Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.836exploits catalogados

32.133CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8.156Nuclei 4.201Metasploit 3.462✓ só verificadosrecentes populares risco

3.462 exploits

Metasploit300

Macrovision InstallShield Update Service Buffer Overflow

CVE-2007-5660—31 out 2007

Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXn

50RISCO

Metasploit300

GOM Player ActiveX Control Buffer Overflow

CVE-2007-5779—27 out 2007

Buffer overflow in the GomManager (GomWeb Control) ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Playe

60RISCO

Metasploit600

Macrovision InstallShield Update Service ActiveX Unsafe Method

CVE-2007-5660—20 out 2007

Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXn

50RISCO

Metasploit300

RealPlayer ierpplug.dll ActiveX Control Playlist Name Buffer Overflow

CVE-2007-5601—18 out 2007

Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and e

50RISCO

Metasploit300

Oracle DB SQL Injection via SYS.LT.FINDRICSET Evil Cursor Method

CVE-2007-5511—17 out 2007

SQL injection vulnerability in Workspace Manager for Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.

50RISCO

Metasploit600

TikiWiki tiki-graph_formula Remote PHP Code Execution

CVE-2007-5423—10 out 2007

tiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via PHP sequences in the f ar

60RISCO

Metasploit300

Electronic Arts SnoopyCtrl ActiveX Control Buffer Overflow

CVE-2007-4466—08 out 2007

Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote attac

50RISCO

Metasploit600

HPLIP hpssd.py From Address Arbitrary Command Execution

CVE-2007-5208—04 out 2007

hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent a

50RISCO

Metasploit400

Borland InterBase open_marker_file() Buffer Overflow

CVE-2007-5244—03 out 2007

Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versio

50RISCO

Metasploit400

Borland InterBase INET_connect() Buffer Overflow

CVE-2007-5243—03 out 2007

Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0

50RISCO

Metasploit400

Borland InterBase jrd8_create_database() Buffer Overflow

CVE-2007-5243—03 out 2007

Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0

50RISCO

Metasploit400

Borland InterBase PWD_db_aliased() Buffer Overflow

CVE-2007-5243—03 out 2007

Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0

50RISCO

Metasploit400

Borland InterBase isc_create_database() Buffer Overflow

CVE-2007-5243—03 out 2007

Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0

50RISCO

Metasploit400

Borland InterBase isc_attach_database() Buffer Overflow

CVE-2007-5243—03 out 2007

Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0

50RISCO

Metasploit400

Borland InterBase SVC_attach() Buffer Overflow

CVE-2007-5243—03 out 2007

Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0

50RISCO

Metasploit200

Firebird Relational Database isc_attach_database() Buffer Overflow

CVE-2007-5243—03 out 2007

Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0

50RISCO

Metasploit200

Firebird Relational Database SVC_attach() Buffer Overflow

CVE-2007-5243—03 out 2007

Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0

50RISCO

Metasploit200

Firebird Relational Database isc_create_database() Buffer Overflow

CVE-2007-5243—03 out 2007

Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0

50RISCO

Metasploit300

Kazaa Altnet Download Manager ActiveX Control Buffer Overflow

CVE-2007-5217—03 out 2007

Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in (1) K

43RISCO

Metasploit500

CA BrightStor HSM Buffer Overflow

CVE-2007-5082—27 set 2007

Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r

50RISCO

Metasploit200

Xitami 2.5c2 Web Server If-Modified-Since Overflow

CVE-2007-5067—24 set 2007

Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long

60RISCO

Metasploit300

Ask.com Toolbar askBar.dll ActiveX Control Buffer Overflow

CVE-2007-5107—24 set 2007

Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Media

50RISCO

Metasploit400

IBM Tivoli Storage Manager Express CAD Service Buffer Overflow

CVE-2007-4880—24 set 2007

Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1

60RISCO

Metasploit300

Intersil (Boa) HTTPd Basic Authentication Password Reset

CVE-2007-4915—10 set 2007

The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent st

50RISCO

Metasploit0

Alcatel-Lucent OmniPCX Enterprise masterCGI Arbitrary Command Execution

CVE-2007-3010CRITICALsob ataque09 set 2007

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows rem

100RISCO

Metasploit400

Microsoft Visual Basic VBP Stack Buffer Overflow

CVE-2007-4776—04 set 2007

Buffer overflow in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 allows user-assisted remote attackers to ex

50RISCO

Metasploit300

Yahoo! Messenger YVerInfo.dll ActiveX Control Buffer Overflow

CVE-2007-4515—30 ago 2007

Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo!

50RISCO

Metasploit600

ClamAV Milter Blackhole-Mode Remote Code Execution

CVE-2007-4560—24 ago 2007

clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary command

60RISCO

Metasploit500

Mercury Mail SMTP AUTH CRAM-MD5 Buffer Overflow

CVE-2007-4440—18 ago 2007

Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, all

50RISCO

Metasploit300

2Wire Cross-Site Request Forgery Password Reset Vulnerability

CVE-2007-4387—15 ago 2007

Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.

18RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.