Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.168exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.168 exploits
Metasploit300
MS13-008 Microsoft Internet Explorer CButton Object Use-After-Free Vulnerability
CVE-2012-4792HIGHsob ataque27 dez 2012
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary cod
100RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
RealPlayer - '.RealMedia' File Handling Buffer Overflow (Metasploit)
CVE-2012-5691—remotewindows27 dez 2012
Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Lotus Notes Client URL Handler - Command Injection (Metasploit)
CVE-2012-2174—remotewindows25 dez 2012
The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted
50RISCO
abrir ↗
Metasploit200
Nvidia (nvsvc) Display Driver Service Local Privilege Escalation
CVE-2013-0109—25 dez 2012
The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does not
38RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Foswiki MAKETEXT - Remote Command Execution (Metasploit)
CVE-2012-6329—remoteunix23 dez 2012
The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly hand
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
TWiki MAKETEXT - Remote Command Execution (Metasploit)
CVE-2012-6329—remoteunix23 dez 2012
The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly hand
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Foswiki MAKETEXT - Remote Command Execution (Metasploit)
CVE-2012-6330—remoteunix23 dez 2012
The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows r
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
banana dance b.2.6 - Multiple Vulnerabilities
CVE-2012-5242—webappsphp21 dez 2012
Directory traversal vulnerability in functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Google Android 4.2 Browser and WebView - 'addJavascriptInterface' Code Execution (Metasploit)
CVE-2012-6636—localandroid21 dez 2012
The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote atta
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Elite Bulletin Board 2.1.21 - Multiple SQL Injections
CVE-2012-5874—webappsphp21 dez 2012
Multiple SQL injection vulnerabilities in the (1) update_whosonline_reg and (2) update_whosonline_guest functions in Eli
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Google Android 4.2 Browser and WebView - 'addJavascriptInterface' Code Execution (Metasploit)
CVE-2013-4710—localandroid21 dez 2012
Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly imp
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
banana dance b.2.6 - Multiple Vulnerabilities
CVE-2012-5243—webappsphp21 dez 2012
functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to read arbitrary database information v
23RISCO
abrir ↗
Metasploit600
Android Browser and WebView addJavascriptInterface Code Execution
CVE-2012-6636—21 dez 2012
The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote atta
50RISCO
abrir ↗
Metasploit600
Android Browser and WebView addJavascriptInterface Code Execution
CVE-2013-4710—21 dez 2012
Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly imp
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
banana dance b.2.6 - Multiple Vulnerabilities
CVE-2012-5244—webappsphp21 dez 2012
Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗
Exploit-DB
FireFly Mediaserver 1.0.0.1359 - Null Pointer Dereference
CVE-2012-5875—doswindows21 dez 2012
Firefly Media Server 1.0.0.1359 allows remote attackers to cause a denial of service (NULL pointer dereference) via a (1
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
InduSoft Web Studio - 'ISSymbol.ocx InternationalSeparator()' Heap Overflow (Metasploit)
CVE-2011-0340—remotewindows20 dez 2012
Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol v
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Crystal Reports CrystalPrintControl - ActiveX ServerResourceVersion Property Overflow (Metasploit)
CVE-2010-2590—remotewindows18 dez 2012
Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPWCMS 1.5.4.6 - 'preg_replace' Multiple Vulnerabilities
CVE-2013-1744—webappsphp17 dez 2012
IRIS citations management tool through 1.3 allows remote attackers to execute arbitrary commands.
23RISCO
abrir ↗
Metasploit600
TWiki MAKETEXT Remote Command Execution
CVE-2012-6329—15 dez 2012
The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly hand
50RISCO
abrir ↗
Metasploit300
RealPlayer RealMedia File Handling Buffer Overflow
CVE-2012-5691—14 dez 2012
Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers
50RISCO
abrir ↗
Exploit-DB
Cisco Wireless Lan Controller 7.2.110.0 - Multiple Vulnerabilities
CVE-2012-5991—doshardware13 dez 2012
screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 3.3.5 - Btrfs CRC32C feature Infinite Loop Local Denial of Service
CVE-2012-5375—doslinux13 dez 2012
The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial o
23RISCO
abrir ↗
Exploit-DB
Cisco Wireless Lan Controller 7.2.110.0 - Multiple Vulnerabilities
CVE-2012-6007—doshardware13 dez 2012
Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) dev
23RISCO
abrir ↗
Exploit-DB
Cisco Wireless Lan Controller 7.2.110.0 - Multiple Vulnerabilities
CVE-2012-5992—doshardware13 dez 2012
Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software
23RISCO
abrir ↗
Exploit-DB
Centreon Enterprise Server 2.3.3 < 2.3.9-4 - Blind SQL Injection
CVE-2012-5967—webappsphp13 dez 2012
SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in Centreon web 2.6.0) allows remote
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Portable phpMyAdmin - Authentication Bypass
CVE-2012-5469—webappsphp13 dez 2012
The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain ph
28RISCO
abrir ↗
Metasploit300
Novell eDirectory 8 Buffer Overflow
CVE-2012-0432—12 dez 2012
Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote at
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell File Reporter (NFR) Agent - XML Parsing Remote Code Execution
CVE-2012-4958—remotewindows12 dez 2012
Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrar
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell File Reporter (NFR) Agent - XML Parsing Remote Code Execution
CVE-2012-4957—remotewindows12 dez 2012
Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbi
50RISCO
abrir ↗
← anteriorpágina 1280 / 2.906próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.