Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.760exploits catalogados
32.083CVEs com exploração pública
1.932testados em laboratório
TodosExploit-DB 22.786Referência 19.934GitHub PoC 13.235VulnCheck XDB 8.150Nuclei 4.193Metasploit 3.462✓ só verificadosrecentespopularesrisco
3.462 exploits
Metasploit300
HP Operations Agent Opcode coda.exe 0x8c Buffer Overflow
CVE-2012-2020—09 jul 2012
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via u
50RISCO
abrir ↗
Metasploit600
EGallery PHP File Upload Vulnerability
CVE-2012-10052CRITICAL08 jul 2012
EGallery 1.2 Arbitrary PHP File Upload
63RISCO
abrir ↗
Metasploit600
Sflog! CMS 1.0 Arbitrary File Upload Vulnerability
CVE-2012-10042HIGH06 jul 2012
Sflog! CMS 1.0 Arbitrary File Upload RCE
36RISCO
abrir ↗
Metasploit600
SPIP connect Parameter PHP Injection
CVE-2013-4557—04 jul 2012
The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3.0.x before 3.0.12, all
23RISCO
abrir ↗
Metasploit300
ALLMediaServer 0.8 Buffer Overflow
CVE-2017-17932—04 jul 2012
A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow
50RISCO
abrir ↗
Metasploit600
Wordpress Front-end Editor File Upload
CVE-2012-10019CRITICAL04 jul 2012
Front-end Editor < 2.3 - Arbitrary File Upload
63RISCO
abrir ↗
Metasploit600
Tiki Wiki unserialize() PHP Code Execution
CVE-2012-0911—04 jul 2012
TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted
50RISCO
abrir ↗
Metasploit600
Umbraco CMS Remote Command Execution
CVE-2012-10054CRITICAL28 jun 2012
Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE
63RISCO
abrir ↗
Metasploit600
Avaya IP Office Customer Call Reporter ImageUpload.ashx Remote Command Execution
CVE-2012-3811—28 jun 2012
Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call
50RISCO
abrir ↗
Metasploit600
Basilic 1.5.14 diff.php Arbitrary Command Execution
CVE-2012-3399—28 jun 2012
Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the
50RISCO
abrir ↗
Metasploit600
KeyHelp ActiveX LaunchTriPane Remote Code Execution Vulnerability
CVE-2012-2516—26 jun 2012
An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Pl
50RISCO
abrir ↗
Metasploit600
SugarCRM unserialize() PHP Code Execution
CVE-2012-0694—23 jun 2012
SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers
50RISCO
abrir ↗
Metasploit500
Adobe Flash Player AVM Verification Logic Array Indexing Code Execution
CVE-2011-2110—21 jun 2012
Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android,
60RISCO
abrir ↗
Metasploit600
IBM Lotus Notes Client URL Handler Command Injection
CVE-2012-2174—18 jun 2012
The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted
50RISCO
abrir ↗
Metasploit600
EZHomeTech EzServer Stack Buffer Overflow Vulnerability
CVE-2024-23985HIGH18 jun 2012
EzServer 6.4.017 allows a denial of service (daemon crash) via a long string, such as one for the RNTO command.
36RISCO
abrir ↗
Metasploit600
Open-FTPD 1.2 Arbitrary File Upload
CVE-2010-2620—18 jun 2012
Open&Compact FTP Server (Open-FTPD) 1.2 and earlier allows remote attackers to bypass authentication by sending (1) LIST
43RISCO
abrir ↗
Metasploit600
qdPM v7 Arbitrary PHP File Upload Vulnerability
CVE-2015-3884—14 jun 2012
Unrestricted file upload vulnerability in the (1) myAccount, (2) projects, (3) tasks, (4) tickets, (5) discussions, (6)
23RISCO
abrir ↗
Metasploit300
Free Float FTP Server USER Command Buffer Overflow
CVE-2012-10023MEDIUM12 jun 2012
FreeFloat FTP Server USER Command Buffer Overflow
28RISCO
abrir ↗
Metasploit300
MS12-037 Microsoft Internet Explorer Fixed Table Col Span Heap Overflow
CVE-2012-1876—12 jun 2012
Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allo
50RISCO
abrir ↗
Metasploit500
FreeBSD Intel SYSRET Privilege Escalation
CVE-2012-0217—12 jun 2012
The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and
50RISCO
abrir ↗
Metasploit300
MS12-037 Microsoft Internet Explorer Same ID Property Deleted Object Handling Memory Corruption
CVE-2012-1875—12 jun 2012
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbit
50RISCO
abrir ↗
Metasploit400
MS12-043 Microsoft XML Core Services MSXML Uninitialized Memory Corruption
CVE-2012-1889HIGHsob ataque12 jun 2012
Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attacker
100RISCO
abrir ↗
Metasploit600
F5 BIG-IP SSH Private Key Exposure
CVE-2012-1493—11 jun 2012
F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, a
50RISCO
abrir ↗
Metasploit300
MySQL Authentication Bypass Password Dump
CVE-2012-2122—09 jun 2012
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x befor
60RISCO
abrir ↗
Metasploit400
ComSndFTP v1.3.7 Beta USER Format String (Write4) Vulnerability
CVE-2012-10055CRITICAL08 jun 2012
ComSndFTP v1.3.7 Beta USER Format String RCE
63RISCO
abrir ↗
Metasploit300
Photodex ProShow Producer 5.0.3256 load File Handling Buffer Overflow
CVE-2012-10051HIGH06 jun 2012
Photodex ProShow Producer 5.0.3256 load File Handling Buffer Overflow
36RISCO
abrir ↗
Metasploit600
Java Applet Field Bytecode Verifier Cache Remote Code Execution
CVE-2012-1723CRITICALsob ataqueransomware06 jun 2012
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 up
100RISCO
abrir ↗
Metasploit600
WordPress Plugin Foxypress uploadify.php Arbitrary Code Execution
CVE-2012-10020CRITICAL05 jun 2012
FoxyPress <= 0.4.2.1 - Arbitrary File Upload
63RISCO
abrir ↗
Metasploit300
Sielco Sistemi Winlog Buffer Overflow 2.07.14 - 2.07.16
CVE-2012-3815—04 jun 2012
Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 al
50RISCO
abrir ↗
Metasploit300
IBM Lotus iNotes dwa85W ActiveX Buffer Overflow
CVE-2012-2175—01 jun 2012
Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x befo
43RISCO
abrir ↗
← anteriorpágina 71 / 116próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.