Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.980exploits catalogados

36.899CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8.959Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

3.502 exploits

Metasploit500

ToolTalk rpc.ttdbserverd _tt_internal_realpath Buffer Overflow (AIX)

CVE-2009-2727—17 jun 2009

Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.

43RISCO

Metasploit300

Slowloris Denial of Service Attack

CVE-2010-2227—17 jun 2009

Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-En

30RISCO

Metasploit300

Slowloris Denial of Service Attack

CVE-2007-6750—17 jun 2009

The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP

40RISCO

Metasploit300

Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5

CVE-2017-12373—17 jun 2009

A vulnerability in the TLS protocol implementation of legacy Cisco ASA 5500 Series (ASA 5505, 5510, 5520, 5540, and 5550

23RISCO

Metasploit300

Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5

CVE-2017-1000385—17 jun 2009

The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding. Thi

23RISCO

Metasploit300

Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5

CVE-2017-17427—17 jun 2009

Radware Alteon devices with a firmware version between 31.0.0.0-31.0.3.0 are vulnerable to an adaptive-chosen ciphertext

23RISCO

Metasploit300

Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5

CVE-2017-13099HIGH17 jun 2009

wolfSSL Bleichenbacher/ROBOT

41RISCO

Metasploit300

Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5

CVE-2017-13098HIGH17 jun 2009

BouncyCastle JCE TLS Bleichenbacher/ROBOT

41RISCO

Metasploit300

Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5

CVE-2017-6168—17 jun 2009

On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (f

23RISCO

Metasploit300

Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5

CVE-2017-17382—17 jun 2009

Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build

23RISCO

Metasploit300

Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5

CVE-2016-6883—17 jun 2009

MatrixSSL before 3.8.3 configured with RSA Cipher Suites allows remote attackers to obtain sensitive information via a B

23RISCO

Metasploit300

Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5

CVE-2017-17428—17 jun 2009

Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote attackers to decrypt TLS cip

23RISCO

Metasploit300

Green Dam URL Processing Buffer Overflow

CVE-2009-20008HIGH11 jun 2009

Green Dam 3.17 URL Processing Buffer Overflow

36RISCO

Metasploit600

Worldweaver DX Studio Player shell.execute() Command Execution

CVE-2009-2011—09 jun 2009

Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a p

50RISCO

Metasploit600

PeaZip Zip Processing Command Injection

CVE-2009-2261—05 jun 2009

PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .z

50RISCO

Metasploit200

SafeNet SoftRemote IKE Service Buffer Overflow

CVE-2009-1943—01 jun 2009

Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers

60RISCO

Metasploit500

Apple OS X iTunes 8.1.1 ITMS Overflow

CVE-2009-0950—01 jun 2009

Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a deni

43RISCO

Metasploit300

Winamp MAKI Buffer Overflow

CVE-2009-1831—20 mai 2009

The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute

50RISCO

Metasploit300

AOL Radio AmpX ActiveX Control ConvertFile() Buffer Overflow

CVE-2007-5755—19 mai 2009

Multiple stack-based buffer overflows in the AOL AmpX ActiveX control in AmpX.dll 2.6.1.11 in AOL Radio allow remote att

23RISCO

Metasploit600

NetDecision 4.2 TFTP Writable Directory Traversal Execution

CVE-2009-1730—16 mai 2009

Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read

50RISCO

Metasploit300

NetDecision 4.2 TFTP Directory Traversal

CVE-2009-1730—16 mai 2009

Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read

50RISCO

Metasploit300

Oracle DB SQL Injection via SYS.LT.ROLLBACKWORKSPACE

CVE-2009-0978—04 mai 2009

Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote auth

23RISCO

Metasploit300

BaoFeng Storm mps.dll ActiveX OnBeforeVideoDownload Buffer Overflow

CVE-2009-1612—30 abr 2009

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote

50RISCO

Metasploit600

Symantec System Center Alert Management System (xfr.exe) Arbitrary Command Execution

CVE-2009-1429—28 abr 2009

The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Cente

60RISCO

Metasploit400

Symantec Alert Management System Intel Alert Originator Service Buffer Overflow

CVE-2009-1430—28 abr 2009

Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management Syst

50RISCO

Metasploit500

Linux udev Netlink Local Privilege Escalation

CVE-2009-1185—16 abr 2009

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to ga

60RISCO

Metasploit600

EnjoySAP SAP GUI ActiveX Control Arbitrary File Download

CVE-2008-4830—15 abr 2009

Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 P

43RISCO

Metasploit300

Microsoft Whale Intelligent Application Gateway ActiveX Control Buffer Overflow

CVE-2007-2238—15 abr 2009

Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft

50RISCO

Metasploit500

Novell NetIdentity Agent XTIERRPCPIPE Named Pipe Buffer Overflow

CVE-2009-1350—06 abr 2009

Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute ar

50RISCO

Metasploit500

UltraISO CCD File Parsing Buffer Overflow

CVE-2009-1260—03 abr 2009

Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of ser

50RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.