Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.900exploits catalogados
36.847CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.475Referência 23.360GitHub PoC 15.228VulnCheck XDB 8.946Nuclei 4.390Metasploit 3.501✓ só verificadosrecentespopularesrisco
3.501 exploits
Metasploit600
VMWare Setuid vmware-mount Unsafe popen(3)
CVE-2013-1662—22 ago 2013
vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allo
38RISCO
abrir ↗
Metasploit300
freeFTPd PASS Command Buffer Overflow
CVE-2013-10042CRITICAL20 ago 2013
freeFTPd <= 1.0.10 PASS Command Stack-Based Buffer Overflow
63RISCO
abrir ↗
Metasploit600
Graphite Web Unsafe Pickle Handling
CVE-2013-5093—20 ago 2013
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python
50RISCO
abrir ↗
Metasploit500
Java storeImageArray() Invalid Array Indexing Vulnerability
CVE-2013-2465CRITICALsob ataqueransomware12 ago 2013
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 U
100RISCO
abrir ↗
Metasploit500
Adobe ColdFusion RDS Authentication Bypass
CVE-2013-0632CRITICALsob ataque08 ago 2013
administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and pos
100RISCO
abrir ↗
Metasploit300
Adobe Reader ToolButton Use After Free
CVE-2013-3346HIGHsob ataque08 ago 2013
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitr
100RISCO
abrir ↗
Metasploit300
Adobe Reader ToolButton Use After Free
CVE-2013-3346HIGHsob ataque08 ago 2013
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitr
100RISCO
abrir ↗
Metasploit600
OpenX Backdoor PHP Code Execution
CVE-2013-4211—07 ago 2013
A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, wh
60RISCO
abrir ↗
Metasploit600
Squash YAML Code Execution
CVE-2013-5036—06 ago 2013
The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter t
50RISCO
abrir ↗
Metasploit600
Firefox 5.0 - 15.0.1 __exposedProps__ XCS Code Execution
CVE-2013-1710—06 ago 2013
The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird befo
50RISCO
abrir ↗
Metasploit600
Firefox 5.0 - 15.0.1 __exposedProps__ XCS Code Execution
CVE-2012-3993—06 ago 2013
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbi
50RISCO
abrir ↗
Metasploit600
Agnitum Outpost Internet Security Local Privilege Escalation
CVE-2013-10046HIGH02 ago 2013
Agnitum Outpost Internet Security Local Privilege Escalation
36RISCO
abrir ↗
Metasploit600
Joomla Media Manager File Upload Vulnerability
CVE-2013-5576—01 ago 2013
administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before
50RISCO
abrir ↗
Metasploit0
HP SiteScope Remote Code Execution
CVE-2013-2367—29 jul 2013
Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execu
50RISCO
abrir ↗
Metasploit300
HP LoadRunner magentproc.exe Overflow
CVE-2013-4800—27 jul 2013
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown ve
50RISCO
abrir ↗
Metasploit300
Chasys Draw IES Buffer Overflow
CVE-2013-3928—26 jul 2013
Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote atta
50RISCO
abrir ↗
Metasploit600
PineApp Mail-SeCure test_li_connection.php Arbitrary Command Execution
CVE-2013-6829—26 jul 2013
admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacha
60RISCO
abrir ↗
Metasploit300
Cogent DataHub HTTP Server Buffer Overflow
CVE-2013-0680—26 jul 2013
Stack-based buffer overflow in the web server in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub befor
23RISCO
abrir ↗
Metasploit300
HP LoadRunner lrFileIOService ActiveX Remote Code Execution
CVE-2013-2370—24 jul 2013
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown ve
50RISCO
abrir ↗
Metasploit300
HP LoadRunner lrFileIOService ActiveX WriteFileString Remote Code Execution
CVE-2013-4798—24 jul 2013
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown ve
50RISCO
abrir ↗
Metasploit600
Oracle Endeca Server Remote Command Execution
CVE-2013-3763—16 jul 2013
Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 7.4.0 and 7.5.1.1 allows rem
50RISCO
abrir ↗
Metasploit0
NETGEAR ReadyNAS Perl Code Evaluation
CVE-2013-2751—12 jul 2013
Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator
60RISCO
abrir ↗
Metasploit600
Linksys Devices pingstr Remote Command Injection
CVE-2013-3568—12 jul 2013
Cross-site request forgery (CSRF) vulnerability in Cisco Linksys WRT110 allows remote attackers to hijack the authentica
43RISCO
abrir ↗
Metasploit300
Ultra Mini HTTPD Stack Buffer Overflow
CVE-2013-5019—10 jul 2013
Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resour
50RISCO
abrir ↗
Metasploit300
MS13-055 Microsoft Internet Explorer CAnchorElement Use-After-Free
CVE-2013-3163HIGHsob ataque09 jul 2013
Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service
100RISCO
abrir ↗
Metasploit300
Corel PDF Fusion Stack Buffer Overflow
CVE-2013-3248—08 jul 2013
Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wi
43RISCO
abrir ↗
Metasploit300
D-Link Devices UPnP SOAP Command Execution
CVE-2014-8361CRITICALsob ataque05 jul 2013
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClien
100RISCO
abrir ↗
Metasploit600
Apache Struts 2 DefaultActionMapper Prefixes OGNL Code Execution
CVE-2013-2251CRITICALsob ataque02 jul 2013
Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a
100RISCO
abrir ↗
Metasploit300
HP StorageWorks P4000 Virtual SAN Appliance Login Buffer Overflow
CVE-2013-2343—28 jun 2013
Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attacke
50RISCO
abrir ↗
Metasploit600
Nodejs js-yaml load() Code Execution
CVE-2013-4660—28 jun 2013
The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, whic
43RISCO
abrir ↗
← anteriorpágina 64 / 117próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.