Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.066exploits catalogados

34.679CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.771VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

24.443 exploits

Exploit-DB

Bugbear FlatOut 2005 - '.bed' File Buffer Overflow

CVE-2011-5173—doswindows30 nov 2011

Buffer overflow in Bugbear Entertainment FlatOut 2005 allows user-assisted remote attackers to cause a denial of service

23RISCO

Exploit-DB✓ VexDay Proof

CCMPlayer 1.5 - '.m3u' Stack Buffer Overflow (SEH) (Metasploit)

CVE-2011-5170—localwindows30 nov 2011

Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code vi

50RISCO

Exploit-DB✓ VexDay Proof

GOM Player 2.1.33.5071 - '.asx' File Unicode Stack Buffer Overflow

CVE-2011-5162—localwindows30 nov 2011

Stack-based buffer overflow in GOM Player 2.1.33.5071 allows user-assisted remote attackers to execute arbitrary code vi

23RISCO

Exploit-DB✓ VexDay Proof

Virtual Vertex Muster 6.1.6 - Web Interface Directory Traversal

CVE-2011-4714—webappsasp29 nov 2011

Directory traversal vulnerability in Virtual Vertex Muster before 6.20 allows remote attackers to read arbitrary files v

23RISCO

Exploit-DB✓ VexDay Proof

Oxide WebServer - Directory Traversal

CVE-2011-4712—remotewindows29 nov 2011

Directory traversal vulnerability in Oxide WebServer allows remote attackers to read arbitrary files via a ..\ (dot dot

23RISCO

Exploit-DB✓ VexDay Proof

Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities

CVE-2011-4879—doswindows28 nov 2011

miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA po

28RISCO

Exploit-DB✓ VexDay Proof

Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities

CVE-2011-4875—doswindows28 nov 2011

Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC

28RISCO

Exploit-DB✓ VexDay Proof

Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities

CVE-2011-4878—doswindows28 nov 2011

Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2

28RISCO

Exploit-DB✓ VexDay Proof

Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities

CVE-2011-4876—doswindows28 nov 2011

Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008;

23RISCO

Exploit-DB✓ VexDay Proof

Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities

CVE-2011-4877—doswindows28 nov 2011

HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP,

23RISCO

Exploit-DB

Google Android - 'content://' URI Multiple Information Disclosure Vulnerabilities

CVE-2010-4804—webappsandroid28 nov 2011

The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// UR

43RISCO

Exploit-DB✓ VexDay Proof

siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities

CVE-2011-4530—doswindows28 nov 2011

Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, w

23RISCO

Exploit-DB✓ VexDay Proof

WordPress Plugin Skysa App Bar - 'idnews' Cross-Site Scripting

CVE-2011-5179—webappsphp28 nov 2011

Cross-site scripting (XSS) vulnerability in skysa-official/skysa.php in Skysa App Bar Integration plugin, possibly befor

38RISCO

Exploit-DB✓ VexDay Proof

siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities

CVE-2011-4531—doswindows28 nov 2011

Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service (

23RISCO

Exploit-DB✓ VexDay Proof

siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities

CVE-2011-4532—doswindows28 nov 2011

Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical use

23RISCO

Exploit-DB✓ VexDay Proof

siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities

CVE-2011-4529—doswindows28 nov 2011

Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allow remote attackers to

23RISCO

Exploit-DB✓ VexDay Proof

eSyndiCat Pro 2.3.5 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2011-5177—webappsphp26 nov 2011

Multiple cross-site scripting (XSS) vulnerabilities in admin/controller.php in eSyndiCat Pro 2.3.05 allow remote attacke

23RISCO

Exploit-DB✓ VexDay Proof

XChat 2.8.9 - Heap Overflow Denial of Service

CVE-2011-5129—doslinux25 nov 2011

Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and p

23RISCO

Exploit-DB

PHP video script - SQL Injection

CVE-2011-5103—webappsphp25 nov 2011

SQL injection vulnerability in Alurian Prismotube PHP Video Script allows remote attackers to execute arbitrary SQL comm

23RISCO

Exploit-DB✓ VexDay Proof

HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/traceroute.jsp?nodename' Cross-Site Scripting

CVE-2011-5184—webappsjsp24 nov 2011

Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject a

23RISCO

Exploit-DB✓ VexDay Proof

HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/statuspoll.jsp?nodename' Cross-Site Scripting

CVE-2011-5184—webappsjsp24 nov 2011

Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject a

23RISCO

Exploit-DB✓ VexDay Proof

Zabbix 1.8.4 - 'popup.php' SQL Injection

CVE-2011-4674—webappsphp24 nov 2011

SQL injection vulnerability in popup.php in Zabbix 1.8.3 and 1.8.4, and possibly other versions before 1.8.9, allows rem

23RISCO

Exploit-DB✓ VexDay Proof

AdaptCMS 2.0 - SQL Injection

CVE-2011-5108—webappsphp24 nov 2011

Cross-site scripting (XSS) vulnerability in config.php in AdaptCMS 2.0.0 and 2.0.1 allows remote attackers to inject arb

23RISCO

Exploit-DB✓ VexDay Proof

Balitbang CMS 3.3 - 'alumni.php?hal' SQL Injection

CVE-2011-5111—webappsphp24 nov 2011

Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary S

23RISCO

Exploit-DB✓ VexDay Proof

Balitbang CMS 3.3 - 'index.php?hal' SQL Injection

CVE-2011-5111—webappsphp24 nov 2011

Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary S

23RISCO

Exploit-DB✓ VexDay Proof

HP Network Node Manager (NMM) i 9.10 - '/nnm/mibdiscover?node' Cross-Site Scripting

CVE-2011-5184—webappsjsp24 nov 2011

Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject a

23RISCO

Exploit-DB✓ VexDay Proof

Apache 7.0.x mod_proxy - Reverse Proxy Security Bypass

CVE-2011-4317—remotelinux24 nov 2011

The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, whe

35RISCO

Exploit-DB✓ VexDay Proof

HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/configurationpoll.jsp?nodename' Cross-Site Scripting

CVE-2011-5184—webappsjsp24 nov 2011

Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject a

23RISCO

Exploit-DB✓ VexDay Proof

HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/ping.jsp?nodename' Cross-Site Scripting

CVE-2011-5184—webappsjsp24 nov 2011

Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject a

23RISCO

Exploit-DB

Log1 CMS 2.0 - 'ajax_create_folder.php' Remote Code Execution

CVE-2011-4825—webappsphp24 nov 2011

Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinym

50RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.