Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.445exploits catalogados

34.432CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

21.497 exploits

Referência

CVE-2012-1563

CVE-2012-1563—

Joomla! before 2.5.3 allows Admin Account Creation.

23RISCO

abrir ↗

Referência

CVE-2022-32272

CVE-2022-32272—

OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5

23RISCO

abrir ↗

Referência

CVE-2024-12342

CVE-2024-12342HIGH

TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service

41RISCO

abrir ↗

Referência

CVE-2017-7042

CVE-2017-7042—

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iClo

23RISCO

abrir ↗

Referência

CVE-2015-1028

CVE-2015-1028—

Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2730B router (rev C1) with firmware GE_1.01 allow remo

23RISCO

abrir ↗

Referência

CVE-2015-1028

CVE-2015-1028—

Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2730B router (rev C1) with firmware GE_1.01 allow remo

23RISCO

abrir ↗

Referência

CVE-2020-8644

CVE-2020-8644CRITICALsob ataque

PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.

100RISCO

abrir ↗

Referência

CVE-2010-1179

CVE-2010-1179—

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash)

23RISCO

abrir ↗

Referência

CVE-2014-9000

CVE-2014-9000—

Mule Enterprise Management Console (MMC) does not properly restrict access to handler/securityService.rpc, which allows

23RISCO

abrir ↗

Referência

CVE-2018-7653

CVE-2018-7653—

In YzmCMS 3.6, index.php has XSS via the a, c, or m parameter.

38RISCO

abrir ↗

Referência

CVE-2018-7653

CVE-2018-7653—

In YzmCMS 3.6, index.php has XSS via the a, c, or m parameter.

38RISCO

abrir ↗

Referência

CVE-2009-4991

CVE-2009-4991—

Cross-site scripting (XSS) vulnerability in users/resume_register.php in Omnistar Recruiting allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2015-7894

CVE-2015-7894—

The DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number LRX22G.G925VVRU1AOE2 allow

23RISCO

abrir ↗

Referência

CVE-2009-2533

CVE-2009-2533—

rmserver in RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allows remote attackers to cause a denial of

23RISCO

abrir ↗

Referência

CVE-2017-17058

CVE-2017-17058HIGH

The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/wooco

46RISCO

abrir ↗

Referência

CVE-2017-17058

CVE-2017-17058HIGH

The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/wooco

46RISCO

abrir ↗

Referência✓ VexDay Proof

Open Meetings Filing Application - Remote File Inclusion

CVE-2006-5517—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application (OMFA) allow remote

23RISCO

abrir ↗

Referência

CVE-2013-1599

CVE-2013-1599—

A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firm

35RISCO

abrir ↗

Referência

CVE-2017-4914

CVE-2017-4914—

VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of th

23RISCO

abrir ↗

Referência

CVE-2013-1599

CVE-2013-1599—

A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firm

35RISCO

abrir ↗

Referência✓ VexDay Proof

AAA EasyGrid ActiveX 3.51 - Remote File Overwrite

CVE-2009-0134—remotewindows

Insecure method vulnerability in the EasyGrid.SGCtrl.32 ActiveX control in EasyGrid.ocx 1.0.0.1 in AAA EasyGrid ActiveX

23RISCO

abrir ↗

Referência

ScreenStream 3.0.15 - Denial of Service

CVE-2019-9833—dosandroid

The Screen Stream application through 3.0.15 for Android allows remote attackers to cause a denial of service via many s

23RISCO

abrir ↗

Referência

CVE-2020-8615

CVE-2020-8615—

A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in an attacker approving themselves a

38RISCO

abrir ↗

Referência

CVE-2024-51978

CVE-2024-51978CRITICAL

Authentication bypass via default password generation affecting multiple models from Brother Industries, Ltd, Toshiba Tec, and Konica Minolta, Inc.

68RISCO

abrir ↗

Referência

CVE-2024-51978

CVE-2024-51978CRITICAL

Authentication bypass via default password generation affecting multiple models from Brother Industries, Ltd, Toshiba Tec, and Konica Minolta, Inc.

68RISCO

abrir ↗

Referência

CVE-2024-51978

CVE-2024-51978CRITICAL

Authentication bypass via default password generation affecting multiple models from Brother Industries, Ltd, Toshiba Tec, and Konica Minolta, Inc.

68RISCO

abrir ↗

Referência

CVE-2016-4656

CVE-2016-4656HIGHsob ataque

The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denia

91RISCO

abrir ↗

Referência

CVE-2009-2534

CVE-2009-2534—

RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allow remote attackers to cause a denial of service (dae

23RISCO

abrir ↗

Referência

CVE-2006-3144

CVE-2006-3144—

PHP remote file inclusion vulnerability in micro_cms_files/microcms-include.php in Implied By Design (IBD) Micro CMS 3.5

23RISCO

abrir ↗

Referência

CVE-2018-7737

CVE-2018-7737—

In Z-BlogPHP 1.5.1.1740, there is Web Site physical path leakage, as demonstrated by admin_footer.php or admin_footer.ph

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.