Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.836exploits catalogados
32.133CVEs com exploração pública
1.932testados em laboratório
TodosExploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8.156Nuclei 4.201Metasploit 3.462✓ só verificadosrecentespopularesrisco
3.462 exploits
Metasploit600
Java RMIConnectionImpl Deserialization Privilege Escalation
CVE-2010-0094—31 mar 2010
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18
60RISCO
abrir ↗
Metasploit600
Java Statement.invoke() Trusted Method Chain Privilege Escalation
CVE-2010-0840CRITICALsob ataque31 mar 2010
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18,
100RISCO
abrir ↗
Metasploit600
Novell ZENworks Configuration Management Remote Execution
CVE-2010-5324—30 mar 2010
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration M
60RISCO
abrir ↗
Metasploit500
Java MixerSequencer Object GM_Song Structure Handling Vulnerability
CVE-2010-0842—30 mar 2010
Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4
60RISCO
abrir ↗
Metasploit300
Novell ZENworks Configuration Management Preboot Service 0x21 Buffer Overflow
CVE-2012-2215—30 mar 2010
Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1
23RISCO
abrir ↗
Metasploit600
Adobe PDF Embedded EXE Social Engineering
CVE-2010-1240—29 mar 2010
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of
60RISCO
abrir ↗
Metasploit600
Adobe PDF Escape EXE Social Engineering (No JavaScript)
CVE-2010-1240—29 mar 2010
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of
60RISCO
abrir ↗
Metasploit300
Shadow Stream Recorder 3.0.1.7 Buffer Overflow
CVE-2009-1641—29 mar 2010
Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via
50RISCO
abrir ↗
Metasploit400
Steinberg MyMP3Player 3.0 Buffer Overflow
CVE-2010-20123HIGH18 mar 2010
Steinberg MyMP3Player <= 3.0.0.67 Buffer Overflow
36RISCO
abrir ↗
Metasploit500
VariCAD 2010-2.05 EN (DWB File) Stack Buffer Overflow
CVE-2010-20114HIGH17 mar 2010
VariCAD EN <= 2010-2.05 .dwb File Stack Buffer Overflow
36RISCO
abrir ↗
Metasploit400
MS10-018 Microsoft Internet Explorer DHTML Behaviors Use After Free
CVE-2010-0806HIGHsob ataque09 mar 2010
Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, an
100RISCO
abrir ↗
Metasploit400
MS10-018 Microsoft Internet Explorer Tabular Data Control ActiveX Memory Corruption
CVE-2010-0805—09 mar 2010
The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on Windows XP SP2 and SP3, and
60RISCO
abrir ↗
Metasploit300
Apache mod_isapi Dangling Pointer
CVE-2010-0425—05 mar 2010
modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2
60RISCO
abrir ↗
Metasploit600
Energizer DUO USB Battery Charger Arucer.dll Trojan Code Execution
CVE-2010-0103—05 mar 2010
UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Aru
43RISCO
abrir ↗
Metasploit300
Viscom Image Viewer CP Pro 8.0/Gold 6.0 ActiveX Control
CVE-2010-5193—03 mar 2010
Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageView
50RISCO
abrir ↗
Metasploit500
Orbital Viewer ORB File Parsing Buffer Overflow
CVE-2010-0688—27 fev 2010
Stack-based buffer overflow in Orbital Viewer 1.04 allows user-assisted remote attackers to execute arbitrary code via a
50RISCO
abrir ↗
Metasploit500
MS10-022 Microsoft Internet Explorer Winhlp32.exe MsgBox Code Execution
CVE-2010-0483—26 fev 2010
vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when
60RISCO
abrir ↗
Metasploit500
EasyFTP Server list.html path Stack Buffer Overflow
CVE-2010-20113CRITICAL18 fev 2010
EasyFTP Server list.html path Stack Buffer Overflow
63RISCO
abrir ↗
Metasploit400
Adobe Acrobat Bundled LibTIFF Integer Overflow
CVE-2010-0188HIGHsob ataqueransomware16 fev 2010
Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a
100RISCO
abrir ↗
Metasploit500
EasyFTP Server CWD Command Stack Buffer Overflow
CVE-2010-20121CRITICAL16 fev 2010
EasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflow
63RISCO
abrir ↗
Metasploit400
Hyleos ChemView ActiveX Control Stack Buffer Overflow
CVE-2010-0679—10 fev 2010
Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos Ch
50RISCO
abrir ↗
Metasploit400
MS10-004 Microsoft PowerPoint Viewer TextBytesAtom Stack Buffer Overflow
CVE-2010-0033—09 fev 2010
Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code vi
50RISCO
abrir ↗
Metasploit300
Oracle DB 10gR2, 11gR1/R2 DBMS_JVM_EXP_PERMS OS Command Execution
CVE-2010-0866—01 fev 2010
Unspecified vulnerability in the JavaVM component in Oracle Database 11.1.0.7 and 11.2.0.1 allows remote authenticated u
23RISCO
abrir ↗
Metasploit300
Oracle DB 11g R1/R2 DBMS_JVM_EXP_PERMS OS Code Execution
CVE-2010-0866—01 fev 2010
Unspecified vulnerability in the JavaVM component in Oracle Database 11.1.0.7 and 11.2.0.1 allows remote authenticated u
23RISCO
abrir ↗
Metasploit500
Wireshark LWRES Dissector getaddrsbyname_request Buffer Overflow (loop)
CVE-2010-0304—27 jan 2010
Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote
60RISCO
abrir ↗
Metasploit500
Wireshark LWRES Dissector getaddrsbyname_request Buffer Overflow
CVE-2010-0304—27 jan 2010
Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote
60RISCO
abrir ↗
Metasploit400
MySQL yaSSL CertDecoder::GetName Buffer Overflow
CVE-2009-4484—25 jan 2010
Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.
50RISCO
abrir ↗
Metasploit500
S.O.M.P.L 1.0 Player Buffer Overflow
CVE-2012-10053CRITICAL22 jan 2010
Simple Web Server Connection Header Buffer Overflow
63RISCO
abrir ↗
Metasploit300
MS10-002 Microsoft Internet Explorer Object Memory Use-After-Free
CVE-2010-0248HIGH21 jan 2010
Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers
68RISCO
abrir ↗
Metasploit200
AOL 9.5 Phobos.Playlist Import() Stack-based Buffer Overflow
CVE-2010-10015HIGH20 jan 2010
AOL <= 9.5 Phobos.Playlist 'Import()' Stack-Based Buffer Overflow
36RISCO
abrir ↗
← anteriorpágina 84 / 116próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.