Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados
36.465CVEs com exploração pública
24.695testados em laboratório
19.066 exploits
Exploit-DBVexDay Proof
Microsoft Excel - WOPT Record Parsing Heap Memory Corruption
CVE-2010-1248doswindows21 set 2010
Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary
28RISCO
abrir
Exploit-DBVexDay Proof
Novell iPrint Client - ActiveX Control call-back-url Buffer Overflow (Metasploit)
CVE-2010-1527remotewindows21 set 2010
Stack-based buffer overflow in Novell iPrint Client before 5.44 allows remote attackers to execute arbitrary code via a
50RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Excel - WOPT Record Parsing Heap Memory Corruption
CVE-2010-0824doswindows21 set 2010
Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute
28RISCO
abrir
Exploit-DBVexDay Proof
@Mail 6.1.9 - 'MailType' Cross-Site Scripting
CVE-2010-4930webappsphp21 set 2010
Cross-site scripting (XSS) vulnerability in index.php in @mail Webmail before 6.2.0 allows remote attackers to inject ar
23RISCO
abrir
Exploit-DBVexDay Proof
Novell iPrint Client - ActiveX Control ExecuteRequest debug Buffer Overflow (Metasploit)
CVE-2010-3106remotewindows21 set 2010
The ienipp.ocx ActiveX control in the browser plugin in Novell iPrint Client before 5.42 does not properly validate the
50RISCO
abrir
Exploit-DBVexDay Proof
ibPhotohost 1.1.2 - SQL Injection
CVE-2010-3601webappsphp21 set 2010
SQL injection vulnerability in index.php in ibPhotohost 1.1.2 allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - SMB Relay Code Execution (MS08-068) (Metasploit)
CVE-2008-4037remotewindows21 set 2010
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 20
50RISCO
abrir
Exploit-DBVexDay Proof
Novell iPrint Client - ActiveX Control ExecuteRequest Buffer Overflow (Metasploit)
CVE-2008-0935remotewindows21 set 2010
Stack-based buffer overflow in the Novell iPrint Control ActiveX control in ienipp.ocx in Novell iPrint Client before 4.
50RISCO
abrir
Exploit-DBVexDay Proof
Mozilla Suite/Firefox - Navigator Object Code Execution (Metasploit)
CVE-2006-3677remotemultiple20 set 2010
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by chang
60RISCO
abrir
Exploit-DBVexDay Proof
Apple iPhone MobileSafari LibTIFF - 'email' Remote Buffer Overflow (Metasploit) (2)
CVE-2006-3459remotehardware20 set 2010
Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and othe
50RISCO
abrir
Exploit-DBVexDay Proof
McAfee Visual Trace - ActiveX Control Buffer Overflow (Metasploit)
CVE-2006-6707remotewindows20 set 2010
Stack-based buffer overflow in the NeoTraceExplorer.NeoTraceLoader ActiveX control (NeoTraceExplorer.dll) in NeoTrace Ex
50RISCO
abrir
Exploit-DBVexDay Proof
Novell Messenger Server 2.0 - Accept-Language Overflow (Metasploit)
CVE-2006-0992remotewindows20 set 2010
Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute ar
60RISCO
abrir
Exploit-DBVexDay Proof
AstonSoft DeepBurner - '.dbr' Path Buffer Overflow (Metasploit)
CVE-2006-6665localwindows20 set 2010
Buffer overflow in Astonsoft DeepBurner Pro and Free 1.8.0 and earlier allows user-assisted remote attackers to execute
50RISCO
abrir
Exploit-DBVexDay Proof
CA CAM (Windows x86) - 'log_security()' Remote Stack Buffer Overflow (Metasploit)
CVE-2005-2668remotewindows_x8620 set 2010
Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1
60RISCO
abrir
Exploit-DBVexDay Proof
Proxy-Pro Professional GateKeeper 4.7 - GET Overflow (Metasploit)
CVE-2004-0326remotewindows20 set 2010
Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET
50RISCO
abrir
Exploit-DBVexDay Proof
RhinoSoft Serv-U FTPd Server - MDTM Overflow (Metasploit)
CVE-2004-0330remotewindows20 set 2010
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP) (MS07-017) (Metasploit)
CVE-2007-0038remotewindows20 set 2010
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attack
60RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP) (MS07-017) (Metasploit)
CVE-2007-1765remotewindows20 set 2010
Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code
50RISCO
abrir
Exploit-DBVexDay Proof
IBM TPM for OS Deployment 5.1.0.x - 'rembo.exe' Remote Buffer Overflow (Metasploit)
CVE-2007-1868remotewindows20 set 2010
The management service in IBM Tivoli Provisioning Manager for OS Deployment before 5.1 Fix Pack 2 does not properly hand
50RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Private Communications Transport - Remote Overflow (MS04-011) (Metasploit)
CVE-2003-0719remotewindows20 set 2010
Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as u
60RISCO
abrir
Exploit-DBVexDay Proof
Oracle 9i XDB (Windows x86) - HTTP PASS Overflow (Metasploit)
CVE-2003-0727remotewindows_x8620 set 2010
Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to
50RISCO
abrir
Exploit-DBVexDay Proof
ISS - 'PAM.dll' ICQ Parser Buffer Overflow (Metasploit)
CVE-2004-0362remotewindows20 set 2010
Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, a
60RISCO
abrir
Exploit-DBVexDay Proof
Solaris LPD - Command Execution (Metasploit)
CVE-2001-1583remotesolaris20 set 2010
lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request wit
60RISCO
abrir
Exploit-DBVexDay Proof
IPSwitch IMail IMAP4D - Delete Overflow (Metasploit)
CVE-2004-1520remotewindows20 set 2010
Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a lon
60RISCO
abrir
Exploit-DBVexDay Proof
Arugizer Trojan Horse (Energizer DUO) - Code Execution (Metasploit)
CVE-2010-0103remotewindows20 set 2010
UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Aru
43RISCO
abrir
Exploit-DBVexDay Proof
McAfee ePolicy Orchestrator / ProtectionPilot - Remote Overflow (Metasploit)
CVE-2006-5156remotewindows_x8620 set 2010
Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attac
60RISCO
abrir
Exploit-DBVexDay Proof
iPhone MobileMail - LibTIFF Buffer Overflow (Metasploit)
CVE-2006-3459remotehardware20 set 2010
Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and othe
50RISCO
abrir
Exploit-DBVexDay Proof
Sun Java - Calendar Deserialization (Metasploit)
CVE-2008-5353remotemultiple20 set 2010
The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; a
60RISCO
abrir
Exploit-DBVexDay Proof
Husdawg_ LLC. System Requirements Lab - ActiveX Unsafe Method (Metasploit)
CVE-2008-4385remotewindows20 set 2010
Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the downlo
50RISCO
abrir
Exploit-DBVexDay Proof
LightNEasy CMS 3.2.1 - Blind SQL Injection
CVE-2010-3485webappsphp20 set 2010
SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir
anteriorpágina 178 / 636próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.