Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.589exploits catalogados
34.508CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8.216Nuclei 4.223Metasploit 3.464✓ só verificadosrecentespopularesrisco
24.443 exploits
Exploit-DB
Winamp 5.63 - Invalid Pointer Dereference
CVE-2013-4695—doswindows02 jul 2013
Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Intelligent Platform Management Interface - Information Disclosure
CVE-2013-4786—remotemultiple02 jul 2013
The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Machform Form Maker 2 - Multiple Vulnerabilities
CVE-2013-4948—webappsphp02 jul 2013
SQL injection vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Machform Form Maker 2 - Multiple Vulnerabilities
CVE-2013-4949—webappsphp02 jul 2013
Unrestricted file upload vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary PHP code b
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Machform Form Maker 2 - Multiple Vulnerabilities
CVE-2013-4950—webappsphp02 jul 2013
Cross-site scripting (XSS) vulnerability in view.php in Machform 2 allows remote attackers to inject arbitrary web scrip
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Category Grid View Gallery - 'ID' Cross-Site Scripting
CVE-2013-4117—webappsphp02 jul 2013
Cross-site scripting (XSS) vulnerability in includes/CatGridPost.php in the Category Grid View Gallery plugin 2.3.1 for
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - 'EPATHOBJ::pprFlattenRec' Local Privilege Escalation (Metasploit)
CVE-2013-3660HIGHsob ataquelocalwindows02 jul 2013
The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windo
98RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Winamp 5.63 - Stack Buffer Overflow
CVE-2013-4694—doswindows02 jul 2013
Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - 'EPATHOBJ::pprFlattenRec' Local Privilege Escalation (Metasploit)
CVE-2013-3661—localwindows02 jul 2013
The EPATHOBJ::bFlatten function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vist
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
RealNetworks RealPlayer - Denial of Service
CVE-2013-3299—dosmultiple02 jul 2013
RealNetworks RealPlayer 16.0.2.32 and earlier allows remote attackers to cause a denial of service (resource consumption
23RISCO
abrir ↗
Exploit-DB
GLPI 0.83.9 - 'Unserialize()' Remote Code Execution
CVE-2013-2225—webappsphp01 jul 2013
inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _pr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
libvirt - 'virConnectListAllInterfaces' Method Denial of Service
CVE-2013-2218—doslinux01 jul 2013
Double free vulnerability in the virConnectListAllInterfaces method in interface/interface_backend_netcf.c in libvirt 1.
23RISCO
abrir ↗
Exploit-DB
Static HTTP Server 1.0 - Local Overflow (SEH)
CVE-2013-4743—localwindows01 jul 2013
Static HTTP Server 1.0 has a Local Overflow
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft PowerPoint 2007 - Crash (PoC)
CVE-2014-2671—doswindows01 jul 2013
Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corrupt
35RISCO
abrir ↗
Exploit-DB
Fortigate Firewalls - Cross-Site Request Forgery
CVE-2013-1414—webappshardware01 jul 2013
Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Java Applet - ProviderSkeleton Insecure Invoke Method (Metasploit)
CVE-2013-2460—remotemultiple01 jul 2013
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
YardRadius - Multiple Local Format String Vulnerabilities
CVE-2013-4147—localwindows30 jun 2013
Multiple format string vulnerabilities in Yet Another Radius Daemon (YARD RADIUS) 1.1.2 allow context-dependent attacker
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Xorbin Analog Flash Clock - 'widgetUrl' Cross-Site Scripting
CVE-2013-4692—webappsphp30 jun 2013
Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Xorbin Digital Flash Clock - 'widgetUrl' Cross-Site Scripting
CVE-2013-4692—webappsphp30 jun 2013
Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS
23RISCO
abrir ↗
Exploit-DB
PCMan FTP Server 2.0 - Remote Buffer Overflow
CVE-2013-4730—remotewindows30 jun 2013
Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USE
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle VM VirtualBox 4.0 - 'tracepath' Local Denial of Service
CVE-2013-3792—dosmultiple26 jun 2013
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.18, 4.0
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell Client 2 SP3 - 'nicm.sys' Local Privilege Escalation (Metasploit)
CVE-2013-3956—localwindows_x8626 jun 2013
The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2
38RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
FreeBSD 9 - Address Space Manipulation Privilege Escalation (Metasploit)
CVE-2013-2171—localfreebsd26 jun 2013
The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEAS
38RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Xaraya - Multiple Cross-Site Scripting Vulnerabilities
CVE-2013-3639—webappsphp26 jun 2013
Multiple cross-site scripting (XSS) vulnerabilities in Xaraya 2.4.0-b1 and earlier allow remote attackers to inject arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Top Games Script 1.2 - 'play.php?gid' SQL Injection
CVE-2013-4953—webappsphp24 jun 2013
SQL injection vulnerability in play.php in Top Games Script 1.2 allows remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
HP System Management Homepage - JustGetSNMPQueue Command Injection (Metasploit)
CVE-2013-3576—remotewindows24 jun 2013
ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands vi
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpEventCalendar 0.2.3 - Multiple Vulnerabilities
CVE-2007-3519—webappsphp24 jun 2013
SQL injection vulnerability in eventdisplay.php in phpEventCalendar 0.2.3 and earlier allows remote attackers to execute
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MoinMoin - twikidraw Action Traversal Arbitrary File Upload (Metasploit)
CVE-2012-6495—remotelinux24 jun 2013
Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anyw
28RISCO
abrir ↗
Exploit-DB
Alienvault Open Source SIEM (OSSIM) 4.1 - Multiple SQL Injection Vulnerabilities
CVE-2013-5321—webappsphp24 jun 2013
Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.1 allow remot
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MoinMoin - twikidraw Action Traversal Arbitrary File Upload (Metasploit)
CVE-2012-6081—remotelinux24 jun 2013
Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action
50RISCO
abrir ↗
← anteriorpágina 254 / 815próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.