Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.957exploits catalogados

32.195CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8.182Nuclei 4.217Metasploit 3.462✓ só verificadosrecentes populares risco

20.003 exploits

Referência

CVE-2015-8396

CVE-2015-8396—

Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cx

28RISCO

abrir ↗

Referência

MPlayer 1.0 rc2 - 'sdpplin_parse()' Array Indexing Buffer Overflow (PoC)

CVE-2008-1558—

Uncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote att

28RISCO

abrir ↗

Referência

CVE-2016-1768

CVE-2016-1768—

QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (m

28RISCO

abrir ↗

Referência

CVE-2020-0938

CVE-2020-0938HIGHsob ataque

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly

83RISCO

abrir ↗

Referência

Winamp 5.541 - '.mp3'/'.aiff' File Multiple Denial of Service Vulnerabilities

CVE-2009-0263—

Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly e

28RISCO

abrir ↗

Referência

CVE-2018-5234

CVE-2018-5234—

The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in whic

28RISCO

abrir ↗

Referência

CVE-2009-3020

CVE-2009-3020—

win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service (system crash) by r

28RISCO

abrir ↗

Referência

CVE-2012-6554

CVE-2012-6554—

functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute

43RISCO

abrir ↗

Referência

CVE-2010-1494

CVE-2010-1494—

Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to re

43RISCO

abrir ↗

Referência

CVE-2010-1494

CVE-2010-1494—

Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to re

43RISCO

abrir ↗

Referência

CVE-2013-4977

CVE-2013-4977—

Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), a

28RISCO

abrir ↗

Referência

CVE-2017-3730

CVE-2017-3730—

Bad (EC)DHE parameters cause a client crash

35RISCO

abrir ↗

Referência

CVE-2019-25224

CVE-2019-25224CRITICAL

WP Database Backup < 5.2 - Unauthenticated OS Command Injection

68RISCO

abrir ↗

Referência

CVE-2018-15140

CVE-2018-15140—

Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authent

28RISCO

abrir ↗

Referência

CVE-2018-13784

CVE-2018-13784—

PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfi

28RISCO

abrir ↗

Referência

CVE-2018-13784

CVE-2018-13784—

PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfi

28RISCO

abrir ↗

Referência

CVE-2012-4412

CVE-2012-4412—

Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-depende

28RISCO

abrir ↗

Referência

Audacity 1.2.6 - '.gro' Local Buffer Overflow (PoC)

CVE-2009-0490—

Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacit

28RISCO

abrir ↗

Referência

CVE-2020-28337

CVE-2020-28337—

A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to g

28RISCO

abrir ↗

Referência

CVE-2020-15492

CVE-2020-15492—

An issue was discovered in INNEO Startup TOOLS 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804. The sut_srv.exe we

28RISCO

abrir ↗

Referência

CVE-2017-6315

CVE-2017-6315—

Astaro Security Gateway (aka ASG) 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx

28RISCO

abrir ↗

Referência

CVE-2016-1713

CVE-2016-1713—

Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger

43RISCO

abrir ↗

Referência

CVE-2017-6182

CVE-2017-6182—

In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports wa

28RISCO

abrir ↗

Referência

PHP-Post 1.0 - Cookie Modification Privilege Escalation

CVE-2006-3772—

PHP-Post 0.21 and 1.0, and possibly earlier versions, when auto-login is enabled, allows remote attackers to bypass secu

28RISCO

abrir ↗

Referência

CVE-2022-34047

CVE-2022-34047—

An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via v

43RISCO

abrir ↗

Referência

CVE-2016-4135

CVE-2016-4135—

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsof

28RISCO

abrir ↗

Referência

CVE-2019-6974

CVE-2019-6974—

In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because

28RISCO

abrir ↗

Referência

CVE-2020-27950

CVE-2020-27950MEDIUMsob ataque

A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watch

68RISCO

abrir ↗

Referência

ASX to MP3 Converter 3.0.0.7 - '.m3u' Universal Stack Overflow

CVE-2009-1324—

Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary cod

28RISCO

abrir ↗

Referência

Joomla! Component com_extplorer 2.0.0 RC2 - Local Directory Traversal

CVE-2008-4764—

Directory traversal vulnerability in the eXtplorer module (com_extplorer) 2.0.0 RC2 and earlier in Joomla! allows remote

43RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.