Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.760exploits catalogados
32.083CVEs com exploração pública
1.932testados em laboratório
TodosExploit-DB 22.786Referência 19.934GitHub PoC 13.235VulnCheck XDB 8.150Nuclei 4.193Metasploit 3.462✓ só verificadosrecentespopularesrisco
3.462 exploits
Metasploit200
Firefox nsSVGValue Out-of-Bounds Access Vulnerability
CVE-2011-3658—06 dez 2011
The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAtt
50RISCO
abrir ↗
Metasploit200
Adobe Reader U3D Memory Corruption Vulnerability
CVE-2011-2462HIGHsob ataque06 dez 2011
Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, a
100RISCO
abrir ↗
Metasploit300
SCADA 3S CoDeSys CmpWebServer Stack Buffer Overflow
CVE-2011-5007—02 dez 2011
Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB
60RISCO
abrir ↗
Metasploit600
QEMU Monitor HMP 'migrate' Command Execution
CVE-2019-12928—02 dez 2011
The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote
23RISCO
abrir ↗
Metasploit600
WikkaWiki 1.3.2 Spam Logging PHP Injection
CVE-2011-4451—30 nov 2011
libs/Wakka.class.php in WikkaWiki 1.3.1 and 1.3.2, when the spam_logging option is enabled, allows remote attackers to w
43RISCO
abrir ↗
Metasploit200
MS11-080 AfdJoinLeaf Privilege Escalation
CVE-2011-2005HIGHsob ataque30 nov 2011
afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly valid
98RISCO
abrir ↗
Metasploit400
CCMPlayer 1.5 m3u Playlist Stack Based Buffer Overflow
CVE-2011-5170—30 nov 2011
Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code vi
50RISCO
abrir ↗
Metasploit600
Family Connections less.php Remote Command Execution
CVE-2011-5130—29 nov 2011
dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers t
50RISCO
abrir ↗
Metasploit300
Avid Media Composer 5.5 - Avid Phonetic Indexer Buffer Overflow
CVE-2011-5003—29 nov 2011
Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier a
50RISCO
abrir ↗
Metasploit600
V-CMS PHP File Upload and Execute
CVE-2011-4828—27 nov 2011
Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote atta
50RISCO
abrir ↗
Metasploit300
Yaws Web Server Directory Traversal
CVE-2011-4350—25 nov 2011
Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user cou
23RISCO
abrir ↗
Metasploit600
Hastymail 2.1.1 RC1 Command Injection
CVE-2011-4542—22 nov 2011
Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs or (2) rsargs[] paramet
43RISCO
abrir ↗
Metasploit300
VMware Update Manager 4 Directory Traversal
CVE-2011-4404—21 nov 2011
The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 bef
50RISCO
abrir ↗
Metasploit600
HP StorageWorks P4000 Virtual SAN Appliance Command Execution
CVE-2012-4361—11 nov 2011
lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to exe
50RISCO
abrir ↗
Metasploit600
Support Incident Tracker Remote Command Execution
CVE-2011-3833—10 nov 2011
Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote
43RISCO
abrir ↗
Metasploit600
Support Incident Tracker Remote Command Execution
CVE-2011-3829—10 nov 2011
ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive in
43RISCO
abrir ↗
Metasploit300
AbsoluteFTP 1.9.6 - 2.2.10 LIST Command Remote Buffer Overflow
CVE-2011-5164—09 nov 2011
Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute ar
43RISCO
abrir ↗
Metasploit400
Aviosoft Digital TV Player Professional 1.0 Stack Buffer Overflow
CVE-2011-4496—09 nov 2011
Buffer overflow in Aviosoft DTV Player 1.0.1.2 allows remote attackers to execute arbitrary code via a crafted .plf (aka
23RISCO
abrir ↗
Metasploit600
PmWiki pagelist.php Remote PHP Code Injection Exploit
CVE-2011-4453—09 nov 2011
The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitra
50RISCO
abrir ↗
Metasploit600
InduSoft Web Studio Arbitrary Upload Remote Code Execution
CVE-2011-4051—04 nov 2011
CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require au
50RISCO
abrir ↗
Metasploit600
HP Data Protector 6.10/6.11/6.20 Install Service
CVE-2011-0922—02 nov 2011
The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that ref
50RISCO
abrir ↗
Metasploit600
Novell ZENworks Asset Management Remote Execution
CVE-2011-2653—02 nov 2011
Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote at
60RISCO
abrir ↗
Metasploit300
HP OpenView Network Node Manager ov.dll _OVBuildPath Buffer Overflow
CVE-2011-3167—01 nov 2011
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute
50RISCO
abrir ↗
Metasploit300
NJStar Communicator 3.00 MiniSMTP Buffer Overflow
CVE-2011-4040—31 out 2011
Buffer overflow in MiniSmtp 3.0.11818 in NJStar Communicator allows remote attackers to execute arbitrary code via a cra
50RISCO
abrir ↗
Metasploit600
phpLDAPadmin query_engine Remote PHP Code Injection
CVE-2011-4075—24 out 2011
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary
50RISCO
abrir ↗
Metasploit300
AdminStudio LaunchHelp.dll ActiveX Arbitrary Code Execution
CVE-2011-2657—19 out 2011
Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in Laun
50RISCO
abrir ↗
Metasploit300
HP Power Manager 'formExportDataLogs' Buffer Overflow
CVE-2009-3999—19 out 2011
Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to ex
60RISCO
abrir ↗
Metasploit600
Java Applet Rhino Script Engine Remote Code Execution
CVE-2011-3544CRITICALsob ataque18 out 2011
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and
100RISCO
abrir ↗
Metasploit300
Java RMI Server Insecure Endpoint Code Execution Scanner
CVE-2011-3556—15 out 2011
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ear
60RISCO
abrir ↗
Metasploit600
Java RMI Server Insecure Default Configuration Java Code Execution
CVE-2011-3556—15 out 2011
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ear
60RISCO
abrir ↗
← anteriorpágina 75 / 116próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.