Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.168exploits catalogados

40.553CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentes populares risco

87.168 exploits

Exploit-DB

Template CMS 2.1.1 - Multiple Vulnerabilities

CVE-2012-4901—webappsphp04 out 2012

Cross-site scripting (XSS) vulnerability in Template CMS 2.1.1 and earlier allows remote attackers to inject arbitrary w

23RISCO

abrir ↗

Exploit-DB

Template CMS 2.1.1 - Multiple Vulnerabilities

CVE-2012-4902—webappsphp04 out 2012

Multiple cross-site request forgery (CSRF) vulnerabilities in Template CMS 2.1.1 and earlier allow remote attackers to h

23RISCO

abrir ↗

Metasploit500

Turbo FTP Server 1.30.823 PORT Overflow

CVE-2012-10035CRITICAL03 out 2012

Turbo FTP Server 1.30.823/826 PORT Command Buffer Overflow

43RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PowerTCP WebServer for - ActiveX Denial of Service

CVE-2012-3819—doswindows28 set 2012

Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX and

23RISCO

abrir ↗

Exploit-DB

JAMF Casper Suite MDM - Cross-Site Request Forgery

CVE-2012-4051—webappsjsp27 set 2012

Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF Software Server (JSS) interfa

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Trend Micro Control Manager 5.5/6.0 AdHocQuery - (Authenticated) Blind SQL Injection

CVE-2012-2998—webappswindows27 set 2012

SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 b

23RISCO

abrir ↗

Exploit-DB

Cisco DPC2100 - Denial of Service

CVE-2011-1613—doshardware26 set 2012

Unspecified vulnerability in Cisco Wireless LAN Controller (WLC) software 6.0 before 6.0.200.0, 7.0 before 7.0.98.216, a

28RISCO

abrir ↗

Metasploit300

phpMyAdmin 3.5.2.2 server_sync.php Backdoor

CVE-2012-5159—25 set 2012

phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an e

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WordPress Plugin MF Gig Calendar - Cross-Site Scripting

CVE-2012-4242—webappsphp20 set 2012

Cross-site scripting (XSS) vulnerability in the MF Gig Calendar plugin 0.9.2 for WordPress allows remote attackers to in

38RISCO

abrir ↗

Metasploit600

Kloxo Local Privilege Escalation

CVE-2012-10022HIGH18 set 2012

Kloxo <= 6.1.12 Local Privilege Escalation

36RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CoSoSys Endpoint Protector - Predictable Password Generation

CVE-2012-2994—remotehardware17 set 2012

The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial number

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Novell Groupwise 8.0.2 HP3 and 2012 - Integer Overflow

CVE-2012-0271—doswindows17 set 2012

Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 befo

28RISCO

abrir ↗

Exploit-DB

Netsweeper WebAdmin Portal - Multiple Vulnerabilities

CVE-2012-3859—webappsphp17 set 2012

Unspecified vulnerability in the WebAdmin Portal in Netsweeper has unknown impact and attack vectors, a different vulner

23RISCO

abrir ↗

Metasploit400

MS12-063 Microsoft Internet Explorer execCommand Use-After-Free Vulnerability

CVE-2012-4969HIGHsob ataque14 set 2012

Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 al

100RISCO

abrir ↗

Metasploit600

ZEN Load Balancer Filelog Command Execution

CVE-2012-10039CRITICAL14 set 2012

ZEN Load Balancer Filelog Command Execution

63RISCO

abrir ↗

Metasploit600

Auxilium RateMyPet Arbitrary File Upload Vulnerability

CVE-2012-10038CRITICAL14 set 2012

Auxilium RateMyPet Arbitrary File Upload RCE

63RISCO

abrir ↗

Exploit-DB

Trend Micro Interscan Messaging Security Suite - Persistent Cross-Site Scripting / Cross-Site Request Forgery

CVE-2012-2996—webappsaix14 set 2012

Cross-site request forgery (CSRF) vulnerability in saveAccountSubTab.imss in Trend Micro InterScan Messaging Security Su

23RISCO

abrir ↗

Exploit-DB

Trend Micro Interscan Messaging Security Suite - Persistent Cross-Site Scripting / Cross-Site Request Forgery

CVE-2012-2995—webappsaix14 set 2012

Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_13

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Winamp - MAKI Buffer Overflow (Metasploit)

CVE-2009-1831—localwindows12 set 2012

The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute

50RISCO

abrir ↗

Exploit-DB

Subrion CMS 2.2.1 - Cross-Site Request Forgery (Add Admin)

CVE-2012-4773—webappsphp12 set 2012

Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack

23RISCO

abrir ↗

Exploit-DB

Ezylog Photovoltaic Management Server - Multiple Vulnerabilities

CVE-2012-5862—webappsphp12 set 2012

Sinapsi eSolar Hard-Coded Password

53RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Google Chrome for Android - Same-origin Policy Bypass Local Symlink

CVE-2012-4908—remoteandroid12 set 2012

Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Google Chrome for Android - Multiple 'file::' URL Handler Local Downloaded Content Disclosure Vulnerabilities

CVE-2012-4906—remoteandroid12 set 2012

Google Chrome before 18.0.1025308 on Android does not properly restrict access to file: URLs, which allows remote attack

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Google Chrome for Android - com.android.browser.application_id Intent Extra Data Cross-Site Scripting

CVE-2012-4905—remoteandroid12 set 2012

Cross-site scripting (XSS) vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inje

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Google Chrome for Android - Local Application Handling Cookie Theft

CVE-2012-4909—remoteandroid12 set 2012

Google Chrome before 18.0.1025308 on Android allows remote attackers to obtain cookie information via a crafted applicat

23RISCO

abrir ↗

Exploit-DB

Ezylog Photovoltaic Management Server - Multiple Vulnerabilities

CVE-2012-5863—webappsphp12 set 2012

Sinapsi eSolar OS Command Injection

53RISCO

abrir ↗

Exploit-DB

Ezylog Photovoltaic Management Server - Multiple Vulnerabilities

CVE-2012-5861—webappsphp12 set 2012

Sinapsi eSolar SQL Injection

41RISCO

abrir ↗

Exploit-DB

Ezylog Photovoltaic Management Server - Multiple Vulnerabilities

CVE-2012-5864—webappsphp12 set 2012

Sinapsi eSolar Improper Authentication

48RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

libguac - Remote Buffer Overflow

CVE-2012-4415—remotelinux11 set 2012

Stack-based buffer overflow in the guac_client_plugin_open function in libguac in Guacamole before 0.6.3 allows remote a

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DELTAScripts PHP Links - Multiple SQL Injections

CVE-2008-6720—webappsphp10 set 2012

SQL injection vulnerability in admin/adm_login.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.