Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados
32.153CVEs com exploração pública
1.932testados em laboratório
3.462 exploits
Metasploit300
OpenSSL DTLS ChangeCipherSpec Remote DoS
CVE-2009-138626 abr 2000
ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and
60RISCO
abrir
Metasploit300
Cisco IOS HTTP GET /%% Request Denial of Service
CVE-2000-038026 abr 2000
The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a deni
50RISCO
abrir
Metasploit400
UoW IMAP Server LSUB Buffer Overflow
CVE-2000-028416 abr 2000
Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via
50RISCO
abrir
Metasploit600
RedHat Piranha Virtual Server Package passwd.php3 Arbitrary Command Execution
CVE-2000-024804 abr 2000
The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password tha
60RISCO
abrir
Metasploit600
RedHat Piranha Virtual Server Package passwd.php3 Arbitrary Command Execution
CVE-2000-032204 abr 2000
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary command
50RISCO
abrir
Metasploit300
ARP Spoof
CVE-1999-066722 dez 1999
The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denia
23RISCO
abrir
Metasploit600
Matt Wright guestbook.pl Arbitrary Command Execution
CVE-1999-105305 nov 1999
guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remo
60RISCO
abrir
Metasploit600
PsExec via Current User Token
CVE-1999-050401 jan 1999
A Windows NT local user or administrator account has a default, null, blank, or missing password.
50RISCO
abrir
Metasploit0
Microsoft Windows Authenticated User Code Execution
CVE-1999-050401 jan 1999
A Windows NT local user or administrator account has a default, null, blank, or missing password.
50RISCO
abrir
Metasploit0
SSH User Code Execution
CVE-1999-050201 jan 1999
A Unix account has a default, null, blank, or missing password.
50RISCO
abrir
Metasploit600
Windows Management Instrumentation (WMI) Remote Command Execution
CVE-1999-050401 jan 1999
A Windows NT local user or administrator account has a default, null, blank, or missing password.
50RISCO
abrir
Metasploit600
Powershell Remoting Remote Command Execution
CVE-1999-050401 jan 1999
A Windows NT local user or administrator account has a default, null, blank, or missing password.
50RISCO
abrir
Metasploit600
MS99-025 Microsoft IIS MDAC msadcs.dll RDS Arbitrary Remote Command Execution
CVE-1999-101117 jul 1998
The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x expose
60RISCO
abrir
Metasploit200
War-FTPD 1.65 Username Overflow
CVE-1999-025619 mar 1998
Buffer overflow in War FTP allows remote execution of commands.
60RISCO
abrir
Metasploit200
War-FTPD 1.65 Password Overflow
CVE-1999-025619 mar 1998
Buffer overflow in War FTP allows remote execution of commands.
60RISCO
abrir
Metasploit300
X11 Keylogger
CVE-1999-052601 jul 1997
An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.
23RISCO
abrir
Metasploit300
Chargen Probe Utility
CVE-1999-010308 fev 1996
Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or U
23RISCO
abrir
Metasploit600
Solaris ypupdated Command Execution
CVE-1999-020912 dez 1994
The SunView (SunTools) selection_svc facility allows remote users to read files.
50RISCO
abrir
Metasploit300
Httpdasm Directory Traversal
httpdASM 0.92 Path Traversal
36RISCO
abrir
Metasploit300
HTTP Login Utility
A Unix account has a default, null, blank, or missing password.
50RISCO
abrir
Metasploit300
HP Intelligent Management SOM FileDownloadServlet Arbitrary Download
Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Mod
30RISCO
abrir
Metasploit300
HP Intelligent Management ReportImgServlt Directory Traversal
Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Netw
23RISCO
abrir
Metasploit300
HP Intelligent Management IctDownloadServlet Directory Traversal
Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Netw
23RISCO
abrir
Metasploit300
HP Intelligent Management FaultDownloadServlet Directory Traversal
Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Netw
23RISCO
abrir
Metasploit300
HP Intelligent Management BIMS DownloadServlet Directory Traversal
Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Soft
30RISCO
abrir
Metasploit300
HTTP Host Header Injection Detection
The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the emai
60RISCO
abrir
Metasploit300
Novell Groupwise Agents HTTP Directory Traversal
Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 be
30RISCO
abrir
Metasploit300
Embedthis GoAhead Embedded Web Server Directory Traversal
EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . (dot), which allows remot
23RISCO
abrir
Metasploit300
GlassFish Brute Force Utility
Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Applicati
50RISCO
abrir
Metasploit300
Carlo Gavazzi Energy Meters - Login Brute Force, Extract Info and Dump Plant Database
An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Vers
18RISCO
abrir
anteriorpágina 107 / 116próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.