Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.790exploits catalogados
37.482CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 23.901GitHub PoC 15.414VulnCheck XDB 9.065Nuclei 4.426Metasploit 3.502✓ só verificadosrecentespopularesrisco
24.482 exploits
Exploit-DB✓ VexDay Proof
phpLDAPadmin 1.2.2 - 'base' Cross-Site Scripting
CVE-2012-0834—webappsphp01 fev 2012
Cross-site scripting (XSS) vulnerability in lib/QueryRender.php in phpLDAPadmin 1.2.2 and earlier allows remote attacker
23RISCO
abrir ↗
Exploit-DB
Webkit Normalize Bug - Android 2.2
CVE-2010-2300—remoteandroid01 fev 2012
Use-after-free vulnerability in the Element::normalizeAttributes function in dom/Element.cpp in WebCore in WebKit in Goo
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenEMR 4.1 - '/Interface/patient_file/encounter/load_form.php?formname' Traversal Local File Inclusion
CVE-2012-0991—webappsphp01 fev 2012
Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files v
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenEMR 4.1 - '/Interface/fax/fax_dispatch.php?File' 'exec()' Call Arbitrary Shell Command Execution
CVE-2012-0992—webappsphp01 fev 2012
interface/fax/fax_dispatch.php in OpenEMR 4.1.0 allows remote authenticated users to execute arbitrary commands via shel
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenEMR 4.1 - '/contrib/acog/print_form.php?formname' Traversal Local File Inclusion
CVE-2012-0991—webappsphp01 fev 2012
Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files v
43RISCO
abrir ↗
Exploit-DB
Webkit Normalize Bug - Android 2.2
CVE-2010-1759—remoteandroid01 fev 2012
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Vastal I-Tech Agent Zone - 'search.php' Blind SQL Injection
CVE-2012-0982—webappsphp31 jan 2012
SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attacke
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpShowtime - Directory Traversal
CVE-2012-0981—webappsphp31 jan 2012
Directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories and image fil
38RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
4Images 1.7.10 - '/admin/categories.php?cat_parent_id' Cross-Site Scripting
CVE-2012-1021—webappsphp31 jan 2012
Cross-site scripting (XSS) vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject arb
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
4Images 1.7.10 - '/admin/index.php?redirect' Arbitrary Site Redirect
CVE-2012-1023—webappsphp31 jan 2012
Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to redirect users to arbitrary
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Flash Player - MP4 SequenceParameterSetNALUnit Remote Code Execution
CVE-2011-2140—remotewindows31 jan 2012
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adob
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Ez Album - Blind SQL Injection
CVE-2012-0983—webappsphp31 jan 2012
SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
sudo 1.8.0 < 1.8.3p1 - Format String
CVE-2012-0809—doslinux31 jan 2012
Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbit
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache - httpOnly Cookie Disclosure
CVE-2012-0053—remotemultiple31 jan 2012
protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construct
45RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
4Images 1.7.10 - '/admin/categories.php?cat_parent_id' SQL Injection
CVE-2012-1022—webappsphp31 jan 2012
SQL injection vulnerability in admin/categories.php in 4images 1.7.10 remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phux Download Manager - Blind SQL Injection
CVE-2012-0980—webappsphp30 jan 2012
SQL injection vulnerability in download.php in phux Download Manager allows remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗
Exploit-DB
Tracker Software pdfSaver ActiveX 3.60 - 'pdfxctrl.dll' Stack Buffer Overflow (SEH) (PoC)
CVE-2012-5324—doswindows29 jan 2012
Multiple buffer overflows in the Pdf Printer Preferences ActiveX Control in pdfxctrl.dll in Tracker Software PDF-XChange
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - midiOutPlayNextPolyEvent Heap Overflow (MS12-004) (Metasploit)
CVE-2012-0003HIGHremotewindows28 jan 2012
Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows
68RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MiniUPnP 1.4 - Multiple Denial of Service Vulnerabilities
CVE-2013-0229—dosmultiple28 jan 2012
The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attacke
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Diagnostics Server - 'magentservice.exe' Remote Overflow (Metasploit)
CVE-2011-4789—remotewindows27 jan 2012
Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attac
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
vBSEO 3.6.0 - 'proc_deutf()' Remote PHP Code Injection (Metasploit)
CVE-2012-5223—webappsphp27 jan 2012
The proc_deutf function in includes/functions_vbseocp_abstract.php in vBSEO 3.5.0, 3.5.1, 3.5.2, 3.6.0, and earlier allo
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpList 2.10.9 - Cross-Site Request Forgery / Cross-Site Scripting
CVE-2011-0748—webappsphp26 jan 2012
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack th
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpList 2.10.9 - Cross-Site Request Forgery / Cross-Site Scripting
CVE-2012-4246—webappsphp26 jan 2012
Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote atta
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
xClick Cart 1.0.x - 'shopping_url' Cross-Site Scripting
CVE-2012-5225—webappsphp26 jan 2012
Cross-site scripting (XSS) vulnerability in webscr.php in xClick Cart 1.0.1 and 1.0.2 allows remote attackers to inject
23RISCO
abrir ↗
Exploit-DB
VR GPub 4.0 - Cross-Site Request Forgery
CVE-2012-5005—webappsphp26 jan 2012
Cross-site request forgery (CSRF) vulnerability in admin/admin_options.php in VR GPub 4.0 allows remote attackers to hij
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpList 2.10.9 - Cross-Site Request Forgery / Cross-Site Scripting
CVE-2011-1682—webappsphp26 jan 2012
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hija
23RISCO
abrir ↗
Exploit-DB
Peel Shopping 2.8/ 2.9 - Cross-Site Scripting / SQL Injections
CVE-2012-5226—webappsphp26 jan 2012
Multiple cross-site scripting (XSS) vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbitr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpList 2.10.9 - Cross-Site Request Forgery / Cross-Site Scripting
CVE-2012-4247—webappsphp26 jan 2012
Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote atta
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Slideshow Gallery 1.1.x - 'border' Cross-Site Scripting
CVE-2012-5229—webappsphp26 jan 2012
Cross-site scripting (XSS) vulnerability in css/gallery-css.php in the Slideshow Gallery2 plugin for WordPress allows re
23RISCO
abrir ↗
Exploit-DB
Peel Shopping 2.8/ 2.9 - Cross-Site Scripting / SQL Injections
CVE-2012-5227—webappsphp26 jan 2012
SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbit
23RISCO
abrir ↗
← anteriorpágina 301 / 817próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.