Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.008exploits catalogados

34.638CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

24.443 exploits

Exploit-DB✓ VexDay Proof

vTiger CRM 5.1.0 - Local File Inclusion

CVE-2012-4867—webappsphp22 abr 2012

Directory traversal vulnerability in modules/com_vtiger_workflow/sortfieldsjson.php in vtiger CRM 5.1.0 allows remote at

23RISCO

Exploit-DB✓ VexDay Proof

Samsung NET-i ware 1.37 - Multiple Vulnerabilities

CVE-2012-4334—doswindows22 abr 2012

The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2) STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i v

23RISCO

Exploit-DB✓ VexDay Proof

Samsung NET-i ware 1.37 - Multiple Vulnerabilities

CVE-2012-4335—doswindows22 abr 2012

Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service (infinite loop) via a negative siz

23RISCO

Exploit-DB✓ VexDay Proof

Samsung NET-i ware 1.37 - Multiple Vulnerabilities

CVE-2012-4330—doswindows22 abr 2012

The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long

28RISCO

Exploit-DB✓ VexDay Proof

Samsung NET-i ware 1.37 - Multiple Vulnerabilities

CVE-2012-4329—doswindows22 abr 2012

The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restart

28RISCO

Exploit-DB✓ VexDay Proof

Samsung NET-i ware 1.37 - Multiple Vulnerabilities

CVE-2012-4333—doswindows22 abr 2012

Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0

50RISCO

Exploit-DB

Oracle GlassFish Server 3.1.1 (build 12) - Multiple Cross-Site Scripting Vulnerabilities

CVE-2012-0551—webappswindows22 abr 2012

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32

28RISCO

Exploit-DB

Oracle GlassFish Server - REST Cross-Site Request Forgery

CVE-2012-0550—webappswindows22 abr 2012

Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise

23RISCO

Exploit-DB✓ VexDay Proof

Adobe Flash Player - ActionScript Launch Command Execution (Metasploit)

CVE-2008-5499—remotelinux20 abr 2012

Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers

60RISCO

Exploit-DB✓ VexDay Proof

TFTP Server 1.4 - ST WRQ Buffer Overflow (Metasploit)

CVE-2008-1611—remotewindows20 abr 2012

Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or ex

50RISCO

Exploit-DB✓ VexDay Proof

newscoop 3.5.3 - Multiple Vulnerabilities

CVE-2012-4679—webappsphp19 abr 2012

Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject a

23RISCO

Exploit-DB✓ VexDay Proof

Wireshark - 'call_dissector()' Null Pointer Dereference Denial of Service

CVE-2012-1593—dosmultiple19 abr 2012

epan/dissectors/packet-ansi_a.c in the ANSI A dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows r

28RISCO

Exploit-DB

Microsoft Windows - 'afd.sys' Local Kernel (PoC) (MS11-046)

CVE-2011-1249—doswindows19 abr 2012

The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vis

23RISCO

Exploit-DB✓ VexDay Proof

XOOPS 2.5.4 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2012-0984—webappsphp19 abr 2012

Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web

23RISCO

Exploit-DB✓ VexDay Proof

Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities

CVE-2012-1259—webappsmultiple19 abr 2012

Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and pos

23RISCO

Exploit-DB✓ VexDay Proof

Samsung D6000 TV - Multiple Vulnerabilities

CVE-2012-4330—doshardware19 abr 2012

The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long

28RISCO

Exploit-DB✓ VexDay Proof

Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities

CVE-2012-1260—webappsmultiple19 abr 2012

Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow An

23RISCO

Exploit-DB✓ VexDay Proof

Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities

CVE-2012-1258—webappsmultiple19 abr 2012

cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1.19899 does not validate

23RISCO

Exploit-DB✓ VexDay Proof

newscoop 3.5.3 - Multiple Vulnerabilities

CVE-2012-1934—webappsphp19 abr 2012

SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4 RC4 allows remote attack

23RISCO

Exploit-DB✓ VexDay Proof

Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities

CVE-2012-1261—webappsmultiple19 abr 2012

Cross-site scripting (XSS) vulnerability in cgi-bin/scrut_fa_exclusions.cgi in Plixer International Scrutinizer NetFlow

23RISCO

Exploit-DB✓ VexDay Proof

OpenSSL - ASN1 BIO Memory Corruption

CVE-2012-2110—dosmultiple19 abr 2012

The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before

35RISCO

Exploit-DB✓ VexDay Proof

Samsung D6000 TV - Multiple Vulnerabilities

CVE-2012-4329—doshardware19 abr 2012

The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restart

28RISCO

Exploit-DB✓ VexDay Proof

OpenSSL - ASN1 BIO Memory Corruption

CVE-2012-2131—dosmultiple19 abr 2012

Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer

28RISCO

Exploit-DB✓ VexDay Proof

newscoop 3.5.3 - Multiple Vulnerabilities

CVE-2012-1933—webappsphp19 abr 2012

Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when register_global

23RISCO

Exploit-DB

VideoLAN VLC Media Player 2.0.1 - '.mp4' Crash (PoC)

CVE-2012-2396—doswindows19 abr 2012

VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and applicati

23RISCO

Exploit-DB✓ VexDay Proof

newscoop 3.5.3 - Multiple Vulnerabilities

CVE-2012-1935—webappsphp19 abr 2012

Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote att

23RISCO

Exploit-DB✓ VexDay Proof

CyberLink Power2Go - name Attribute (p2g) Stack Buffer Overflow (Metasploit)

CVE-2011-5171—localwindows18 abr 2012

Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to e

50RISCO

Exploit-DB✓ VexDay Proof

XOOPS 2.5.4 - '/tiny_mce/plugins/xoopsimagemanager/xoopsimagebrowser.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2012-0984—webappsphp18 abr 2012

Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web

23RISCO

Exploit-DB✓ VexDay Proof

XOOPS 2.5.4 - '/modules/pm/pmlite.php?to_userid' Cross-Site Scripting

CVE-2012-0984—webappsphp18 abr 2012

Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web

23RISCO

Exploit-DB✓ VexDay Proof

ownCloud 3.0.0 - 'index.php?redirect_url' Arbitrary Site Redirect

CVE-2012-2270—webappsphp18 abr 2012

Open redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows remote attackers to redire

23RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.