Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.542exploits catalogados
34.971CVEs com exploração pública
24.695testados em laboratório
24.443 exploits
Exploit-DBVexDay Proof
Network Associates PGP KeyServer 7 - LDAP Buffer Overflow (Metasploit)
CVE-2001-1320remotewindows14 nov 2010
Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute a
50RISCO
abrir
Exploit-DBVexDay Proof
MOXA Device Manager Tool 2.1 - Remote Buffer Overflow (Metasploit)
CVE-2010-4741remotewindows14 nov 2010
Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MD
43RISCO
abrir
Exploit-DBVexDay Proof
Camtron CMNC-200 IP Camera - Directory Traversal
CVE-2010-4231remotehardware13 nov 2010
Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera an
43RISCO
abrir
Exploit-DBVexDay Proof
Pre Online Tests Generator Pro - SQL Injection
CVE-2010-4776webappsphp13 nov 2010
SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers t
23RISCO
abrir
Exploit-DBVexDay Proof
Camtron CMNC-200 IP Camera - ActiveX Buffer Overflow
CVE-2010-4230doshardware13 nov 2010
Stack-based buffer overflow in a certain ActiveX control for the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200
23RISCO
abrir
Exploit-DBVexDay Proof
OneOrZero AIms 2.6.0 Members Edition - Multiple Vulnerabilities
CVE-2010-4834webappsphp13 nov 2010
Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition allo
23RISCO
abrir
Exploit-DBVexDay Proof
OneOrZero AIms 2.6.0 Members Edition - Multiple Vulnerabilities
CVE-2010-4835webappsphp13 nov 2010
Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users
23RISCO
abrir
Exploit-DBVexDay Proof
Camtron CMNC-200 IP Camera - Undocumented Default Accounts
CVE-2010-4233webappshardware13 nov 2010
The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1
23RISCO
abrir
Exploit-DB
AWCM 2.1 Final - Remote File Inclusion
CVE-2010-4810webappsphp13 nov 2010
Multiple PHP remote file inclusion vulnerabilities in AR Web Content Manager (AWCM) 2.1 final allow remote attackers to
23RISCO
abrir
Exploit-DBVexDay Proof
WordPress Plugin Event Registration 5.32 - SQL Injection
CVE-2010-4839webappsphp13 nov 2010
SQL injection vulnerability in the Event Registration plugin 5.32 and earlier for WordPress allows remote attackers to e
23RISCO
abrir
Exploit-DBVexDay Proof
Camtron CMNC-200 IP Camera - Authentication Bypass
CVE-2010-4232webappshardware13 nov 2010
The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera
23RISCO
abrir
Exploit-DBVexDay Proof
DBSite - SQL Injection
CVE-2010-4809webappsphp13 nov 2010
SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir
Exploit-DBVexDay Proof
Webmatic - 'index.php' SQL Injection
CVE-2010-4808webappsphp13 nov 2010
SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p
23RISCO
abrir
Exploit-DBVexDay Proof
Camtron CMNC-200 IP Camera - Denial of Service
CVE-2010-4234doshardware13 nov 2010
The web server on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-00
23RISCO
abrir
Exploit-DBVexDay Proof
Metinfo 3.0 - Multiple Vulnerabilities
CVE-2010-4976webappsphp12 nov 2010
Cross-site scripting (XSS) vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary
23RISCO
abrir
Exploit-DBVexDay Proof
ASPilot Pilot Cart 7.3 - 'newsroom.asp' SQL Injection
CVE-2010-4872webappsasp12 nov 2010
SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL c
23RISCO
abrir
Exploit-DBVexDay Proof
Joomla! Component JSupport 1.5.6 - SQL Injection
CVE-2010-4838webappsphp12 nov 2010
SQL injection vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote authenticated users
23RISCO
abrir
Exploit-DBVexDay Proof
Microsoft IIS FTP Server - NLST Response Overflow (MS09-053) (Metasploit)
CVE-2009-3023remotewindows12 nov 2010
Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authen
60RISCO
abrir
Exploit-DBVexDay Proof
Joomla! Component JSupport 1.5.6 - Cross-Site Scripting
CVE-2010-4837webappsphp12 nov 2010
Cross-site scripting (XSS) vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote attack
23RISCO
abrir
Exploit-DBVexDay Proof
SafeNet SoftRemote - GROUPNAME Buffer Overflow (Metasploit)
CVE-2009-3861localwindows11 nov 2010
Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions bef
38RISCO
abrir
Exploit-DBVexDay Proof
CA eTrust PestPatrol - ActiveX Control Buffer Overflow (Metasploit)
CVE-2009-4225remotewindows11 nov 2010
Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote
50RISCO
abrir
Exploit-DBVexDay Proof
Xlink FTP Client - Remote Buffer Overflow (Metasploit)
CVE-2006-5792remotewindows11 nov 2010
Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute arbitrary code via unspecified
50RISCO
abrir
Exploit-DBVexDay Proof
Xlink FTP Server - Remote Buffer Overflow (Metasploit)
CVE-2006-5792remotewindows11 nov 2010
Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute arbitrary code via unspecified
50RISCO
abrir
Exploit-DBVexDay Proof
IBM Lotus Domino Web Server - Accept-Language Stack Buffer Overflow (Metasploit)
CVE-2008-2240remotewindows11 nov 2010
Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows
50RISCO
abrir
Exploit-DBVexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'ovalarm.exe' CGI Buffer Overflow (Metasploit)
CVE-2009-4179remotewindows11 nov 2010
Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remo
50RISCO
abrir
Exploit-DBVexDay Proof
IBM Access Support - ActiveX Control Buffer Overflow (Metasploit)
CVE-2009-0215remotewindows11 nov 2010
Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as dist
50RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Exchange Server 2000 - XEXCH50 Heap Overflow (MS03-046) (Metasploit)
CVE-2003-0714remotewindows11 nov 2010
The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service
60RISCO
abrir
Exploit-DBVexDay Proof
VUPlayer - '.m3u' Local Buffer Overflow (Metasploit)
CVE-2006-6251localwindows11 nov 2010
Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long st
50RISCO
abrir
Exploit-DBVexDay Proof
Omni-NFS Server - Remote Buffer Overflow (Metasploit)
CVE-2006-5780remotewindows11 nov 2010
Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code v
50RISCO
abrir
Exploit-DBVexDay Proof
Electronic Arts SnoopyCtrl - ActiveX Control Buffer Overflow (Metasploit)
CVE-2007-4466remotewindows11 nov 2010
Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote attac
50RISCO
abrir
anteriorpágina 339 / 815próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.