Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.386exploits catalogados
36.533CVEs com exploração pública
24.695testados em laboratório
19.066 exploits
Exploit-DBVexDay Proof
TABS MailCarrier 2.51 - SMTP EHLO Overflow (Metasploit)
CVE-2004-1638remotewindows30 abr 2010
Buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long (1) EHLO and possibly (
50RISCO
abrir
Exploit-DBVexDay Proof
Icecast 2.0.1 (Windows x86) - Header Overwrite (Metasploit)
CVE-2004-1561remotewindows_x8630 abr 2010
Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with
60RISCO
abrir
Exploit-DBVexDay Proof
Private Wire Gateway - Remote Buffer Overflow (Metasploit)
CVE-2006-3252remotewindows30 abr 2010
Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows r
50RISCO
abrir
Exploit-DBVexDay Proof
SHOUTcast DNAS/Win32 1.9.4 - File Request Format String Overflow (Metasploit)
CVE-2004-1373remotewindows_x8630 abr 2010
Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash)
60RISCO
abrir
Exploit-DBVexDay Proof
Winamp - Playlist UNC Path Computer Name Overflow (Metasploit)
CVE-2006-0476localwindows30 abr 2010
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with
60RISCO
abrir
Exploit-DBVexDay Proof
MailEnable IMAPD 1.54 - STATUS Request Buffer Overflow (Metasploit)
CVE-2005-2278remotewindows30 abr 2010
Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated users
60RISCO
abrir
Exploit-DBVexDay Proof
Squid - NTLM (Authenticated) Overflow (Metasploit)
CVE-2004-0541remotelinux30 abr 2010
Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when comp
60RISCO
abrir
Exploit-DBVexDay Proof
Solaris dtspcd - Remote Heap Overflow (Metasploit)
CVE-2001-0803remotesolaris_sparc30 abr 2010
Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remo
60RISCO
abrir
Exploit-DBVexDay Proof
SecureCRT 4.0 Beta 2 SSH1 - Remote Buffer Overflow (Metasploit)
CVE-2002-1059remotewindows30 abr 2010
Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execut
50RISCO
abrir
Exploit-DBVexDay Proof
Destiny Media Player 1.61 - PLS .m3u Buffer Overflow (Metasploit)
CVE-2009-3429localwindows30 abr 2010
Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code
50RISCO
abrir
Exploit-DBVexDay Proof
LeapWare LeapFTP 2.7.3.600 - PASV Reply Client Overflow (Metasploit)
CVE-2003-0558remotewindows30 abr 2010
Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response
50RISCO
abrir
Exploit-DBVexDay Proof
ProSysInfo TFTP server TFTPDWIN 0.4.2 - 'Filename' Remote Buffer Overflow (Metasploit)
CVE-2006-4948remotewindows30 abr 2010
Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers to
50RISCO
abrir
Exploit-DBVexDay Proof
Microsoft OWC Spreadsheet - HTMLURL Buffer Overflow (MS09-043) (Metasploit)
CVE-2009-1534remotewindows30 abr 2010
Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3,
50RISCO
abrir
Exploit-DBVexDay Proof
Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (Metasploit)
CVE-2003-0264remotewindows30 abr 2010
Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO arg
60RISCO
abrir
Exploit-DBVexDay Proof
UltraISO - '.cue' File Parsing Buffer Overflow (Metasploit)
CVE-2007-2888localwindows30 abr 2010
Stack-based buffer overflow in UltraISO 8.6.2.2011 and earlier allows user-assisted remote attackers to execute arbitrar
50RISCO
abrir
Exploit-DBVexDay Proof
CA BrightStor Discovery Service - TCP Overflow (Metasploit)
CVE-2005-2535remotewindows30 abr 2010
Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execu
60RISCO
abrir
Exploit-DBVexDay Proof
BaoFeng Storm - 'mps.dll' ActiveX OnBeforeVideoDownload Buffer Overflow (Metasploit)
CVE-2009-1612remotewindows30 abr 2010
Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote
50RISCO
abrir
Exploit-DBVexDay Proof
CA iTechnology iGateway - Debug Mode Buffer Overflow (Metasploit)
CVE-2005-3190remotewindows30 abr 2010
Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows r
50RISCO
abrir
Exploit-DBVexDay Proof
Urgent Backup 3.20 / ABC Backup Pro 5.20 / ABC Backup 5.50 - '.zip' File (SEH)
CVE-2010-1686localwindows30 abr 2010
Stack-based buffer overflow in (1) Urgent Backup 3.20, and (2) ABC Backup Pro 5.20 and ABC Backup 5.50, allows user-assi
23RISCO
abrir
Exploit-DBVexDay Proof
Adobe - 'Collab.getIcon()' Local Buffer Overflow (Metasploit) (1)
CVE-2009-0927HIGHsob ataquelocalwindows30 abr 2010
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows r
100RISCO
abrir
Exploit-DBVexDay Proof
KarjaSoft Sami FTP Server 2.0.2 - USER Remote Buffer Overflow (Metasploit)
CVE-2006-0441remotewindows30 abr 2010
Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER c
60RISCO
abrir
Exploit-DBVexDay Proof
JobPost - SQL Injection
CVE-2010-1727webappsphp30 abr 2010
SQL injection vulnerability in type.asp in JobPost 1.0 allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir
Exploit-DBVexDay Proof
Microsoft IIS - Phone Book Service Overflow (MS00-094) (Metasploit)
CVE-2000-1089remotewindows30 abr 2010
Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Se
60RISCO
abrir
Exploit-DBVexDay Proof
WinZip FileView - 'WZFILEVIEW.FileViewCtrl.61' ActiveX Buffer Overflow (Metasploit)
CVE-2006-5198remotewindows30 abr 2010
The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before buil
50RISCO
abrir
Exploit-DBVexDay Proof
CA BrightStor Agent for Microsoft SQL - Remote Overflow (Metasploit)
CVE-2005-1272remotewindows30 abr 2010
Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Ser
50RISCO
abrir
Exploit-DBVexDay Proof
IPSwitch IMail LDAP Daemon/Service - Remote Buffer Overflow (Metasploit)
CVE-2004-0297remotewindows30 abr 2010
Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Serve
50RISCO
abrir
Exploit-DBVexDay Proof
CA BrightStor ARCserve - Message Engine Heap Overflow (Metasploit)
CVE-2006-5143remotewindows30 abr 2010
Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve B
60RISCO
abrir
Exploit-DBVexDay Proof
UltraVNC 1.0.1 - Client Buffer Overflow (Metasploit)
CVE-2006-1652remotewindows30 abr 2010
Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-ass
50RISCO
abrir
Exploit-DBVexDay Proof
MailEnable IMAPD Professional (2.35) - Login Request Buffer Overflow (Metasploit)
CVE-2006-6423remotewindows30 abr 2010
Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Pro
50RISCO
abrir
Exploit-DBVexDay Proof
Barracuda - IMG.pl Remote Command Execution (Metasploit)
CVE-2005-2847webappscgi30 abr 2010
img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary comman
50RISCO
abrir
anteriorpágina 207 / 636próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.