Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.168exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.168 exploits
Metasploit300
Apple QuickTime 7.7.2 MIME Type Buffer Overflow
CVE-2012-3753—07 nov 2012
Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause
50RISCO
abrir ↗
Metasploit300
Apple QuickTime 7.7.2 TeXML Style Element font-table Field Stack Buffer Overflow
CVE-2012-3752—07 nov 2012
Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a de
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OrangeHRM - 'sortField' SQL Injection
CVE-2012-5367—webappsphp07 nov 2012
Multiple SQL injection vulnerabilities in OrangeHRM 2.7.1 RC 1 allow remote authenticated administrators to execute arbi
23RISCO
abrir ↗
Exploit-DB
Invision Power Board (IP.Board) 3.3.4 - Unserialize Regex Bypass
CVE-2012-5692—webappsphp07 nov 2012
Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Cryptocat 2.0.21 Chrome Extension - 'img/keygen.gif' File Information Disclosure
CVE-2013-2261—remotemultiple07 nov 2012
Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
EMC NetWorker - Format String (Metasploit)
CVE-2012-2288—remotewindows07 nov 2012
Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Cryptocat 2.0.22 - Arbitrary Script Injection
CVE-2013-4103—remotemultiple07 nov 2012
Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
VeriCentre - Multiple SQL Injections
CVE-2012-4951—webappsphp06 nov 2012
Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset
CVE-2012-5684—webappsmultiple05 nov 2012
Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web sc
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset
CVE-2012-5683—webappsmultiple05 nov 2012
Multiple cross-site request forgery (CSRF) vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to hijack
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset
CVE-2012-5686—webappsmultiple05 nov 2012
ZPanel 10.0.1 has insufficient entropy for its password reset process.
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset
CVE-2012-5685—webappsmultiple05 nov 2012
SQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗
Metasploit300
XBMC Web Server Directory Traversal
CVE-2012-10024HIGH04 nov 2012
XBMC ≤ 11.0 Web Server Path Traversal
36RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin All Video Gallery 1.1 - SQL Injection
CVE-2012-6653—webappsphp02 nov 2012
Unspecified vulnerability in the All Video Gallery (all-video-gallery) plugin before 1.2.0 for WordPress has unspecified
23RISCO
abrir ↗
Exploit-DB
SIEMENS Sipass Integrated 2.6 Ethernet Bus - Arbitrary Pointer Dereference
CVE-2012-5409—doswindows01 nov 2012
AscoServer.exe in the server in Siemens SiPass integrated MP2.6 and earlier does not properly handle IOCP RPC messages r
28RISCO
abrir ↗
Exploit-DB
Konqueror 4.7.3 - Memory Corruption
CVE-2012-4512—doslinux01 nov 2012
The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service
28RISCO
abrir ↗
Exploit-DB
Konqueror 4.7.3 - Memory Corruption
CVE-2012-4513—doslinux01 nov 2012
khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) a
28RISCO
abrir ↗
Exploit-DB
Konqueror 4.7.3 - Memory Corruption
CVE-2012-4514—doslinux01 nov 2012
rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NUL
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Invision Power Board (IP.Board) 3.3.4 - 'Unserialize()' PHP Code Execution
CVE-2012-5692—webappsphp01 nov 2012
Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3
43RISCO
abrir ↗
Exploit-DB
Konqueror 4.7.3 - Memory Corruption
CVE-2012-4515—doslinux01 nov 2012
Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is
23RISCO
abrir ↗
Metasploit300
Axigen Arbitrary File Read and Delete
CVE-2012-4940—31 out 2012
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote att
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Axigen Mail Server - 'Filename' Directory Traversal
CVE-2012-4940—remotewindows31 out 2012
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote att
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SolarWinds Orion IP Address Manager (IPAM) - 'search.aspx' Cross-Site Scripting
CVE-2012-4939—webappsasp31 out 2012
Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarWi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Freefloat FTP Server - 'PUT' Remote Buffer Overflow
CVE-2012-5106—remotewindows30 out 2012
Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Operations Agent - Opcode 'coda.exe' 0x34 Buffer Overflow (Metasploit)
CVE-2012-2019—remotewindows29 out 2012
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via u
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Operations Agent - Opcode 'coda.exe' 0x8c Buffer Overflow (Metasploit)
CVE-2012-2020—remotewindows29 out 2012
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via u
50RISCO
abrir ↗
Metasploit600
Invision IP.Board unserialize() PHP Code Execution
CVE-2012-5692—25 out 2012
Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Bitweaver 2.8.1 - Multiple Vulnerabilities
CVE-2012-5192—webappsphp24 out 2012
Directory traversal vulnerability in gmap/view_overlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to rea
50RISCO
abrir ↗
Metasploit300
ClanSphere 2011.3 Local File Inclusion Vulnerability
CVE-2012-10034HIGH23 out 2012
ClanSphere 2011.3 Local File Inclusion via cs_lang Cookie
36RISCO
abrir ↗
Metasploit300
Bitweaver overlay_type Directory Traversal
CVE-2012-5192—23 out 2012
Directory traversal vulnerability in gmap/view_overlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to rea
50RISCO
abrir ↗
← anteriorpágina 1284 / 2.906próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.