Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.858exploits catalogados

36.825CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.346GitHub PoC 15.209VulnCheck XDB 8.944Nuclei 4.383Metasploit 3.501✓ só verificadosrecentes populares risco

3.501 exploits

Metasploit300

Oracle Demantra Database Credentials Leak

CVE-2013-5880—28 fev 2014

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.

50RISCO

abrir ↗

Metasploit300

Oracle Demantra Arbitrary File Retrieval with Authentication Bypass

CVE-2013-5877—28 fev 2014

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0

50RISCO

abrir ↗

Metasploit300

Oracle Demantra Arbitrary File Retrieval with Authentication Bypass

CVE-2013-5880—28 fev 2014

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.

50RISCO

abrir ↗

Metasploit300

Oracle Demantra Database Credentials Leak

CVE-2013-5795—28 fev 2014

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0

50RISCO

abrir ↗

Metasploit300

JIRA Issues Collector Directory Traversal

CVE-2014-2314—26 fev 2014

Directory traversal vulnerability in the Issue Collector plugin in Atlassian JIRA before 6.0.4 allows remote attackers t

43RISCO

abrir ↗

Metasploit600

Symantec Endpoint Protection Manager /servlet/ConsoleServlet Remote Command Execution

CVE-2013-5015—24 fev 2014

SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.74

43RISCO

abrir ↗

Metasploit600

Symantec Endpoint Protection Manager /servlet/ConsoleServlet Remote Command Execution

CVE-2013-5014—24 fev 2014

The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.40

50RISCO

abrir ↗

Metasploit400

SolidWorks Workgroup PDM 2014 pdmwService.exe Arbitrary File Write

CVE-2014-100015—22 fev 2014

Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write t

50RISCO

abrir ↗

Metasploit300

Linksys WRT120N tmUnblock Stack Buffer Overflow

CVE-2014-125122MEDIUM19 fev 2014

Linksys WRT120N tmUnblock.cgi Stack-Based Buffer Overflow Admin Password Reset

28RISCO

abrir ↗

Metasploit300

MS14-012 Microsoft Internet Explorer CMarkup Use-After-Free

CVE-2014-0322HIGHsob ataque13 fev 2014

Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code v

100RISCO

abrir ↗

Metasploit600

Linksys E-Series TheMoon Remote Command Injection

CVE-2025-34037CRITICAL13 fev 2014

Linksys Routers E/WAG/WAP/WES/WET/WRT-Series

85RISCO

abrir ↗

Metasploit600

Fritz!Box Webcm Unauthenticated Command Injection

CVE-2014-9727—11 fev 2014

AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter t

60RISCO

abrir ↗

Metasploit500

MS14-009 .NET Deployment Service IE Sandbox Escape

CVE-2014-0257—11 fev 2014

Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine whether it

50RISCO

abrir ↗

Metasploit300

Apache Commons FileUpload and Apache Tomcat DoS

CVE-2014-0050—06 fev 2014

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products,

60RISCO

abrir ↗

Metasploit300

Publish-It PUI Buffer Overflow (SEH)

CVE-2014-0980—05 fev 2014

Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI f

50RISCO

abrir ↗

Metasploit300

Adobe Flash Player Integer Underflow Remote Code Execution

CVE-2014-0497HIGHsob ataque05 fev 2014

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Ma

100RISCO

abrir ↗

Metasploit600

Array Networks vAPV and vxAG Private Key Privilege Escalation Code Execution

CVE-2014-125121CRITICAL03 fev 2014

Array Networks vAPV and vxAG Default Credential Privilege Escalation

43RISCO

abrir ↗

Metasploit400

Linux Kernel recvmmsg Privilege Escalation

CVE-2014-0038—02 fev 2014

The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allo

50RISCO

abrir ↗

Metasploit600

Pandora FMS Default Credential / SQLi Remote Code Execution

CVE-2014-125115CRITICAL01 fev 2014

Pandora FMS ≤ 5.0 SP2 Default Credential SQL Injection RCE

63RISCO

abrir ↗

Metasploit600

Zpanel Remote Unauthenticated RCE

CVE-2013-2097—30 jan 2014

ZPanel through 10.1.0 has Remote Command Execution

43RISCO

abrir ↗

Metasploit600

Pandora FMS Remote Code Execution

CVE-2014-125124CRITICAL29 jan 2014

Pandora FMS <= 5.0RC1 Anyterm Unauthenticated Command Injection

63RISCO

abrir ↗

Metasploit300

ManageEngine Support Center Plus Directory Traversal

CVE-2014-100002—28 jan 2014

Directory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows remote attackers to read arb

50RISCO

abrir ↗

Metasploit600

MediaWiki Thumb.php Remote Command Execution

CVE-2014-1610—28 jan 2014

MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is

50RISCO

abrir ↗

Metasploit600

SkyBlueCanvas CMS Remote Code Execution

CVE-2014-1683—28 jan 2014

The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248

50RISCO

abrir ↗

Metasploit300

A10 Networks AX Loadbalancer Directory Traversal

CVE-2014-125125HIGH28 jan 2014

A10 Networks AX Loadbalancer Path Traversal

36RISCO

abrir ↗

Metasploit0

Kloxo SQL Injection and Remote Code Execution

CVE-2014-125123CRITICAL28 jan 2014

Kloxo < 6.1.12 Unauthenticated SQL Injection RCE

43RISCO

abrir ↗

Metasploit600

GE Proficy CIMPLICITY gefebt.exe Remote Code Execution

CVE-2014-0750—23 jan 2014

GE Proficy HMI/SCADA Path Traversal

78RISCO

abrir ↗

Metasploit600

Simple E-Document Arbitrary File Upload

CVE-2014-125126CRITICAL23 jan 2014

Simple E-Document Arbitrary File Upload RCE

63RISCO

abrir ↗

Metasploit0

Firefox Proxy Prototype Privileged Javascript Injection

CVE-2015-0802—20 jan 2014

Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl

50RISCO

abrir ↗

Metasploit0

Firefox Proxy Prototype Privileged Javascript Injection

CVE-2014-8636—20 jan 2014

The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.