Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.554exploits catalogados

37.311CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.478Referência 23.776GitHub PoC 15.364VulnCheck XDB 9.019Nuclei 4.415Metasploit 3.502✓ só verificadosrecentes populares risco

24.478 exploits

Exploit-DB

Shopizer 1.1.5 - Multiple Vulnerabilities

CVE-2014-4962—webappsphp14 jul 2014

Shopizer 1.1.5 and earlier allows remote attackers to reduce the total cost of their shopping cart via a negative number

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Kolibri Web Server 2.0 - GET (SEH)

CVE-2014-4158—remotewindows14 jul 2014

Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a GET req

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

D-Link HNAP - Request Remote Buffer Overflow (Metasploit)

CVE-2014-3936—remotehardware14 jul 2014

Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b06

60RISCO

abrir ↗

Exploit-DB

Shopizer 1.1.5 - Multiple Vulnerabilities

CVE-2014-4963—webappsphp14 jul 2014

Shopizer 1.1.5 and earlier allows remote attackers to modify the account settings of arbitrary users via the customer.cu

23RISCO

abrir ↗

Exploit-DB

Shopizer 1.1.5 - Multiple Vulnerabilities

CVE-2014-4965—webappsphp14 jul 2014

Multiple cross-site scripting (XSS) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to inject arbit

23RISCO

abrir ↗

Exploit-DB

Shopizer 1.1.5 - Multiple Vulnerabilities

CVE-2014-4964—webappsphp14 jul 2014

Multiple cross-site request forgery (CSRF) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to hijac

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

HP Data Protector Manager 8.10 - Remote Command Execution

CVE-2014-2623—remotewindows14 jul 2014

Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WordPress Plugin DZS-VideoGallery - Cross-Site Scripting / Command Injection

CVE-2014-9094—webappsphp13 jul 2014

Multiple cross-site scripting (XSS) vulnerabilities in deploy/designer/preview.php in the Digital Zoom Studio (DZS) Vide

38RISCO

abrir ↗

Exploit-DB

OpenVPN Private Tunnel Core Service - Unquoted Service Path Privilege Escalation

CVE-2014-5455MEDIUMlocalwindows_x8612 jul 2014

Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and Ope

33RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WeBid - Multiple Cross-Site Scripting / LDAP Injection Vulnerabilities

CVE-2014-5101—webappsphp10 jul 2014

Multiple cross-site scripting (XSS) vulnerabilities in WeBid 1.1.1 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB

OpenVAS Manager 4.0 - Authentication Bypass

CVE-2013-6765—remotelinux10 jul 2014

OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP authentication restricti

23RISCO

abrir ↗

Exploit-DB

Infoblox 6.8.2.11 - OS Command Injection

CVE-2014-3418—webappslinux_x8610 jul 2014

config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via she

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WordPress Plugin BSK PDF Manager - '/wp-admin/admin.php' Multiple SQL Injections

CVE-2014-4944—webappsphp09 jul 2014

Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF Manager plugin 1.3.2 for WordPress al

23RISCO

abrir ↗

Exploit-DB