Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

72.018exploits catalogados

32.219CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.023GitHub PoC 13.334VulnCheck XDB 8.195Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

20.023 exploits

Referência

CVE-2015-7039

CVE-2015-7039—

Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows rem

28RISCO

abrir ↗

Referência

CVE-2021-33990

CVE-2021-33990CRITICAL

Liferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists. NOTE: The

53RISCO

abrir ↗

Referência

EDraw Office Viewer Component - Denial of Service

CVE-2007-3169—

Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and

28RISCO

abrir ↗

Referência

CVE-2011-1525

CVE-2011-1525—

Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and R

28RISCO

abrir ↗

Referência

CVE-2010-1597

CVE-2010-1597—

Stack-based buffer overflow in zgtips.dll in ZipGenius 6.3.1.2552 allows user-assisted remote attackers to execute arbit

28RISCO

abrir ↗

Referência

CVE-2014-9014

CVE-2014-9014—

Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin b

28RISCO

abrir ↗

Referência

CVE-2020-28687

CVE-2020-28687—

The edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upl

28RISCO

abrir ↗

Referência

CVE-2020-28688

CVE-2020-28688—

The add artwork functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to uplo

28RISCO

abrir ↗

Referência

CVE-2013-5758

CVE-2013-5758—

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by

28RISCO

abrir ↗

Referência

CVE-2013-5758

CVE-2013-5758—

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by

28RISCO

abrir ↗

Referência

CVE-2013-5758

CVE-2013-5758—

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by

28RISCO

abrir ↗

Referência

CVE-2013-5758

CVE-2013-5758—

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by

28RISCO

abrir ↗

Referência

CVE-2018-18428

CVE-2018-18428—

TP-Link TL-SC3130 1.6.18P12_121101 devices allow unauthenticated RTSP stream access, as demonstrated by a /jpg/image.jpg

28RISCO

abrir ↗

Referência

CVE-2018-18428

CVE-2018-18428—

TP-Link TL-SC3130 1.6.18P12_121101 devices allow unauthenticated RTSP stream access, as demonstrated by a /jpg/image.jpg

28RISCO

abrir ↗

Referência

CVE-2019-10009

CVE-2019-10009—

A Directory Traversal issue was discovered in the Web GUI in Titan FTP Server 2019 Build 3505. When an authenticated use

28RISCO

abrir ↗

Referência

CVE-2019-10009

CVE-2019-10009—

A Directory Traversal issue was discovered in the Web GUI in Titan FTP Server 2019 Build 3505. When an authenticated use

28RISCO

abrir ↗

Referência

Titan FTP Server Version 2019 Build 3505 - Directory Traversal / Local File Inclusion

CVE-2019-10009—

A Directory Traversal issue was discovered in the Web GUI in Titan FTP Server 2019 Build 3505. When an authenticated use

28RISCO

abrir ↗

Referência

CVE-2021-3337

CVE-2021-3337—

The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading re

28RISCO

abrir ↗

Referência

CVE-2013-1605

CVE-2013-1605—

Buffer overflow in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to execute arbitra

28RISCO

abrir ↗

Referência

CVE-2013-1605

CVE-2013-1605—

Buffer overflow in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to execute arbitra

28RISCO

abrir ↗

Referência

CVE-2005-2616

CVE-2005-2616—

Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote attackers to execute arbitrary code via the path

28RISCO

abrir ↗

Referência

CVE-2014-9148

CVE-2014-9148—

Fiyo CMS 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the (1) "Install and Update"

28RISCO

abrir ↗

Referência

CVE-2018-12453

CVE-2018-12453—

Type confusion in the xgroupCommand function in t_stream.c in redis-server in Redis before 5.0 allows remote attackers t

28RISCO

abrir ↗

Referência

CVE-2016-5725

CVE-2016-5725—

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allow

28RISCO

abrir ↗

Referência

CVE-2014-9148

CVE-2014-9148—

Fiyo CMS 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the (1) "Install and Update"

28RISCO

abrir ↗

Referência

CVE-2019-6274

CVE-2019-6274—

Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote atta

28RISCO

abrir ↗

Referência

CVE-2019-6274

CVE-2019-6274—

Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote atta

28RISCO

abrir ↗

Referência

CVE-2022-22831

CVE-2022-22831—

An issue was discovered in Servisnet Tessa 0.0.2. An attacker can add a new sysadmin user via a manipulation of the Auth

28RISCO

abrir ↗

Referência

Servisnet Tessa - Add sysAdmin User (Unauthenticated) (Metasploit)

CVE-2022-22831—

An issue was discovered in Servisnet Tessa 0.0.2. An attacker can add a new sysadmin user via a manipulation of the Auth

28RISCO

abrir ↗

Referência

CVE-2014-9147

CVE-2014-9147—

Fiyo CMS 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to the database backup fil

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.