Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.168exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.168 exploits
Exploit-DB✓ VexDay Proof
TYPSoft FTP Server 1.1 - 'APPE' Remote Buffer Overflow
CVE-2012-5329—doswindows19 mar 2012
Buffer overflow in TYPSoft FTP Server 1.1 allows remote authenticated users to cause a denial of service (application cr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server - Arbitrary File Deletion
CVE-2012-1196—remotewindows19 mar 2012
Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagemen
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WebGlimpse 2.x - 'wgarcmin.cgi' Full Path Disclosure
CVE-2009-5112—webappscgi18 mar 2012
wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted requ
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Pre Printing Press - 'product_desc.php?pid' SQL Injection
CVE-2012-5334—webappsphp18 mar 2012
SQL injection vulnerability in product_desc.php in Pre Printing Press allows remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗
Exploit-DB
ASP Classifieds - SQL Injection
CVE-2007-2675—webappsphp17 mar 2012
SQL injection vulnerability in search.php in Pre Classifieds Listings 1.0 allows remote attackers to execute arbitrary S
23RISCO
abrir ↗
Exploit-DB
TYPSoft FTP Server 1.1 - 'APPE' Remote Denial of Service
CVE-2012-5329—doswindows17 mar 2012
Buffer overflow in TYPSoft FTP Server 1.1 allows remote authenticated users to cause a denial of service (application cr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PRE PRINTING STUDIO - SQL Injection
CVE-2012-5333—webappsphp17 mar 2012
SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Terminal Services - Use-After-Free (MS12-020)
CVE-2012-0002—doswindows16 mar 2012
The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows V
60RISCO
abrir ↗
Metasploit300
MS12-020 Microsoft Remote Desktop Use-After-Free DoS
CVE-2012-0002—16 mar 2012
The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows V
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Tiny Server 1.1.5 - Arbitrary File Disclosure
CVE-2012-5335—remotewindows16 mar 2012
Directory traversal vulnerability in Tiny Server 1.1.5 allows remote authenticated users to read arbitrary files via a .
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
FlexCMS 3.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities
CVE-2012-1901—webappsphp16 mar 2012
Multiple cross-site request forgery (CSRF) vulnerabilities in FlexCMS 3.2.1 and earlier allow remote attackers to (1) hi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Netmechanica NetDecision HTTP Server 4.5.1 - Remote Buffer Overflow (Metasploit)
CVE-2012-1465—remotewindows15 mar 2012
Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause
43RISCO
abrir ↗
Metasploit300
VLC MMS Stream Handling Buffer Overflow
CVE-2012-1775—15 mar 2012
Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code
50RISCO
abrir ↗
Exploit-DB
Asterisk - 'ast_parse_digest()' Stack Buffer Overflow (PoC)
CVE-2012-1184—doslinux15 mar 2012
Stack-based buffer overflow in the ast_parse_digest function in main/utils.c in Asterisk 1.8.x before 1.8.10.1 and 10.x
28RISCO
abrir ↗
Metasploit300
Sockso Music Host Server 1.5 Directory Traversal
CVE-2012-10061HIGH14 mar 2012
Sockso Music Host Server <= 1.5 Path Traversal
36RISCO
abrir ↗
Exploit-DB
Sitecom WLM-2501 - Cross-Site Request Forgery
CVE-2012-1921—webappshardware14 mar 2012
Cross-site request forgery (CSRF) vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501 allows remote attacker
23RISCO
abrir ↗
Exploit-DB
Sitecom WLM-2501 - Cross-Site Request Forgery
CVE-2012-1922—webappshardware14 mar 2012
Multiple cross-site request forgery (CSRF) vulnerabilities in Sitecom WLM-2501 allow remote attackers to hijack the auth
23RISCO
abrir ↗
Exploit-DB
asaanCart - Cross-Site Scripting / Local File Inclusion
CVE-2012-5330—webappsphp14 mar 2012
Multiple cross-site scripting (XSS) vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web scri
23RISCO
abrir ↗
Exploit-DB
asaanCart - Cross-Site Scripting / Local File Inclusion
CVE-2012-5331—webappsphp14 mar 2012
Directory traversal vulnerability in asaanCart 0.9 allows remote attackers to include arbitrary local files via a .. (do
23RISCO
abrir ↗
Exploit-DB
PBLang Bulletin Board System - Local File Inclusion
CVE-2005-2892—webappsphp13 mar 2012
Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attacker
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
LightDM 1.0.6 - Arbitrary File Deletion
CVE-2012-0943—locallinux13 mar 2012
debian/guest-account in Light Display Manager (lightdm) 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Lin
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Litespeed Web Server - 'gtitle' Cross-Site Scripting
CVE-2012-4871—remotemultiple12 mar 2012
Cross-site scripting (XSS) vulnerability in service/graph_html.php in the administrator panel in LiteSpeed Web Server 4.
23RISCO
abrir ↗
Exploit-DB
GOM Media Player 2.1.37 - Buffer Overflow
CVE-2012-1774—doswindows12 mar 2012
Unspecified vulnerability in the Open URL feature in Gretech GOM Media Player before 2.1.39.5101 has unknown impact and
23RISCO
abrir ↗
Metasploit300
HP Data Protector Create New Folder Buffer Overflow
CVE-2012-0124—12 mar 2012
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Wikidforum 2.10 - Search Field Cross-Site Scripting
CVE-2012-2099—webappsphp12 mar 2012
Multiple cross-site scripting (XSS) vulnerabilities in Wikidforum 2.10 allow remote attackers to inject arbitrary web sc
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Wikidforum 2.10 - Advanced Search Multiple Field SQL Injections
CVE-2012-6520—webappsphp12 mar 2012
Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote attackers to execute arbit
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Wikidforum 2.10 - Advanced Search Multiple Cross-Site Scripting Vulnerabilities
CVE-2012-2099—webappsphp12 mar 2012
Multiple cross-site scripting (XSS) vulnerabilities in Wikidforum 2.10 allow remote attackers to inject arbitrary web sc
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Synology Photo Station 5 DSM 3.2 - 'photo_one.php' Script Cross-Site Scripting
CVE-2012-1556—webappsphp12 mar 2012
Cross-site scripting (XSS) vulnerability in Synology Photo Station 5 for DiskStation Manager (DSM) 3.2-1955 allows remot
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
CreateVision CMS - 'id' SQL Injection
CVE-2012-1778—webappsphp11 mar 2012
SQL injection vulnerability in artykul_print.php in CreateVision CMS allows remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗
Exploit-DB
PHP Address Book 6.2.12 - Multiple Vulnerabilities
CVE-2012-1912—webappsphp10 mar 2012
Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers
23RISCO
abrir ↗
← anteriorpágina 1310 / 2.906próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.