Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

19.978 exploits

Referência

CVE-2017-0117

CVE-2017-0117—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

28RISCO

abrir ↗

Referência

CVE-2017-0126

CVE-2017-0126—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

28RISCO

abrir ↗

Referência

CVE-2017-0125

CVE-2017-0125—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

28RISCO

abrir ↗

Referência

CVE-2017-0114

CVE-2017-0114—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

28RISCO

abrir ↗

Referência

CVE-2017-0092

CVE-2017-0092—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

28RISCO

abrir ↗

Referência

CVE-2017-0091

CVE-2017-0091—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

28RISCO

abrir ↗

Referência

CVE-2017-17640

CVE-2017-17640—

Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country pa

23RISCO

abrir ↗

Referência

CVE-2017-0112

CVE-2017-0112—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

28RISCO

abrir ↗

Referência

CVE-2017-0123

CVE-2017-0123—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

28RISCO

abrir ↗

Referência

CVE-2017-0111

CVE-2017-0111—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

28RISCO

abrir ↗

Referência

CVE-2014-3791

CVE-2014-3791—

Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 6.8 allows remote attackers to execute arbitrary code

60RISCO

abrir ↗

Referência

CVE-2015-5116

CVE-2015-5116—

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481

28RISCO

abrir ↗

Referência

CVE-2017-8550

CVE-2017-8550—

A remote code execution vulnerability exists in Skype for Business when the software fails to sanitize specially crafted

28RISCO

abrir ↗

Referência

CVE-2020-12608

CVE-2020-12608—

An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Moni

28RISCO

abrir ↗

Referência

VMware Inc 6.0.0 - 'vielib.dll 2.2.5.42958' Remode Code Execution

CVE-2007-4058—

Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows

28RISCO

abrir ↗

Referência

CVE-2018-12596

CVE-2018-12596—

Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote at

28RISCO

abrir ↗

Referência

CVE-2015-8660

CVE-2015-8660—

The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr op

43RISCO

abrir ↗

Referência

CVE-2015-8660

CVE-2015-8660—

The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr op

43RISCO

abrir ↗

Referência

CVE-2015-8660

CVE-2015-8660—

The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr op

43RISCO

abrir ↗

Referência

CVE-2015-8660

CVE-2015-8660—

The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr op

43RISCO

abrir ↗

Referência

CVE-2015-8636

CVE-2015-8636—

Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on

28RISCO

abrir ↗

Referência

CVE-2017-3106

CVE-2017-3106—

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF fil

28RISCO

abrir ↗

Referência

CVE-2016-3987

CVE-2016-3987—

The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url para

28RISCO

abrir ↗

Referência

CVE-2016-3987

CVE-2016-3987—

The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url para

28RISCO

abrir ↗

Referência

CVE-2010-1717

CVE-2010-1717—

Directory traversal vulnerability in the iF surfALERT (com_if_surfalert) component 1.2 for Joomla! allows remote attacke

43RISCO

abrir ↗

Referência

CVE-2017-3077

CVE-2017-3077—

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image

28RISCO

abrir ↗

Referência

LibSPF2 < 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow (PoC)

CVE-2008-2469—

Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remo

28RISCO

abrir ↗

Referência

PNPHPBB2 < 1.2i - 'ModName' Multiple Local File Inclusions

CVE-2009-0592—

Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers to include and execute

28RISCO

abrir ↗

Referência

CVE-2015-8770

CVE-2015-8770—

Directory traversal vulnerability in the set_skin function in program/include/rcmail_output_html.php in Roundcube before

28RISCO

abrir ↗

Referência

CVE-2015-8770

CVE-2015-8770—

Directory traversal vulnerability in the set_skin function in program/include/rcmail_output_html.php in Roundcube before

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.