Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.900exploits catalogados

36.847CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.360GitHub PoC 15.228VulnCheck XDB 8.946Nuclei 4.390Metasploit 3.501✓ só verificadosrecentes populares risco

3.501 exploits

Metasploit600

Java JMX Server Insecure Configuration Java Code Execution

CVE-2015-2342—22 mai 2013

The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not r

60RISCO

abrir ↗

Metasploit300

Apple Quicktime 7 Invalid Atom Length Buffer Overflow

CVE-2013-1017—22 mai 2013

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of s

50RISCO

abrir ↗

Metasploit300

Java JMX Server Insecure Endpoint Code Execution Scanner

CVE-2015-2342—22 mai 2013

The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not r

60RISCO

abrir ↗

Metasploit200

Kimai v0.9.2 'db_restore.php' SQL Injection

CVE-2013-10033CRITICAL21 mai 2013

Kimai 0.9.2 db_restore.php SQL Injection

63RISCO

abrir ↗

Metasploit600

Mutiny 5 Arbitrary File Upload

CVE-2013-0136—15 mai 2013

Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow

50RISCO

abrir ↗

Metasploit600

VMware vCenter Chargeback Manager ImageUploadServlet Arbitrary File Upload

CVE-2013-3520—15 mai 2013

VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers t

50RISCO

abrir ↗

Metasploit200

Windows EPATHOBJ::pprFlattenRec Local Privilege Escalation

CVE-2013-3660HIGHsob ataque15 mai 2013

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windo

98RISCO

abrir ↗

Metasploit300

Mutiny 5 Arbitrary File Read and Delete

CVE-2013-0136—15 mai 2013

Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow

50RISCO

abrir ↗

Metasploit600

Firefox toString console.time Privileged Javascript Injection

CVE-2013-1710—14 mai 2013

The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird befo

50RISCO

abrir ↗

Metasploit500

AdobeCollabSync Buffer Overflow Adobe Reader X Sandbox Bypass

CVE-2013-2730—14 mai 2013

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attacke

60RISCO

abrir ↗

Metasploit500

Nginx HTTP Server 1.3.9-1.4.0 Chunked Encoding Stack Buffer Overflow

CVE-2013-2028—07 mai 2013

The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cau

60RISCO

abrir ↗

Metasploit300

ColdFusion 'password.properties' Hash Extraction

CVE-2013-3336—07 mai 2013

Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to read arbitrary files

60RISCO

abrir ↗

Metasploit400

MS13-038 Microsoft Internet Explorer CGenericElement Object Use-After-Free Vulnerability

CVE-2013-1347HIGHsob ataque03 mai 2013

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbit

100RISCO

abrir ↗

Metasploit300

AudioCoder .M3U Buffer Overflow

CVE-2017-8870—01 mai 2013

Buffer overflow in AudioCoder 0.8.46 allows remote attackers to execute arbitrary code via a crafted .m3u file.

43RISCO

abrir ↗

Metasploit300

IBM SPSS SamplePower C1Tab ActiveX Heap Overflow

CVE-2012-5946—26 abr 2013

Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attac

50RISCO

abrir ↗

Metasploit600

phpMyAdmin Authenticated Remote Code Execution via preg_replace()

CVE-2013-3238—25 abr 2013

phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a

43RISCO

abrir ↗

Metasploit300

ERS Viewer 2011 ERS File Handling Buffer Overflow

CVE-2013-0726—23 abr 2013

Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in ERDAS ER Viewer before 1

43RISCO

abrir ↗

Metasploit200

Tincd Post-Authentication Remote TCP Stack Buffer Overflow

CVE-2013-1428—22 abr 2013

Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pr

50RISCO

abrir ↗

Metasploit600

D-Link Devices Unauthenticated Remote Command Execution

CVE-2013-10050HIGH22 abr 2013

D-Link Devices tools_vct.xgi Authenticated RCE

36RISCO

abrir ↗

Metasploit600

WordPress W3 Total Cache PHP Code Execution

CVE-2013-2010—17 abr 2013

WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability

60RISCO

abrir ↗

Metasploit600

Oracle WebCenter Content CheckOutAndOpen.dll ActiveX Remote Code Execution

CVE-2013-1559—16 abr 2013

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.

50RISCO

abrir ↗

Metasploit600

Ruby on Rails Known Secret Session Cookie Remote Code Execution

CVE-2013-0156—11 abr 2013

active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, an

60RISCO

abrir ↗

Metasploit600

MiniWeb (Build 300) Arbitrary File Upload

CVE-2013-10047CRITICAL09 abr 2013

MiniWeb <= Build 300 Arbitrary File Upload

43RISCO

abrir ↗

Metasploit600

ABB MicroSCADA wserver.exe Remote Code Execution

CVE-2019-5620—05 abr 2013

ABB MicroSCADA Pro SYS600 Missing Authentication for Critical Function

40RISCO

abrir ↗

Metasploit300

Sophos Web Protection Appliance patience.cgi Directory Traversal

CVE-2013-2641—03 abr 2013

Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read

60RISCO

abrir ↗

Metasploit300

MiniUPnPd 1.4 Denial of Service (DoS) Exploit

CVE-2013-0229—27 mar 2013

The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attacke

60RISCO

abrir ↗

Metasploit300

MiniUPnPd 1.0 Stack Buffer Overflow Remote Code Execution

CVE-2013-0230—27 mar 2013

Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP

50RISCO

abrir ↗

Metasploit600

vTiger CRM SOAP AddEmailAttachment Arbitrary File Upload

CVE-2013-3214—26 mar 2013

vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.

60RISCO

abrir ↗

Metasploit600

vTiger CRM SOAP AddEmailAttachment Arbitrary File Upload

CVE-2013-3215—26 mar 2013

vtiger CRM 5.4.0 and earlier contain an Authentication Bypass Vulnerability due to improper authentication validation in

50RISCO

abrir ↗

Metasploit600

vBulletin index.php/ajax/api/reputation/vote nodeid Parameter SQL Injection

CVE-2013-3522—25 mar 2013

SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier

43RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.