Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados
36.465CVEs com exploração pública
24.695testados em laboratório
24.695 exploits
Exploit-DBVexDay Proof
Metinfo 3.0 - Multiple Vulnerabilities
CVE-2010-4976webappsphp12 nov 2010
Cross-site scripting (XSS) vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary
23RISCO
abrir
Exploit-DBVexDay Proof
Joomla! Component JSupport 1.5.6 - Cross-Site Scripting
CVE-2010-4837webappsphp12 nov 2010
Cross-site scripting (XSS) vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote attack
23RISCO
abrir
Exploit-DBVexDay Proof
ASPilot Pilot Cart 7.3 - 'newsroom.asp' SQL Injection
CVE-2010-4872webappsasp12 nov 2010
SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL c
23RISCO
abrir
Exploit-DBVexDay Proof
Joomla! Component JSupport 1.5.6 - SQL Injection
CVE-2010-4838webappsphp12 nov 2010
SQL injection vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote authenticated users
23RISCO
abrir
Exploit-DBVexDay Proof
Opera historysearch - Cross-Site Scripting (Metasploit)
CVE-2008-4696remotemultiple11 nov 2010
Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary w
50RISCO
abrir
Exploit-DBVexDay Proof
VUPlayer - '.m3u' Local Buffer Overflow (Metasploit)
CVE-2006-6251localwindows11 nov 2010
Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long st
50RISCO
abrir
Exploit-DBVexDay Proof
Landesk - OS command Injection
CVE-2010-2892webappsphp11 nov 2010
gsb/drivers.php in LANDesk Management Gateway 4.0 through 4.0-1.48 and 4.2 through 4.2-1.8 allows remote authenticated a
23RISCO
abrir
Exploit-DBVexDay Proof
CA eTrust PestPatrol - ActiveX Control Buffer Overflow (Metasploit)
CVE-2009-4225remotewindows11 nov 2010
Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote
50RISCO
abrir
Exploit-DBVexDay Proof
Xlink FTP Server - Remote Buffer Overflow (Metasploit)
CVE-2006-5792remotewindows11 nov 2010
Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute arbitrary code via unspecified
50RISCO
abrir
Exploit-DBVexDay Proof
Xlink FTP Client - Remote Buffer Overflow (Metasploit)
CVE-2006-5792remotewindows11 nov 2010
Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute arbitrary code via unspecified
50RISCO
abrir
Exploit-DBVexDay Proof
feedDemon 3.1.0.12 - Local Stack Buffer Overflow (Metasploit)
CVE-2009-0546localwindows11 nov 2010
Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbi
50RISCO
abrir
Exploit-DBVexDay Proof
POP Peeper 3.4 - DATE Buffer Overflow (Metasploit)
CVE-2009-1029remotewindows11 nov 2010
Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a
50RISCO
abrir
Exploit-DBVexDay Proof
MP3-Nator 2.0 - Local Buffer Overflow (SEH)
CVE-2009-2364localwindows11 nov 2010
Stack-based buffer overflow in Mp3-Nator 2.0 allows remote attackers to execute arbitrary code via (1) a long string in
28RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Exchange Server 2000 - XEXCH50 Heap Overflow (MS03-046) (Metasploit)
CVE-2003-0714remotewindows11 nov 2010
The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service
60RISCO
abrir
Exploit-DBVexDay Proof
Omni-NFS Server - Remote Buffer Overflow (Metasploit)
CVE-2006-5780remotewindows11 nov 2010
Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code v
50RISCO
abrir
Exploit-DBVexDay Proof
BlazeDVD 5.1 - PLF Buffer Overflow (Metasploit)
CVE-2006-6199localwindows11 nov 2010
Stack-based buffer overflow in BlazeVideo BlazeDVD Standard and Professional 5.0, and possibly earlier, allows remote at
50RISCO
abrir
Exploit-DBVexDay Proof
AIX Calendar Manager Service Daemon (rpc.cmsd) Opcode 21 - Buffer Overflow (Metasploit)
CVE-2009-3699dosaix11 nov 2010
Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through
50RISCO
abrir
Exploit-DBVexDay Proof
Electronic Arts SnoopyCtrl - ActiveX Control Buffer Overflow (Metasploit)
CVE-2007-4466remotewindows11 nov 2010
Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote attac
50RISCO
abrir
Exploit-DBVexDay Proof
ToolTalk - rpc.ttdbserverd _tt_internal_realpath Buffer Overflow (AIX) (Metasploit)
CVE-2009-2727remoteaix11 nov 2010
Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.
43RISCO
abrir
Exploit-DBVexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'Snmp.exe' CGI Buffer Overflow (Metasploit)
CVE-2009-3849remotecgi11 nov 2010
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote att
60RISCO
abrir
Exploit-DBVexDay Proof
CA AntiVirus Engine - CAB Buffer Overflow (Metasploit)
CVE-2007-2864localwindows11 nov 2010
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associ
50RISCO
abrir
Exploit-DBVexDay Proof
Apple iTunes 8.1.1 (Mac OSX) - ITms Overflow (Metasploit)
CVE-2009-0950remoteosx11 nov 2010
Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a deni
43RISCO
abrir
Exploit-DBVexDay Proof
SafeNet SoftRemote - GROUPNAME Buffer Overflow (Metasploit)
CVE-2009-3861localwindows11 nov 2010
Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions bef
38RISCO
abrir
Exploit-DBVexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'ovalarm.exe' CGI Buffer Overflow (Metasploit)
CVE-2009-4179remotewindows11 nov 2010
Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remo
50RISCO
abrir
Exploit-DBVexDay Proof
IBM Access Support - ActiveX Control Buffer Overflow (Metasploit)
CVE-2009-0215remotewindows11 nov 2010
Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as dist
50RISCO
abrir
Exploit-DBVexDay Proof
Apple Directory Services - Memory Corruption
CVE-2010-1840dososx11 nov 2010
Stack-based buffer overflow in the password-validation functionality in Directory Services in Apple Mac OS X 10.5.8 and
23RISCO
abrir
Exploit-DBVexDay Proof
Persits XUpload - ActiveX MakeHttpRequest Directory Traversal (Metasploit)
CVE-2009-3693remotewindows11 nov 2010
Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows rem
50RISCO
abrir
Exploit-DBVexDay Proof
IBM Lotus Domino Web Server - Accept-Language Stack Buffer Overflow (Metasploit)
CVE-2008-2240remotewindows11 nov 2010
Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows
50RISCO
abrir
Exploit-DBVexDay Proof
Symantec ConsoleUtilities - ActiveX Control Buffer Overflow (Metasploit)
CVE-2009-3031remotewindows11 nov 2010
Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6
50RISCO
abrir
Exploit-DBVexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'OvWebHelp.exe' CGI Buffer Overflow (Metasploit)
CVE-2009-4178remotewindows11 nov 2010
Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows rem
60RISCO
abrir
anteriorpágina 170 / 824próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.