Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

72.018exploits catalogados

32.219CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.023GitHub PoC 13.334VulnCheck XDB 8.195Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

20.023 exploits

Referência

CVE-2017-2370

CVE-2017-2370—

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS

28RISCO

abrir ↗

Referência

CVE-2015-3081

CVE-2015-3081—

Race condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and b

28RISCO

abrir ↗

Referência

CVE-2013-6877

CVE-2013-6877—

Heap-based buffer overflow in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738

28RISCO

abrir ↗

Referência

CVE-2016-1608

CVE-2016-1608—

vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated u

28RISCO

abrir ↗

Referência

CVE-2022-24562

CVE-2022-24562—

In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary

35RISCO

abrir ↗

Referência

Oracle Internet Directory 10.1.4 - Remote Denial of Service

CVE-2008-2595—

Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and

28RISCO

abrir ↗

Referência

CVE-2007-0134

CVE-2007-0134—

Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the

28RISCO

abrir ↗

Referência

CVE-2017-8480

CVE-2017-8480—

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,

23RISCO

abrir ↗

Referência

CVE-2008-6264

CVE-2008-6264—

SQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

ig shop 1.0 - Code Execution / SQL Injection

CVE-2007-0134—

Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the

28RISCO

abrir ↗

Referência

CVE-2017-9430

CVE-2017-9430—

Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) o

28RISCO

abrir ↗

Referência

CVE-2017-9430

CVE-2017-9430—

Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) o

28RISCO

abrir ↗

Referência

CVE-2017-9430

CVE-2017-9430—

Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) o

28RISCO

abrir ↗

Referência

CVE-2020-6519

CVE-2020-6519—

Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy

28RISCO

abrir ↗

Referência

CVE-2007-2583

CVE-2007-2583—

The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-depen

28RISCO

abrir ↗

Referência

CVE-2007-2583

CVE-2007-2583—

The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-depen

28RISCO

abrir ↗

Referência

CVE-2017-17759

CVE-2017-17759—

Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of

28RISCO

abrir ↗

Referência

CVE-2012-1593

CVE-2012-1593—

epan/dissectors/packet-ansi_a.c in the ANSI A dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows r

28RISCO

abrir ↗

Referência

Bytehoard 2.1 - 'server.php' Remote File Inclusion

CVE-2006-2849—

PHP remote file inclusion vulnerability in includes/webdav/server.php in Bytehoard 2.1 Epsilon/Delta allows remote attac

28RISCO

abrir ↗

Referência

CVE-2022-35583

CVE-2022-35583—

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by inje

28RISCO

abrir ↗

Referência

CVE-2017-16953

CVE-2017-16953—

connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to mo

28RISCO

abrir ↗

Referência

CVE-2013-7246

CVE-2013-7246—

Buffer overflow in the IconCreate method in an ActiveX control in the DaumGame ActiveX plugin 1.1.0.4 and 1.1.0.5 allows

28RISCO

abrir ↗

Referência

CVE-2013-7246

CVE-2013-7246—

Buffer overflow in the IconCreate method in an ActiveX control in the DaumGame ActiveX plugin 1.1.0.4 and 1.1.0.5 allows

28RISCO

abrir ↗

Referência

Microsoft Windows RSH daemon 1.7 - Remote Buffer Overflow

CVE-2007-4005—

Stack-based buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 allows remote attackers to execute arbitrary co

28RISCO

abrir ↗

Referência

Site@School 2.4.02 - Arbitrary File Upload

CVE-2006-4920—

Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to exe

28RISCO

abrir ↗

Referência

CVE-2017-8470

CVE-2017-8470—

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2,

23RISCO

abrir ↗

Referência

CVE-2022-35919

CVE-2022-35919HIGH

Authenticated requests for server update admin API allows path traversal in minio

53RISCO

abrir ↗

Referência

CVE-2010-3904

CVE-2010-3904HIGHsob ataque

The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the

91RISCO

abrir ↗

Referência

CVE-2017-5174

CVE-2017-5174—

An Authentication Bypass issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An authenticatio

35RISCO

abrir ↗

Referência

CVE-2010-3904

CVE-2010-3904HIGHsob ataque

The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the

91RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.