Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.900exploits catalogados

36.847CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.360GitHub PoC 15.228VulnCheck XDB 8.946Nuclei 4.390Metasploit 3.501✓ só verificadosrecentes populares risco

3.501 exploits

Metasploit300

Samba SetInformationPolicy AuditEventsInfo Heap Overflow

CVE-2012-1182—10 abr 2012

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement valida

60RISCO

abrir ↗

Metasploit200

MS12-027 MSCOMCTL ActiveX Buffer Overflow

CVE-2012-0158HIGHsob ataqueransomware10 abr 2012

The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls

100RISCO

abrir ↗

Metasploit600

Distinct TFTP 3.10 Writable Directory Traversal Execution

CVE-2012-6664CRITICAL08 abr 2012

Multiple directory traversal vulnerabilities in the TFTP Server in Distinct Intranet Servers 3.10 and earlier allow remo

68RISCO

abrir ↗

Metasploit600

Dolibarr ERP/CRM Post-Auth OS Command Injection

CVE-2012-10059CRITICAL06 abr 2012

Dolibarr ERP/CRM Post-Auth OS Command Injection

63RISCO

abrir ↗

Metasploit300

BlazeVideo HDTV Player Pro v6.6 Filename Handling Vulnerability

CVE-2012-10031HIGH03 abr 2012

BlazeVideo HDTV Player Pro 6.6.0.3 Filename Handling Buffer Overflow

36RISCO

abrir ↗

Metasploit300

IBM Cognos tm1admsd.exe Overflow

CVE-2012-0202—02 abr 2012

Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.2

50RISCO

abrir ↗

Metasploit200

Quest InTrust Annotation Objects Uninitialized Pointer

CVE-2012-5896—28 mar 2012

The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not prope

50RISCO

abrir ↗

Metasploit300

TRENDnet SecurView Internet Camera UltraMJCam OpenFileDlg Buffer Overflow

CVE-2012-4876—28 mar 2012

Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera

60RISCO

abrir ↗

Metasploit600

WordPress WP-Property PHP File Upload Vulnerability

CVE-2012-10027CRITICAL26 mar 2012

WordPress Plugin WP-Property <= 1.35.0 PHP File Upload

63RISCO

abrir ↗

Metasploit400

TFM MMPlayer (m3u/ppl File) Buffer Overflow

CVE-2009-2566—23 mar 2012

Stack-based buffer overflow in TFM MMPlayer 2.0, and possibly 2.0.0.30, allows remote attackers to execute arbitrary cod

50RISCO

abrir ↗

Metasploit300

FlexNet License Server Manager lmgrd Buffer Overflow

CVE-2011-4135—23 mar 2012

Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Man

30RISCO

abrir ↗

Metasploit300

Cisco Linksys PlayerPT ActiveX Control Buffer Overflow

CVE-2012-0284—22 mar 2012

Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.o

50RISCO

abrir ↗

Metasploit0

FreePBX 2.10.0 / 2.9.0 callmenum Remote Code Execution

CVE-2012-4869—20 mar 2012

The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attacke

60RISCO

abrir ↗

Metasploit300

MS12-020 Microsoft Remote Desktop Use-After-Free DoS

CVE-2012-0002—16 mar 2012

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows V

60RISCO

abrir ↗

Metasploit300

VLC MMS Stream Handling Buffer Overflow

CVE-2012-1775—15 mar 2012

Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code

50RISCO

abrir ↗

Metasploit300

Sockso Music Host Server 1.5 Directory Traversal

CVE-2012-10061HIGH14 mar 2012

Sockso Music Host Server <= 1.5 Path Traversal

36RISCO

abrir ↗

Metasploit300

HP Data Protector Create New Folder Buffer Overflow

CVE-2012-0124—12 mar 2012

Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974

50RISCO

abrir ↗

Metasploit300

NetDecision NOCVision Server Directory Traversal

CVE-2012-1465—07 mar 2012

Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause

43RISCO

abrir ↗

Metasploit300

Ricoh DC DL-10 SR10 FTP USER Command Buffer Overflow

CVE-2012-5002—01 mar 2012

Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file

50RISCO

abrir ↗

Metasploit300

IBM Tivoli Provisioning Manager Express for Software Distribution Isig.isigCtl.1 ActiveX RunAndUploadFile() Method Overflow

CVE-2012-0198—01 mar 2012

Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provision

50RISCO

abrir ↗

Metasploit500

IBM Personal Communications iSeries Access WorkStation 5.9 Profile

CVE-2012-0201—28 fev 2012

Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x befo

50RISCO

abrir ↗

Metasploit300

Sysax 5.53 SSH Username Buffer Overflow

CVE-2012-10060CRITICAL27 fev 2012

Sysax Multi Server < 5.55 SSH Username Buffer Overflow

63RISCO

abrir ↗

Metasploit300

NetDecision 4.5.1 HTTP Server Buffer Overflow

CVE-2012-1465—24 fev 2012

Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause

43RISCO

abrir ↗

Metasploit300

Csound hetro File Handling Stack Buffer Overflow

CVE-2012-0270—23 fev 2012

Multiple stack-based buffer overflows in Csound before 5.16.6 allow remote attackers to execute arbitrary code via a cra

50RISCO

abrir ↗

Metasploit300

Novell ZENworks Configuration Management Preboot Service 0x6c Buffer Overflow

CVE-2011-3175—22 fev 2012

Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allo

50RISCO

abrir ↗

Metasploit300

Novell ZENworks Configuration Management Preboot Service 0x4c Buffer Overflow

CVE-2011-3176—22 fev 2012

Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allo

60RISCO

abrir ↗

Metasploit300

ASUS Net4Switch ipswcom.dll ActiveX Stack Buffer Overflow

CVE-2012-4924—17 fev 2012

Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 all

50RISCO

abrir ↗

Metasploit600

LANDesk Lenovo ThinkManagement Console Remote Command Execution

CVE-2012-1195—15 fev 2012

Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup

50RISCO

abrir ↗

Metasploit600

LANDesk Lenovo ThinkManagement Console Remote Command Execution

CVE-2012-1196—15 fev 2012

Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagemen

50RISCO

abrir ↗

Metasploit300

Adobe Flash Player MP4 'cprt' Overflow

CVE-2012-0754HIGHsob ataque15 fev 2012

Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.