Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.168exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.168 exploits
Metasploit300
Novell eDirectory 8 Buffer Overflow
CVE-2012-0432—12 dez 2012
Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote at
50RISCO
abrir ↗
Exploit-DB
Axway Secure Transport 5.1 SP2 - Directory Traversal
CVE-2012-4991—webappswindows12 dez 2012
Multiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier allow remote authenticated use
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Data Protector - DtbClsLogin Buffer Overflow (Metasploit)
CVE-2010-3007—remotewindows11 dez 2012
Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x befo
38RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Smartphone Pentest Framework - Multiple Remote Command Execution Vulnerabilities
CVE-2012-5878—webappscgi10 dez 2012
Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary comman
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SimpleInvoices invoices Module - Customer Field Cross-Site Scripting
CVE-2012-4932—webappsphp10 dez 2012
Multiple cross-site scripting (XSS) vulnerabilities in SimpleInvoices before stable-2012-1-CIS3000 allow remote attacker
23RISCO
abrir ↗
Exploit-DB
TVMOBiLi 2.1.0.3557 - Denial of Service
CVE-2012-5451—doswindows09 dez 2012
Multiple stack-based buffer overflows in HttpUtils.dll in TVMOBiLi before 2.1.0.3974 allow remote attackers to cause a d
23RISCO
abrir ↗
Exploit-DB
Clipbucket 2.6 Revision 738 - Multiple SQL Injections
CVE-2012-5849—webappsphp09 dez 2012
Multiple SQL injection vulnerabilities in ClipBucket 2.6 Revision 738 and earlier allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SumatraPDF 2.1.1/MuPDF 1.0 - Integer Overflow
CVE-2012-5340—doswindows09 dez 2012
SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corru
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Google Android Kernel 2.6 - Local Denial of Service Crash (PoC)
CVE-2013-1773—dosandroid09 dez 2012
Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privileg
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Achievo 1.4.5 - Multiple Vulnerabilities (2)
CVE-2012-5865—webappsphp09 dez 2012
SQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows remote authenticated users to execute arbitrary SQL
23RISCO
abrir ↗
Metasploit500
Nagios3 history.cgi Host Command Execution
CVE-2012-6096—09 dez 2012
Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
VideoLAN VLC Media Player 2.0.4 - '.swf' Crash (PoC)
CVE-2013-1868—doswindows07 dez 2012
Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of ser
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Simple Gmail Login - Stack Trace Information Disclosure
CVE-2012-6313—webappsphp07 dez 2012
simple-gmail-login.php in the Simple Gmail Login plugin before 1.1.4 for WordPress allows remote attackers to obtain sen
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM System Director Agent - DLL Injection (Metasploit)
CVE-2009-0880—remotewindows07 dez 2012
Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows rem
50RISCO
abrir ↗
Metasploit600
FreeFloat FTP Server Arbitrary File Upload
CVE-2012-10030CRITICAL07 dez 2012
FreeFloat FTP Server Arbitrary File Upload
63RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle MySQL (Windows) - MOF Execution (Metasploit)
CVE-2012-5613—remotewindows06 dez 2012
MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle MySQL / MariaDB - Insecure Salt Generation Security Bypass
CVE-2012-5627—remotelinux06 dez 2012
Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt duri
28RISCO
abrir ↗
Metasploit400
Netwin SurgeFTP Remote Command Execution
CVE-2012-10028HIGH06 dez 2012
Netwin SurgeFTP <= v23c8 Authenticated RCE
36RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
(SSH.com Communications) SSH Tectia - USERAUTH Change Request Password Reset (Metasploit)
CVE-2012-5975—remoteunix05 dez 2012
The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Ektron 8.02 - XSLT Transform Remote Code Execution (Metasploit)
CVE-2012-5357—remotewindows05 dez 2012
Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true
50RISCO
abrir ↗
Metasploit600
OpenSIS 'modname' PHP Code Execution
CVE-2013-1349—04 dez 2012
Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to execute arbitrary PHP cod
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Advantech Studio 7.0 - SCADA/HMI Directory Traversal
CVE-2013-1627—webappswindows04 dez 2012
Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and
23RISCO
abrir ↗
Exploit-DB
Symantec Messaging Gateway 9.5.3-3 - Arbitrary File Download
CVE-2012-4347—webappslinux03 dez 2012
Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow r
50RISCO
abrir ↗
Exploit-DB
Symantec Messaging Gateway 9.5.3-3 - Cross-Site Request Forgery
CVE-2012-0308—webappsmultiple03 dez 2012
Cross-site request forgery (CSRF) vulnerability in Symantec Messaging Gateway (SMG) before 10.0 allows remote attackers
23RISCO
abrir ↗
Metasploit600
Foswiki MAKETEXT Remote Command Execution
CVE-2012-6329—03 dez 2012
The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly hand
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Opera Web Browser 12.11 - Crash (PoC)
CVE-2012-6470—doswindows03 dez 2012
Opera before 12.12 does not properly allocate memory for GIF images, which allows remote attackers to execute arbitrary
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MySQL - Remote User Enumeration
CVE-2012-5615—remotemultiple02 dez 2012
Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other ver
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MySQL (Linux) - Database Privilege Escalation
CVE-2012-5613—locallinux02 dez 2012
MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the
50RISCO
abrir ↗
Exploit-DB
MySQL - Denial of Service (PoC)
CVE-2012-5614—doslinux02 dez 2012
Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote a
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MySQL 5.1/5.5 (Windows) - 'MySQLJackpot' Remote Command Execution
CVE-2012-5615—remotewindows02 dez 2012
Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other ver
28RISCO
abrir ↗
← anteriorpágina 1281 / 2.906próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.