Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.331exploits catalogados
40.631CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.377Exploit-DB 24.489GitHub PoC 18.131VulnCheck XDB 10.218Nuclei 4.577Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.331 exploits
Exploit-DB
Freelancer Calendar 1.01 - SQL Injection
CVE-2011-5109—webappsphp19 nov 2011
Multiple SQL injection vulnerabilities in Freelancer calendar 1.01 and earlier allow remote attackers to inject arbitrar
23RISCO
abrir ↗
Exploit-DB
Blogs manager 1.101 - SQL Injection
CVE-2011-5110—webappsphp19 nov 2011
Multiple SQL injection vulnerabilities in Blogs Manager 1.101 and earlier allow remote attackers to execute arbitrary SQ
23RISCO
abrir ↗
Exploit-DB
Valid tiny-erp 1.6 - SQL Injection
CVE-2011-4672—webappsphp19 nov 2011
Multiple SQL injection vulnerabilities in Valid tiny-erp 1.6 and earlier allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗
Exploit-DB
Support Incident Tracker 3.65 - 'translate.php' Remote Code Execution
CVE-2011-4337—webappsphp19 nov 2011
Static code injection vulnerability in translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows rem
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Wireshark - console.lua pre-loading (Metasploit)
CVE-2011-3360—remotewindows19 nov 2011
Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain pr
50RISCO
abrir ↗
Exploit-DB
Support Incident Tracker 3.65 - 'translate.php' Remote Code Execution
CVE-2011-5075—webappsphp19 nov 2011
translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive infor
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Jetty Web Server - Directory Traversal
CVE-2009-1523—remotewindows18 nov 2011
Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Viscom Image Viewer CP Pro 8.0/Gold 6.0 - ActiveX Control (Metasploit)
CVE-2010-5194—remotewindows17 nov 2011
Stack-based buffer overflow in the Image2PDF function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx)
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 - Cross-Site Scripting
CVE-2011-5105—webappsphp17 nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Bui
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Flexible Custom Post Type - 'id' Cross-Site Scripting
CVE-2011-5106—webappsphp17 nov 2011
Cross-site scripting (XSS) vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for WordP
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Viscom Image Viewer CP Pro 8.0/Gold 6.0 - ActiveX Control (Metasploit)
CVE-2010-5193—remotewindows17 nov 2011
Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageView
50RISCO
abrir ↗
Exploit-DB
Attachmate Reflection FTP Client - Heap Overflow
CVE-2011-5012—doswindows16 nov 2011
Heap-based buffer overflow in the Reflection FTP Client (rftpcom.dll 7.2.0.106 and possibly other versions), as used in
23RISCO
abrir ↗
Exploit-DB
SonicWALL Aventail SSL-VPN - SQL Injection
CVE-2011-5262—webappshardware16 nov 2011
SQL injection vulnerability in prodpage.cfm in SonicWALL Aventail allows remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
FreeWebShop 2.2.9 R2 - 'ajax_save_name.php' Remote Code Execution
CVE-2011-5147—webappsphp16 nov 2011
Static code injection vulnerability in ajax_save_name.php in the Ajax File Manager module in the tinymce plugin in FreeW
23RISCO
abrir ↗
Exploit-DB
Authenex A-Key/ASAS Web Management Control 3.1.0.2 - Blind SQL Injection
CVE-2011-4801—webappsmultiple15 nov 2011
SQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in Authenex Strong Authenticati
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
QuiXplorer 2.3 - Bugtraq Arbitrary File Upload
CVE-2011-5005—webappsphp15 nov 2011
Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code b
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
optima apiftp server 1.5.2.13 - Multiple Vulnerabilities
CVE-2012-5049—doswindows14 nov 2011
APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (infinite l
23RISCO
abrir ↗
Exploit-DB
Pixie CMS 1.01 < 1.04 - Blind SQL Injections
CVE-2011-4710—webappsphp14 nov 2011
Multiple SQL injection vulnerabilities in Pixie CMS 1.01 through 1.04 allow remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
optima apiftp server 1.5.2.13 - Multiple Vulnerabilities
CVE-2012-5048—doswindows14 nov 2011
APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (NULL point
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin AdRotate 3.6.6 - SQL Injection
CVE-2011-4671—webappsphp14 nov 2011
SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8,
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mini-stream RM-MP3 Converter 3.1.2.1 - '.pls' Local Stack Buffer Overflow (Metasploit)
CVE-2010-5081—localwindows14 nov 2011
Stack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to execute arbitrary code vi
50RISCO
abrir ↗
Exploit-DB
Mambo 4.x - 'Zorder' SQL Injection
CVE-2011-2917—webappsphp13 nov 2011
SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execut
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Search Plugin for Hotaru CMS 1.4.2 - 'admin_index.php?site_name' Cross-Site Scripting
CVE-2011-4709—webappsphp13 nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in Hotaru.php in the Search plugin 1.3 for Hotaru CMS allow remote a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Support Incident Tracker 3.65 - Remote Command Execution (Metasploit)
CVE-2011-3833—webappsphp13 nov 2011
Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Support Incident Tracker 3.65 - Remote Command Execution (Metasploit)
CVE-2011-3829—webappsphp13 nov 2011
ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive in
43RISCO
abrir ↗
Metasploit600
HP StorageWorks P4000 Virtual SAN Appliance Command Execution
CVE-2012-4361—11 nov 2011
lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to exe
50RISCO
abrir ↗
Metasploit600
Support Incident Tracker Remote Command Execution
CVE-2011-3833—10 nov 2011
Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote
43RISCO
abrir ↗
Metasploit600
Support Incident Tracker Remote Command Execution
CVE-2011-3829—10 nov 2011
ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive in
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
glibc - 'LD_AUDIT' Arbitrary DSO Load Privilege Escalation
CVE-2010-3856—locallinux10 nov 2011
ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use
43RISCO
abrir ↗
Metasploit400
Aviosoft Digital TV Player Professional 1.0 Stack Buffer Overflow
CVE-2011-4496—09 nov 2011
Buffer overflow in Aviosoft DTV Player 1.0.1.2 allows remote attackers to execute arbitrary code via a crafted .plf (aka
23RISCO
abrir ↗
← anteriorpágina 1334 / 2.912próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.