Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

19.978 exploits

Referência

CVE-2015-3302

CVE-2015-3302—

The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1

28RISCO

abrir ↗

Referência

CVE-2009-1330

CVE-2009-1330—

Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil

28RISCO

abrir ↗

Referência

Easy RM to MP3 Converter - Universal Stack Overflow

CVE-2009-1330—

Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil

28RISCO

abrir ↗

Referência

CVE-2016-6272

CVE-2016-6272—

XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing s

28RISCO

abrir ↗

Referência

CVE-2018-20525

CVE-2018-20525—

Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.

28RISCO

abrir ↗

Referência

CVE-2018-20525

CVE-2018-20525—

Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.

28RISCO

abrir ↗

Referência

CVE-2018-20525

CVE-2018-20525—

Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.

28RISCO

abrir ↗

Referência

CVE-2023-3643

CVE-2023-3643HIGH

Boss Mini document file inclusion

78RISCO

abrir ↗

Referência

CVE-2015-1497

CVE-2015-1497—

radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execu

60RISCO

abrir ↗

Referência

CVE-2020-35848

CVE-2020-35848—

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.

60RISCO

abrir ↗

Referência

CVE-2005-0116

CVE-2005-0116—

AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacte

60RISCO

abrir ↗

Referência

CVE-2021-40379

CVE-2021-40379—

An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. rstp://.../medias2 doe

28RISCO

abrir ↗

Referência

Barryvan Compo Manager 0.3 - Remote File Inclusion

CVE-2008-1126—

PHP remote file inclusion vulnerability in main.php in Barryvan Compo Manager 0.3 allows remote attackers to execute arb

28RISCO

abrir ↗

Referência

Joomla! Component imagebrowser 0.1.5 rc2 - Directory Traversal

CVE-2008-4668—

Directory traversal vulnerability in the Image Browser (com_imagebrowser) 0.1.5 component for Joomla! allows remote atta

43RISCO

abrir ↗

Referência

CVE-2011-0959

CVE-2011-0959—

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote a

28RISCO

abrir ↗

Referência

Microsoft Windows Media Player - '.wav' Remote Crash (PoC)

CVE-2008-5745—

Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, includ

28RISCO

abrir ↗

Referência

Google Chrome - 'ChromeHTML://' Remote Parameter Injection

CVE-2008-5750—

Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to ex

28RISCO

abrir ↗

Referência

CVE-2016-9899

CVE-2016-9899—

Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption.

28RISCO

abrir ↗

Referência

CVE-2009-1667

CVE-2009-1667—

Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a lo

28RISCO

abrir ↗

Referência

CVE-2009-1667

CVE-2009-1667—

Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a lo

28RISCO

abrir ↗

Referência

CVE-2009-1667

CVE-2009-1667—

Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a lo

28RISCO

abrir ↗

Referência

CVE-2017-3195

CVE-2017-3195—

Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack

28RISCO

abrir ↗

Referência

CVE-2017-6548

CVE-2017-6548—

Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC

28RISCO

abrir ↗

Referência

CVE-2017-2931

CVE-2017-2931—

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to the pa

28RISCO

abrir ↗

Referência

CVE-2018-5159

CVE-2018-5159—

An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks,

28RISCO

abrir ↗

Referência

CVE-2013-0657

CVE-2013-0657—

Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remote

28RISCO

abrir ↗

Referência

EFS Easy Chat Server 2.2 - Remote Denial of Service

CVE-2004-2466—

chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username

60RISCO

abrir ↗

Referência

CVE-2014-5111

CVE-2014-5111—

Multiple directory traversal vulnerabilities in Fonality trixbox allow remote attackers to read arbitrary files via a ..

43RISCO

abrir ↗

Referência

CVE-2011-1563

CVE-2011-1563—

Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier

60RISCO

abrir ↗

Referência

CVE-2013-0177

CVE-2013-0177—

Multiple cross-site scripting (XSS) vulnerabilities in widget/screen/ModelScreenWidget.java in Apache Open For Business

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.