Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
88.056 exploits
Exploit-DB✓ VexDay Proof
Batch Audio Converter Lite Edition 1.0.0.0 - Local Stack Buffer Overflow (SEH)
CVE-2010-2348—localwindows17 jun 2010
Stack-based buffer overflow in Batch Audio Converter Lite Edition 1.0.0.0 and earlier allows remote attackers to execute
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
File Sharing Wizard 1.5.0 - Remote Overflow (SEH)
CVE-2010-2331—remotewindows17 jun 2010
Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to execute arbitrary code via a
23RISCO
abrir ↗
Metasploit400
Samba chain_reply Memory Corruption (Linux x86)
CVE-2010-2063—16 jun 2010
Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
2DayBiz Online Classified System - SQL Injection / Cross-Site Scripting
CVE-2010-5018—webappsphp16 jun 2010
Cross-site scripting (XSS) vulnerability in products/classified/headersearch.php in 2daybiz Online Classified Script all
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
2DayBiz Online Classified System - SQL Injection / Cross-Site Scripting
CVE-2010-5019—webappsphp16 jun 2010
SQL injection vulnerability in view_photo.php in 2daybiz Online Classified Script allows remote attackers to execute arb
23RISCO
abrir ↗
Exploit-DB
Nakid CMS 0.5.2 - Remote File Inclusion
CVE-2010-2358—webappsphp16 jun 2010
PHP remote file inclusion vulnerability in modules/catalog/upload_photo.php in Nakid CMS 0.5.2, when magic_quotes_gpc is
23RISCO
abrir ↗
Exploit-DB
EZPX Photoblog 1.2 Beta - Remote File Inclusion
CVE-2010-2341—webappsphp16 jun 2010
PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta al
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
2DayBiz ybiz Network Community Script - SQL Injection / Cross-Site Scripting
CVE-2010-5015—webappsphp16 jun 2010
SQL injection vulnerability in view_photo.php in 2daybiz Network Community Script allows remote attackers to execute arb
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Rosoft Audio Converter 4.4.4 - Local Buffer Overflow
CVE-2010-2329—localwindows16 jun 2010
Buffer overflow in Rosoft Audio Converter 4.4.4 allows remote attackers to execute arbitrary code via a long playlist en
23RISCO
abrir ↗
Metasploit500
HP OpenView Network Node Manager ovwebsnmpsrv.exe main Buffer Overflow
CVE-2010-1964—16 jun 2010
Buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers t
50RISCO
abrir ↗
Metasploit500
HP OpenView Network Node Manager ovwebsnmpsrv.exe ovutil Buffer Overflow
CVE-2010-1961—16 jun 2010
Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remo
50RISCO
abrir ↗
Metasploit300
Titan FTP XCRC Directory Traversal Information Disclosure
CVE-2010-2426—15 jun 2010
Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earl
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
CA BrightStor ARCserve Backup - 'AddColumn()' ActiveX Buffer Overflow (Metasploit)
CVE-2008-1472—remotewindows15 jun 2010
Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including Br
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PuTTy.exe 0.53 - Remote Buffer Overflow (Metasploit)
CVE-2002-1359—remotewindows15 jun 2010
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Quick TFTP Server Pro 2.1 - Transfer-Mode Overflow (Metasploit)
CVE-2008-1610—remotewindows15 jun 2010
Stack-based buffer overflow in TallSoft Quick TFTP Server Pro 2.1 allows remote attackers to cause a denial of service o
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
CUPS 1.4.2 - Web Interface Information Disclosure
CVE-2010-1748—remotelinux15 jun 2010
The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MailEnable - IMAPD W3C Logging Buffer Overflow (Metasploit)
CVE-2005-3155—remotewindows15 jun 2010
Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
FlipViewer FViewerLoading - ActiveX Control Buffer Overflow (Metasploit)
CVE-2007-2919—remotewindows15 jun 2010
Multiple stack-based buffer overflows in the FViewerLoading ActiveX control (FlipViewerX.dll) in E-Book Systems FlipView
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Tumbleweed SecureTransport FileTransfer - 'vcst_eu.dll' ActiveX Control Buffer Overflow (Metasploit)
CVE-2008-1724—remotewindows15 jun 2010
Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX cont
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Trellian FTP Client 3.01 - PASV Remote Buffer Overflow (Metasploit)
CVE-2010-1465—remotewindows15 jun 2010
Stack-based buffer overflow in Trellian FTP client 3.01, including 3.1.3.1789, allows remote attackers to execute arbitr
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SasCam 2.6.5 - Remote HTTP Server Crash
CVE-2010-2505—doswindows15 jun 2010
Soft SaschArt SasCAM Webcam Server 2.6.5, 2.7, and earlier allows remote attackers to cause a denial of service (crash)
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Alt-N MDaemon 9.6.4 - IMAPD FETCH Buffer Overflow (Metasploit)
CVE-2008-1358—remotewindows15 jun 2010
Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Borland Interbase - 'Create-Request' Remote Buffer Overflow (Metasploit)
CVE-2007-3566—remotewindows15 jun 2010
Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote at
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe - JBIG2Decode Memory Corruption (Metasploit) (1)
CVE-2009-0658—localwindows15 jun 2010
Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitra
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Borland CaliberRM - StarTeam Multicast Service Buffer Overflow (Metasploit)
CVE-2008-0311—remotewindows15 jun 2010
Stack-based buffer overflow in the PGMWebHandler::parse_request function in the StarTeam Multicast Service component (ST
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft IIS 5.0 - IDQ Path Overflow (MS01-033) (Metasploit)
CVE-2001-0500—remotewindows15 jun 2010
Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier a
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ShixxNOTE 6.net - Font Field Overflow (Metasploit)
CVE-2004-1595—remotewindows15 jun 2010
Buffer overflow in ShixxNote 6.net build 117 allows remote attackers to execute arbitrary code via a long font field.
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
RealPlayer - 'rmoc3260.dll' ActiveX Control Heap Corruption (Metasploit)
CVE-2008-1309—remotewindows15 jun 2010
The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, Rea
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SIPfoundry sipXphone 2.6.0.27 - CSeq Buffer Overflow (Metasploit)
CVE-2006-3524—remotewindows15 jun 2010
Buffer overflow in SIPfoundry sipXtapi released before 20060324 allows remote attackers to execute arbitrary code via a
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AIM Triton 1.0.4 - CSeq Buffer Overflow (Metasploit)
CVE-2006-3524—remotewindows15 jun 2010
Buffer overflow in SIPfoundry sipXtapi released before 20060324 allows remote attackers to execute arbitrary code via a
50RISCO
abrir ↗
← anteriorpágina 1421 / 2.936próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.