE-2013-3630—30 out 2013
Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell
50RISCO
abrir ↗
Metasploit500
NAS4Free Arbitrary Remote Code Execution
CVE-2013-3631—30 out 2013
NAS4Free 9.1.0.1.804 and earlier allows remote authenticated users to execute arbitrary PHP code via a request to exec.p
43RISCO
abrir ↗
Metasploit600
ISPConfig Authenticated Arbitrary PHP Code Execution
CVE-2013-3629—30 out 2013
ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution
50RISCO
abrir ↗
Metasploit600
Zabbix Authenticated Remote Command Execution
CVE-2013-3628—30 out 2013
Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability
50RISCO
abrir ↗
Metasploit300
Openbravo ERP XXE Arbitrary File Read
CVE-2013-3617—30 out 2013
The XML API in Openbravo ERP 2.5, 3.0, and earlier allows remote authenticated users to read arbitrary files via an XML
43RISCO
abrir ↗
Metasploit500
Rocket Servergraph Admin Center fileRequestor Remote Code Execution
CVE-2014-3914—30 out 2013
Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows
60RISCO
abrir ↗
Metasploit600
vTigerCRM v5.4.0/v5.3.0 Authenticated Remote Code Execution
CVE-2013-3591—30 out 2013
vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability
50RISCO
abrir ↗
Metasploit600
OpenMediaVault rpc.php Authenticated Cron Remote Code Execution
CVE-2013-3632HIGH30 out 2013
The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users
68RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Openbravo ERP - XML External Entity Information Disclosure
CVE-2013-3617—remotemultiple30 out 2013
The XML API in Openbravo ERP 2.5, 3.0, and earlier allows remote authenticated users to read arbitrary files via an XML
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache + PHP < 5.3.12 / < 5.4.2 - cgi-bin Remote Code Execution
CVE-2012-2336—remotephp29 out 2013
sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Olat CMS 7.8.0.1 - Persistent Cross-Site Scripting
CVE-2013-6794—webappsphp29 out 2013
Cross-site scripting (XSS) vulnerability in the Calendar module in Olat 7.8.0.1 (b20130821 N1) allows remote attackers t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Olat CMS 7.8.0.1 - Persistent Cross-Site Scripting
CVE-2013-6793—webappsphp29 out 2013
Multiple cross-site scripting (XSS) vulnerabilities in the Calendar module in Olat 7.8.0.1 (b20130821 N1) allow remote a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache + PHP < 5.3.12 / < 5.4.2 - cgi-bin Remote Code Execution
CVE-2012-2311—remotephp29 out 2013
sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not
35RISCO
abrir ↗
Exploit-DB
Stem Innovation - 'IZON' Hard-Coded Credentials
CVE-2013-6236—webappshardware29 out 2013
IZON IP 2.0.2: hard-coded password vulnerability
28RISCO
abrir ↗
Exploit-DB
Horde Groupware Web Mail Edition 5.1.2 - Cross-Site Request Forgery (1)
CVE-2013-6275—webappsphp29 out 2013
Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php.
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache + PHP < 5.3.12 / < 5.4.2 - cgi-bin Remote Code Execution
CVE-2012-1823CRITICALsob ataqueremotephp29 out 2013
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not
100RISCO
abrir ↗
Exploit-DB
Watchguard Firewall XTM 11.7.4u1 - Remote Buffer Overflow
CVE-2013-6021—remotehardware29 out 2013
Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BlazeDVD 6.2 - '.plf' Local Buffer Overflow (SEH)
CVE-2006-6199—localwindows28 out 2013
Stack-based buffer overflow in BlazeVideo BlazeDVD Standard and Professional 5.0, and possibly earlier, allows remote at
50RISCO
abrir ↗
Metasploit300
VideoCharge Studio Buffer Overflow (SEH)
CVE-2025-34123HIGH27 out 2013
VideoCharge Studio 2.12.3.685 SEH Buffer Overflow via .VSC File
36RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Open Flash Chart 2 - Arbitrary File Upload (Metasploit)
CVE-2009-4140—remotephp26 out 2013
Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Open Flash Chart 2 - Arbitrary File Upload (Metasploit)
CVE-2011-4275—remotephp26 out 2013
Multiple cross-site scripting (XSS) vulnerabilities in iTop (aka IT Operations Portal) 1.1.181 and 1.2.0-RC-282 allow re
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Poppler 0.14.3 - '/utils/pdfseparate.cc' Local Format String
CVE-2013-4474—locallinux26 out 2013
Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote
28RISCO
abrir ↗
← anteriorpágina 1248 / 2.906próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.