Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.836exploits catalogados

32.133CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8.156Nuclei 4.201Metasploit 3.462✓ só verificadosrecentes populares risco

3.462 exploits

Metasploit500

HTTPDX tolog() Function Format String Vulnerability

CVE-2009-4769—17 nov 2009

Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) remo

50RISCO

Metasploit600

AwingSoft Winds3D Player 3.5 SceneURL Download and Execute

CVE-2009-4850—14 nov 2009

The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneU

43RISCO

Metasploit400

MS09-067 Microsoft Excel Malformed FEATHEADER Record Vulnerability

CVE-2009-3129HIGHsob ataque10 nov 2009

Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Conv

100RISCO

Metasploit300

Microsoft Windows EOT Font Table Directory Integer Overflow

CVE-2009-2514—10 nov 2009

win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse fon

50RISCO

Metasploit600

Apache Tomcat Manager Application Deployer Authenticated Code Execution

CVE-2009-4188—09 nov 2009

HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers t

50RISCO

Metasploit600

Apache Tomcat Manager Application Deployer Authenticated Code Execution

CVE-2009-4189—09 nov 2009

HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to exe

60RISCO

Metasploit600

Apache Tomcat Manager Application Deployer Authenticated Code Execution

CVE-2010-0557—09 nov 2009

IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial

50RISCO

Metasploit600

Apache Tomcat Manager Application Deployer Authenticated Code Execution

CVE-2010-4094—09 nov 2009

The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN acc

50RISCO

Metasploit600

Apache Tomcat Manager Application Deployer Authenticated Code Execution

CVE-2009-3548—09 nov 2009

The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a

60RISCO

Metasploit600

Apache Tomcat Manager Application Deployer Authenticated Code Execution

CVE-2009-3843—09 nov 2009

HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which all

60RISCO

Metasploit600

Apache Tomcat Manager Authenticated Upload Code Execution

CVE-2009-4189—09 nov 2009

HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to exe

60RISCO

Metasploit600

Apache Tomcat Manager Authenticated Upload Code Execution

CVE-2010-0557—09 nov 2009

IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial

50RISCO

Metasploit600

Apache Tomcat Manager Authenticated Upload Code Execution

CVE-2010-4094—09 nov 2009

The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN acc

50RISCO

Metasploit600

Apache Tomcat Manager Authenticated Upload Code Execution

CVE-2009-4188—09 nov 2009

HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers t

50RISCO

Metasploit600

Apache Tomcat Manager Authenticated Upload Code Execution

CVE-2009-3548—09 nov 2009

The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a

60RISCO

Metasploit600

Apache Tomcat Manager Authenticated Upload Code Execution

CVE-2009-3843—09 nov 2009

HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which all

60RISCO

Metasploit400

IBM Tivoli Storage Manager Express CAD Service Buffer Overflow

CVE-2009-3853—04 nov 2009

Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (T

50RISCO

Metasploit500

IBM Tivoli Storage Manager Express RCA Service Buffer Overflow

CVE-2008-4828—04 nov 2009

Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM

60RISCO

Metasploit500

Sun Java JRE getSoundbank file:// URI Buffer Overflow

CVE-2009-3867—04 nov 2009

Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, J

60RISCO

Metasploit200

Hewlett-Packard Power Manager Administration Buffer Overflow

CVE-2009-2685—04 nov 2009

Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers t

60RISCO

Metasploit300

Symantec Altiris Deployment Solution ActiveX Control Buffer Overflow

CVE-2009-3033—04 nov 2009

Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilitie

50RISCO

Metasploit500

Sun Java JRE AWT setDiffICM Buffer Overflow

CVE-2009-3869—04 nov 2009

Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment

50RISCO

Metasploit300

Symantec ConsoleUtilities ActiveX Control Buffer Overflow

CVE-2009-3031—02 nov 2009

Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6

50RISCO

Metasploit200

CA eTrust PestPatrol ActiveX Control Buffer Overflow

CVE-2009-4225—02 nov 2009

Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote

50RISCO

Metasploit400

Rhinosoft Serv-U Session Cookie Buffer Overflow

CVE-2009-4006—01 nov 2009

Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other ver

60RISCO

Metasploit400

SafeNet SoftRemote GROUPNAME Buffer Overflow

CVE-2009-3861—30 out 2009

Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions bef

38RISCO

Metasploit200

UFO: Alien Invasion IRC Client Buffer Overflow

CVE-2009-10006CRITICAL28 out 2009

UFO: Alien Invasion <= 2.2.1 IRC Client Buffer Overflow

43RISCO

Metasploit200

UFO: Alien Invasion IRC Client Buffer Overflow

CVE-2009-10006CRITICAL28 out 2009

UFO: Alien Invasion <= 2.2.1 IRC Client Buffer Overflow

43RISCO

Metasploit300

Eureka Email 2.2q ERR Remote Buffer Overflow

CVE-2009-3837—22 out 2009

Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error m

50RISCO

Metasploit500

Oracle 10gR2 TNS Listener AUTH_SESSKEY Buffer Overflow

CVE-2009-1979—20 out 2009

Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote

60RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.