Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

3.489 exploits

Metasploit300

Cisco DLSw Information Disclosure Scanner

CVE-2014-7992—17 nov 2014

The DLSw implementation in Cisco IOS does not initialize packet buffers, which allows remote attackers to obtain sensiti

23RISCO

abrir ↗

Metasploit400

MS14-064 Microsoft Internet Explorer Windows OLE Automation Array Remote Code Execution

CVE-2014-6332HIGHsob ataque13 nov 2014

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows

100RISCO

abrir ↗

Metasploit600

MS14-064 Microsoft Windows OLE Package Manager Code Execution Through Python

CVE-2014-6352HIGHsob ataque12 nov 2014

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2

100RISCO

abrir ↗

Metasploit600

WordPress Photo Gallery Unrestricted File Upload

CVE-2014-9312—11 nov 2014

Unrestricted File Upload vulnerability in Photo Gallery 1.2.5.

50RISCO

abrir ↗

Metasploit400

Adobe Flash Player UncompressViaZlibVariant Uninitialized Memory

CVE-2014-8440—11 nov 2014

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on

60RISCO

abrir ↗

Metasploit200

MS14-070 Windows tcpip!SetAddrOptions NULL Pointer Dereference

CVE-2014-4076—11 nov 2014

Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2)

43RISCO

abrir ↗

Metasploit500

MantisBT XmlImportExport Plugin PHP Code Injection Vulnerability

CVE-2014-7146—08 nov 2014

The XmlImportExport plugin in MantisBT 1.2.17 and earlier allows remote attackers to execute arbitrary PHP code via a cr

50RISCO

abrir ↗

Metasploit500

MantisBT XmlImportExport Plugin PHP Code Injection Vulnerability

CVE-2014-8598—08 nov 2014

The XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote attackers to (1) upload arb

50RISCO

abrir ↗

Metasploit300

ManageEngine Password Manager SQLAdvancedALSearchResult.cc Pro SQL Injection

CVE-2014-8499—08 nov 2014

Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Servi

50RISCO

abrir ↗

Metasploit300

i-FTP Schedule Buffer Overflow

CVE-2014-125114HIGH06 nov 2014

i-Ftp 2.20 Schedule.xml Stack-Based Buffer Overflow

36RISCO

abrir ↗

Metasploit300

ManageEngine Eventlog Analyzer Managed Hosts Administrator Credential Disclosure

CVE-2014-6038—05 nov 2014

Zoho ManageEngine EventLog Analyzer versions 7 through 9.9 build 9002 have a database Information Disclosure Vulnerabili

60RISCO

abrir ↗

Metasploit300

ManageEngine Eventlog Analyzer Managed Hosts Administrator Credential Disclosure

CVE-2014-6039—05 nov 2014

ManageEngine EventLog Analyzer version 7 through 9.9 build 9002 has a Credentials Disclosure Vulnerability. Fixed versio

50RISCO

abrir ↗

Metasploit600

Visual Mining NetCharts Server Remote Code Execution

CVE-2014-8516—03 nov 2014

Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary co

60RISCO

abrir ↗

Metasploit600

HP Data Protector 8.10 Remote Command Execution

CVE-2014-2623—02 nov 2014

Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown

60RISCO

abrir ↗

Metasploit600

tnftp "savefile" Arbitrary Command Execution

CVE-2014-8517—28 out 2014

The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 thro

50RISCO

abrir ↗

Metasploit600

X7 Chat 2.0.5 lib/message.php preg_replace() PHP Code Execution

CVE-2014-8998—27 out 2014

lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a c

50RISCO

abrir ↗

Metasploit300

GNU Wget FTP Symlink Arbitrary Filesystem Access

CVE-2014-4877—27 out 2014

Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to w

30RISCO

abrir ↗

Metasploit300

WildFly Directory Traversal

CVE-2014-7816—22 out 2014

Directory traversal vulnerability in JBoss Undertow 1.0.x before 1.0.17, 1.1.x before 1.1.0.CR5, and 1.2.x before 1.2.0.

23RISCO

abrir ↗

Metasploit600

Wordpress Creative Contact Form Upload Vulnerability

CVE-2014-8739—22 out 2014

Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery

60RISCO

abrir ↗

Metasploit600

MS14-064 Microsoft Windows OLE Package Manager Code Execution

CVE-2014-6352HIGHsob ataque21 out 2014

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2

100RISCO

abrir ↗

Metasploit600

Centreon SQL and Command Injection

CVE-2014-3828—15 out 2014

Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3

60RISCO

abrir ↗

Metasploit600

Centreon SQL and Command Injection

CVE-2014-3829—15 out 2014

displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remot

60RISCO

abrir ↗

Metasploit600

Drupal HTTP Parameter Key/Value SQL Injection

CVE-2014-3704—15 out 2014

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct

60RISCO

abrir ↗

Metasploit300

SSL/TLS Version Detection

CVE-2014-3566LOW14 out 2014

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak

45RISCO

abrir ↗

Metasploit300

SSL/TLS Version Detection

CVE-2016-0800—14 out 2014

The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to se

40RISCO

abrir ↗

Metasploit300

SSL/TLS Version Detection

CVE-2015-4000LOW14 out 2014

The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not pro

45RISCO

abrir ↗

Metasploit300

SSL/TLS Version Detection

CVE-2011-3389—14 out 2014

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefo

40RISCO

abrir ↗

Metasploit300

SSL/TLS Version Detection

CVE-2022-3358—14 out 2014

Using a Custom Cipher with NID_undef may lead to NULL encryption

18RISCO

abrir ↗

Metasploit300

SSL/TLS Version Detection

CVE-2013-2566MEDIUM14 out 2014

The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for

50RISCO

abrir ↗

Metasploit600

MS14-060 Microsoft Windows OLE Package Manager Code Execution

CVE-2014-4114HIGHsob ataque14 out 2014

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.