Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.168exploits catalogados

40.553CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentes populares risco

87.168 exploits

Metasploit600

Mutiny Remote Command Execution

CVE-2012-3001—22 out 2012

Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, re

43RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

subrion CMS 2.2.1 - Multiple Vulnerabilities

CVE-2012-4772—webappsphp22 out 2012

SQL injection vulnerability in register/ in Subrion CMS before 2.2.3 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Exploit-DB

Movable Type Pro 5.13en - Persistent Cross-Site Scripting

CVE-2012-1503—webappsphp22 out 2012

Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT) Pro 5.13 allows remote a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WordPress Plugin White Label CMS 1.5 - Cross-Site Request Forgery / Persistent Cross-Site Scripting

CVE-2012-5388—webappsphp22 out 2012

Cross-site scripting (XSS) vulnerability in wlcms-plugin.php in the White Label CMS plugin 1.5 for WordPress allows remo

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

subrion CMS 2.2.1 - Multiple Vulnerabilities

CVE-2012-4771—webappsphp22 out 2012

Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to inject arbitra

23RISCO

abrir ↗

Exploit-DB

ATutor 1.2 - Multiple Vulnerabilities

CVE-2012-5167—webappsphp22 out 2012

Multiple SQL injection vulnerabilities in ATutor AContent before 1.2-1 allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

subrion CMS 2.2.1 - Multiple Vulnerabilities

CVE-2012-5452—webappsphp22 out 2012

Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS 2.2.1 allow remote attackers to inject arbitrary web

23RISCO

abrir ↗

Exploit-DB

ATutor 1.2 - Multiple Vulnerabilities

CVE-2012-5453—webappsphp22 out 2012

SQL injection vulnerability in user/index_inline_editor_submit.php in ATutor AContent 1.2-1 allows remote authenticated

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

subrion CMS 2.2.1 - Multiple Vulnerabilities

CVE-2012-4773—webappsphp22 out 2012

Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WordPress Plugin White Label CMS 1.5 - Cross-Site Request Forgery / Persistent Cross-Site Scripting

CVE-2012-5387—webappsphp22 out 2012

Cross-site request forgery (CSRF) vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordP

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WebTitan - 'logs-x.php' Directory Traversal

CVE-2011-4640—webappsphp20 out 2012

Directory traversal vulnerability in logs-x.php in SpamTitan WebTitan before 3.60 allows remote authenticated users to r

38RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

OTRS 3.1 - Persistent Cross-Site Scripting

CVE-2012-4751—webappswindows18 out 2012

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.15, 3.0.x befor

23RISCO

abrir ↗

Exploit-DB

Oracle Database - Protocol Authentication Bypass

CVE-2012-3137—localmultiple18 out 2012

The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 all

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

OTRS 3.1 - Persistent Cross-Site Scripting

CVE-2012-4600—webappswindows18 out 2012

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.14, 3.0.x befor

23RISCO

abrir ↗

Metasploit300

Drupal OpenID External Entity Injection

CVE-2012-4554—17 out 2012

The OpenID module in Drupal 7.x before 7.16 allows remote OpenID servers to read arbitrary files via a crafted DOCTYPE d

23RISCO

abrir ↗

Exploit-DB

Oracle WebCenter Sites (FatWire Content Server) - Multiple Vulnerabilities

CVE-2012-3183—webappsmultiple17 out 2012

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1,

23RISCO

abrir ↗

Exploit-DB

Oracle WebCenter Sites (FatWire Content Server) - Multiple Vulnerabilities

CVE-2012-3186—webappsmultiple17 out 2012

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1,

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

jCore - '/admin/index.php?path' Cross-Site Scripting

CVE-2012-4231—webappsphp17 out 2012

Cross-site scripting (XSS) vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to inject ar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ModSecurity - 'POST' Security Bypass

CVE-2012-4528—remotelinux17 out 2012

The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver ar

28RISCO

abrir ↗

Exploit-DB

Oracle WebCenter Sites (FatWire Content Server) - Multiple Vulnerabilities

CVE-2012-3184—webappsmultiple17 out 2012

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1,

23RISCO

abrir ↗

Exploit-DB

Oracle WebCenter Sites (FatWire Content Server) - Multiple Vulnerabilities

CVE-2012-3185—webappsmultiple17 out 2012

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1,

23RISCO

abrir ↗

Metasploit600

Sun Java Web Start Double Quote Injection

CVE-2012-1533—16 out 2012

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and

50RISCO

abrir ↗

Exploit-DB

Samsung Kies 2.3.2.12054_20 - Multiple Vulnerabilities

CVE-2012-3809—remotewindows16 out 2012

Samsung Kies before 2.5.0.12094_27_11 has arbitrary directory modification.

23RISCO

abrir ↗

Exploit-DB

Samsung Kies 2.3.2.12054_20 - Multiple Vulnerabilities

CVE-2012-3807—remotewindows16 out 2012

Samsung Kies before 2.5.0.12094_27_11 has arbitrary file execution.

35RISCO

abrir ↗

Exploit-DB

Samsung Kies 2.3.2.12054_20 - Multiple Vulnerabilities

CVE-2012-3810—remotewindows16 out 2012

Samsung Kies before 2.5.0.12094_27_11 has registry modification.

23RISCO

abrir ↗

Exploit-DB

Samsung Kies 2.3.2.12054_20 - Multiple Vulnerabilities

CVE-2012-3808—remotewindows16 out 2012

Samsung Kies before 2.5.0.12094_27_11 has arbitrary file modification.

23RISCO

abrir ↗

Exploit-DB

EZHomeTech EzServer 7.0 - Remote Heap Corruption

CVE-2012-4750—doswindows16 out 2012

A Code Execution vulnerability exists in the memcpy function when processing AMF requests in Ezhometech EzServer 7.0, wh

23RISCO

abrir ↗

Metasploit600

Java Applet Method Handle Remote Code Execution

CVE-2012-5088—16 out 2012

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allow

60RISCO

abrir ↗

Metasploit600

Ektron 8.02 XSLT Transform Remote Code Execution

CVE-2012-5357—16 out 2012

Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true

50RISCO

abrir ↗

Metasploit600

Java Applet AverageRangeStatisticImpl Remote Code Execution

CVE-2012-5076CRITICALsob ataque16 out 2012

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allow

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.