Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.331exploits catalogados
40.631CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.377Exploit-DB 24.489GitHub PoC 18.131VulnCheck XDB 10.218Nuclei 4.577Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.331 exploits
Metasploit300
Avid Media Composer 5.5 - Avid Phonetic Indexer Buffer Overflow
CVE-2011-5003—29 nov 2011
Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier a
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Oxide WebServer - Directory Traversal
CVE-2011-4712—remotewindows29 nov 2011
Directory traversal vulnerability in Oxide WebServer allows remote attackers to read arbitrary files via a ..\ (dot dot
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities
CVE-2011-4876—doswindows28 nov 2011
Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008;
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities
CVE-2011-4878—doswindows28 nov 2011
Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities
CVE-2011-4532—doswindows28 nov 2011
Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical use
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities
CVE-2011-4529—doswindows28 nov 2011
Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allow remote attackers to
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities
CVE-2011-4530—doswindows28 nov 2011
Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, w
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities
CVE-2011-4879—doswindows28 nov 2011
miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA po
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities
CVE-2011-4531—doswindows28 nov 2011
Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service (
23RISCO
abrir ↗
Exploit-DB
Google Android - 'content://' URI Multiple Information Disclosure Vulnerabilities
CVE-2010-4804—webappsandroid28 nov 2011
The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// UR
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities
CVE-2011-4877—doswindows28 nov 2011
HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP,
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Skysa App Bar - 'idnews' Cross-Site Scripting
CVE-2011-5179—webappsphp28 nov 2011
Cross-site scripting (XSS) vulnerability in skysa-official/skysa.php in Skysa App Bar Integration plugin, possibly befor
38RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities
CVE-2011-4875—doswindows28 nov 2011
Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC
28RISCO
abrir ↗
Metasploit600
V-CMS PHP File Upload and Execute
CVE-2011-4828—27 nov 2011
Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote atta
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
eSyndiCat Pro 2.3.5 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2011-5177—webappsphp26 nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in admin/controller.php in eSyndiCat Pro 2.3.05 allow remote attacke
23RISCO
abrir ↗
Exploit-DB
PHP video script - SQL Injection
CVE-2011-5103—webappsphp25 nov 2011
SQL injection vulnerability in Alurian Prismotube PHP Video Script allows remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗
Metasploit300
Yaws Web Server Directory Traversal
CVE-2011-4350—25 nov 2011
Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user cou
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
XChat 2.8.9 - Heap Overflow Denial of Service
CVE-2011-5129—doslinux25 nov 2011
Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and p
23RISCO
abrir ↗
Exploit-DB
Log1 CMS 2.0 - 'ajax_create_folder.php' Remote Code Execution
CVE-2011-4825—webappsphp24 nov 2011
Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinym
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Balitbang CMS 3.3 - 'index.php?hal' SQL Injection
CVE-2011-5111—webappsphp24 nov 2011
Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary S
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Network Node Manager (NMM) i 9.10 - '/nnm/mibdiscover?node' Cross-Site Scripting
CVE-2011-5184—webappsjsp24 nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AdaptCMS 2.0 - SQL Injection
CVE-2011-5108—webappsphp24 nov 2011
Cross-site scripting (XSS) vulnerability in config.php in AdaptCMS 2.0.0 and 2.0.1 allows remote attackers to inject arb
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/statuspoll.jsp?nodename' Cross-Site Scripting
CVE-2011-5184—webappsjsp24 nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject a
23RISCO
abrir ↗
Exploit-DB
LibLime Koha 4.2 - Local File Inclusion
CVE-2011-4715—webappscgi24 nov 2011
Directory traversal vulnerability in cgi-bin/koha/mainpage.pl in Koha 3.4 before 3.4.7 and 3.6 before 3.6.1, and LibLime
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Balitbang CMS 3.3 - 'alumni.php?hal' SQL Injection
CVE-2011-5111—webappsphp24 nov 2011
Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary S
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/configurationpoll.jsp?nodename' Cross-Site Scripting
CVE-2011-5184—webappsjsp24 nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Zabbix 1.8.4 - 'popup.php' SQL Injection
CVE-2011-4674—webappsphp24 nov 2011
SQL injection vulnerability in popup.php in Zabbix 1.8.3 and 1.8.4, and possibly other versions before 1.8.9, allows rem
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/traceroute.jsp?nodename' Cross-Site Scripting
CVE-2011-5184—webappsjsp24 nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/ping.jsp?nodename' Cross-Site Scripting
CVE-2011-5184—webappsjsp24 nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache 7.0.x mod_proxy - Reverse Proxy Security Bypass
CVE-2011-4317—remotelinux24 nov 2011
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, whe
35RISCO
abrir ↗
← anteriorpágina 1332 / 2.912próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.