Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.168exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.168 exploits
Exploit-DB
ModSecurity - Remote Null Pointer Dereference
CVE-2013-2765—dosmultiple31 mai 2013
The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NUL
28RISCO
abrir ↗
Metasploit300
Synactis PDF In-The-Box ConnectToSynactic Stack Buffer Overflow
CVE-2013-10057HIGH30 mai 2013
Synactis PDF In-The-Box ConnectToSynactic Stack-Based Buffer Overflow
36RISCO
abrir ↗
Metasploit300
Monkey HTTPD Header Parsing Denial of Service (DoS)
CVE-2013-3843—30 mai 2013
Stack-based buffer overflow in the mk_request_header_process function in mk_request.c in Monkey HTTP Daemon (monkeyd) be
23RISCO
abrir ↗
Metasploit0
Intrasrv 1.0 Buffer Overflow
CVE-2019-17181—30 mai 2013
A remote SEH buffer overflow has been discovered in IntraSrv 1.0 (2007-06-03). An attacker may send a crafted HTTP GET o
30RISCO
abrir ↗
Exploit-DB
Monkey HTTPd 1.1.1 - Crash (PoC)
CVE-2013-3724—doslinux30 mai 2013
The mk_request_header_process function in mk_request.c in Monkey 1.1.1 allows remote attackers to cause a denial of serv
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
TP-Link IP Cameras Firmware 1.6.18P12 - Multiple Vulnerabilities
CVE-2013-2573—webappshardware29 mai 2013
A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wireless_mft.cgi file in TP-Link IP Cam
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM SPSS SamplePower C1Tab - ActiveX Heap Overflow (Metasploit)
CVE-2012-5946—remotewindows29 mai 2013
Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attac
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Zavio IP Cameras Firmware 1.6.03 - Multiple Vulnerabilities
CVE-2013-2568—webappshardware29 mai 2013
A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 via the ap parameter to /cgi-bin/mft/wireless
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MayGion IP Cameras Firmware 09.27 - Multiple Vulnerabilities
CVE-2013-1604—webappshardware29 mai 2013
Directory traversal vulnerability in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Zavio IP Cameras Firmware 1.6.03 - Multiple Vulnerabilities
CVE-2013-2567—webappshardware29 mai 2013
An Authentication Bypass vulnerability exists in the web interface in Zavio IP Cameras through 1.6.03 due to a hardcoded
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
TP-Link IP Cameras Firmware 1.6.18P12 - Multiple Vulnerabilities
CVE-2013-2572—webappshardware29 mai 2013
A Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G, 4171G, and 3130 1.6.18P12 d
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Zavio IP Cameras Firmware 1.6.03 - Multiple Vulnerabilities
CVE-2013-2570—webappshardware29 mai 2013
A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 in the General.Time.NTP.Server parameter to t
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Zavio IP Cameras Firmware 1.6.03 - Multiple Vulnerabilities
CVE-2013-2569—webappshardware29 mai 2013
A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is dis
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MayGion IP Cameras Firmware 09.27 - Multiple Vulnerabilities
CVE-2013-1605—webappshardware29 mai 2013
Buffer overflow in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to execute arbitra
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Nginx 1.3.9 < 1.4.0 - Chuncked Encoding Stack Buffer Overflow (Metasploit)
CVE-2013-2028—remotelinux28 mai 2013
The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cau
60RISCO
abrir ↗
Exploit-DB
RadioCMS 2.2 - 'menager.php?playlist_id' SQL Injection
CVE-2013-3531—webappsphp26 mai 2013
SQL injection vulnerability in meneger.php in RadioCMS 2.2 allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AdobeCollabSync - Local Buffer Overflow / Adobe Reader X Sandbox Bypass (Metasploit)
CVE-2013-2730—localwindows26 mai 2013
Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attacke
60RISCO
abrir ↗
Metasploit500
Apache Struts includeParams Remote Code Execution
CVE-2013-1966—24 mai 2013
Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not
60RISCO
abrir ↗
Metasploit500
Apache Struts includeParams Remote Code Execution
CVE-2013-2115—24 mai 2013
Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not
60RISCO
abrir ↗
Metasploit300
ERS Viewer 2013 ERS File Handling Buffer Overflow
CVE-2013-3482—23 mai 2013
Stack-based buffer overflow in the rf_report_error function in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.
50RISCO
abrir ↗
Metasploit300
Lianja SQL 1.0.0RC5.1 db_netserver Stack Buffer Overflow
CVE-2013-3563—22 mai 2013
Stack-based buffer overflow in db_netserver in Lianja SQL Server before 1.0.0RC5.2 allows remote attackers to cause a de
50RISCO
abrir ↗
Metasploit600
Java JMX Server Insecure Configuration Java Code Execution
CVE-2015-2342—22 mai 2013
The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not r
60RISCO
abrir ↗
Metasploit200
Novell Client 2 SP3 nicm.sys Local Privilege Escalation
CVE-2013-3956—22 mai 2013
The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2
38RISCO
abrir ↗
Metasploit300
Java JMX Server Insecure Endpoint Code Execution Scanner
CVE-2015-2342—22 mai 2013
The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not r
60RISCO
abrir ↗
Metasploit300
Apple Quicktime 7 Invalid Atom Length Buffer Overflow
CVE-2013-1017—22 mai 2013
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of s
50RISCO
abrir ↗
Metasploit300
Apple Quicktime 7 Invalid Atom Length Buffer Overflow
CVE-2013-1017—22 mai 2013
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of s
50RISCO
abrir ↗
Metasploit200
Kimai v0.9.2 'db_restore.php' SQL Injection
CVE-2013-10033CRITICAL21 mai 2013
Kimai 0.9.2 db_restore.php SQL Injection
63RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Win32k!EPATHOBJ::pprFlattenRec Uninitialized Next Pointer Testcase
CVE-2013-3661—doswindows21 mai 2013
The EPATHOBJ::bFlatten function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vist
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Win32k!EPATHOBJ::pprFlattenRec Uninitialized Next Pointer Testcase
CVE-2013-3660HIGHsob ataquedoswindows21 mai 2013
The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windo
98RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Win32k!EPATHOBJ::pprFlattenRec Uninitialized Next Pointer Testcase
CVE-2013-3130—doswindows21 mai 2013
20RISCO
abrir ↗
← anteriorpágina 1265 / 2.906próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.