Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.957exploits catalogados

32.195CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8.182Nuclei 4.217Metasploit 3.462✓ só verificadosrecentes populares risco

20.003 exploits

Referência

CVE-2019-5392

CVE-2019-5392—

A disclosure of information vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than ve

23RISCO

abrir ↗

Referência

32bit FTP (09.04.24) - 'Banner' Remote Buffer Overflow (PoC)

CVE-2009-1592—

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a

23RISCO

abrir ↗

Referência

32bit FTP (09.04.24) - 'Banner' Remote Buffer Overflow

CVE-2009-1592—

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a

23RISCO

abrir ↗

Referência

V3 Chat Profiles/Dating Script 3.0.2 - Insecure Cookie Handling

CVE-2008-5784—

V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access b

23RISCO

abrir ↗

Referência

WordPress Plugin E-Commerce 3.4 - Arbitrary File Upload

CVE-2008-6811—

Unrestricted file upload vulnerability in image_processing.php in the e-Commerce Plugin 3.4 and earlier for Wordpress al

23RISCO

abrir ↗

Referência

PHP Multiple Newsletters 2.7 - Local File Inclusion / Cross-Site Scripting

CVE-2008-5566—

Cross-site scripting (XSS) vulnerability in index.php in Triangle Solutions PHP Multiple Newsletters 2.7 allows remote a

23RISCO

abrir ↗

Referência

CVE-2015-2746

CVE-2015-2746—

The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON

28RISCO

abrir ↗

Referência

CVE-2015-2746

CVE-2015-2746—

The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON

28RISCO

abrir ↗

Referência

Mini-stream RM-MP3 Converter 3.0.0.7 - '.asx' Local Buffer Overflow

CVE-2009-1645—

Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute arb

23RISCO

abrir ↗

Referência

Mini-stream RM-MP3 Converter 3.0.0.7 - '.RAM' Local Buffer Overflow

CVE-2009-1645—

Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2021-25160

CVE-2021-25160—

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in v

23RISCO

abrir ↗

Referência

MailEnable Professional/Enterprise 3.13 - 'Fetch' (Authenticated) Remote Buffer Overflow

CVE-2008-1276—

Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.

23RISCO

abrir ↗

Referência

CVE-2013-5639

CVE-2013-5639—

Directory traversal vulnerability in users/login.php in Gnew 2013.1 and earlier allows remote attackers to read arbitrar

23RISCO

abrir ↗

Referência

CVE-2013-5639

CVE-2013-5639—

Directory traversal vulnerability in users/login.php in Gnew 2013.1 and earlier allows remote attackers to read arbitrar

23RISCO

abrir ↗

Referência

RealPlayer 10 - '.ra' Remote Denial of Service

CVE-2007-2497—

RealNetworks RealPlayer 10 Gold allows remote attackers to cause a denial of service (memory consumption) via a certain

23RISCO

abrir ↗

Referência

0irc-client 1345 build20060823 - Denial of Service

CVE-2007-1648—

0irc 1345 build 20060823 allows remote attackers to cause a denial of service (application crash) by operating an IRC se

23RISCO

abrir ↗

Referência

CVE-2020-11700

CVE-2020-11700—

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter fname, used on the page certs-x.

23RISCO

abrir ↗

Referência

CVE-2013-1465

CVE-2013-1465—

The Cubecart::_basket method in classes/cubecart.class.php in CubeCart 5.0.0 through 5.2.0 allows remote attackers to un

23RISCO

abrir ↗

Referência

CVE-2013-1465

CVE-2013-1465—

The Cubecart::_basket method in classes/cubecart.class.php in CubeCart 5.0.0 through 5.2.0 allows remote attackers to un

23RISCO

abrir ↗

Referência

eZip Wizard 3.0 - Local Stack Buffer Overflow (PoC) (SEH)

CVE-2009-1057—

MicroSmarts Enterprise ZipItFast! 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file that tri

23RISCO

abrir ↗

Referência

CVE-2015-2315

CVE-2015-2315—

Cross-site scripting (XSS) vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2013-3314

CVE-2013-3314—

The Loftek Nexus 543 IP Camera allows remote attackers to obtain (1) IP addresses via a request to get_realip.cgi or (2)

23RISCO

abrir ↗

Referência

CVE-2018-7706

CVE-2018-7706—

Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbit

23RISCO

abrir ↗

Referência

CVE-2014-2630

CVE-2014-2630—

Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via u

38RISCO

abrir ↗

Referência

CVE-2014-2630

CVE-2014-2630—

Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via u

38RISCO

abrir ↗

Referência

CVE-2019-16399

CVE-2019-16399—

Western Digital WD My Book World through II 1.02.12 suffers from Broken Authentication, which allows an attacker to acce

23RISCO

abrir ↗

Referência

CVE-2010-2130

CVE-2010-2130—

Cross-site scripting (XSS) vulnerability in wflogin.jsp in Aris Global ARISg 5.0 allows remote attackers to inject arbit

23RISCO

abrir ↗

Referência

5 star review - Cross-Site Scripting / SQL Injection

CVE-2008-3779—

Cross-site scripting (XSS) vulnerability in search/index.php in Five Star Review Script allows remote attackers to injec

23RISCO

abrir ↗

Referência

CVE-2018-12617

CVE-2018-12617—

qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 h

28RISCO

abrir ↗

Referência

CVE-2019-14267

CVE-2019-14267—

PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is misha

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.