Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.445exploits catalogados

34.432CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

21.497 exploits

Referência

CVE-2012-4878

CVE-2012-4878—

Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to r

38RISCO

abrir ↗

Referência

CVE-2020-8655

CVE-2020-8655HIGHsob ataque

An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability

98RISCO

abrir ↗

Referência

CVE-2014-4643

CVE-2014-4643—

Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a den

23RISCO

abrir ↗

Referência

CVE-2020-8655

CVE-2020-8655HIGHsob ataque

An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability

98RISCO

abrir ↗

Referência

CVE-2018-18759

CVE-2018-18759—

Modbus Slave 7.0.0 in modbus tools has a Buffer Overflow.

23RISCO

abrir ↗

Referência

CVE-2018-18759

CVE-2018-18759—

Modbus Slave 7.0.0 in modbus tools has a Buffer Overflow.

23RISCO

abrir ↗

Referência

CVE-2014-10079

CVE-2014-10079—

In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP address in the "ipaddress" hid

23RISCO

abrir ↗

Referência

CVE-2014-10079

CVE-2014-10079—

In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP address in the "ipaddress" hid

23RISCO

abrir ↗

Referência

CVE-2019-10969

CVE-2019-10969—

Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unauthor

23RISCO

abrir ↗

Referência

CVE-2018-10751

CVE-2018-10751—

A malformed OMACP WAP push message can cause memory corruption on a Samsung S7 Edge device when processing the String Ex

23RISCO

abrir ↗

Referência

CVE-2021-45425

CVE-2021-45425—

Reflected Cross Site Scripting (XSS) in SAFARI Montage versions 8.3 and 8.5 allows remote attackers to execute JavaScrip

23RISCO

abrir ↗

Referência

CVE-2018-10751

CVE-2018-10751—

A malformed OMACP WAP push message can cause memory corruption on a Samsung S7 Edge device when processing the String Ex

23RISCO

abrir ↗

Referência

CVE-2010-3847

CVE-2010-3847—

elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not pro

38RISCO

abrir ↗

Referência

CVE-2010-3847

CVE-2010-3847—

elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not pro

38RISCO

abrir ↗

Referência

CVE-2017-15271

CVE-2017-15271—

A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729. This issue could be

23RISCO

abrir ↗

Referência

CVE-2017-15271

CVE-2017-15271—

A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729. This issue could be

23RISCO

abrir ↗

Referência✓ VexDay Proof

Randshop 1.1.1 - 'header.inc.php' Remote File Inclusion

CVE-2006-3375—webappsphp

PHP remote file inclusion vulnerability in includes/header.inc.php in Randshop 1.1.1 allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2023-30256

CVE-2023-30256MEDIUM

Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtain sensitive informat

48RISCO

abrir ↗

Referência

CVE-2018-4200

CVE-2018-4200—

An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud

23RISCO

abrir ↗

Referência

CVE-2013-2680

CVE-2013-2680—

Cisco Linksys E4200 1.0.05 Build 7 devices store passwords in cleartext allowing remote attackers to obtain sensitive in

23RISCO

abrir ↗

Referência✓ VexDay Proof

HIOX GUEST BOOK (HGB) 4.0 - Remote Code Execution

CVE-2007-1998—webappsphp

Direct static code injection vulnerability in HIOX Guest Book (HGB) 4.0 allows remote attackers to inject arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

Black Ice Software Inc Barcode SDK - 'BIDIB.ocx' Multiple Vulnerabilities

CVE-2008-2684—remotewindows

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to exe

23RISCO

abrir ↗

Referência

CVE-2009-3710

CVE-2009-3710—

RioRey RIOS 4.6.6 and 4.7.0 uses an undocumented, hard-coded username (dbadmin) and password (sq!us3r) for an SSH tunnel

23RISCO

abrir ↗

Referência

CVE-2019-15943

CVE-2019-15943—

vphysics.dll in Counter-Strike: Global Offensive before 1.37.1.1 allows remote attackers to achieve code execution or de

23RISCO

abrir ↗

Referência

CVE-2014-8826

CVE-2014-8826—

LaunchServices in Apple OS X before 10.10.2 does not properly handle file-type metadata, which allows attackers to bypas

23RISCO

abrir ↗

Referência

CVE-2014-8826

CVE-2014-8826—

LaunchServices in Apple OS X before 10.10.2 does not properly handle file-type metadata, which allows attackers to bypas

23RISCO

abrir ↗

Referência

CVE-2018-7736

CVE-2018-7736—

In Z-BlogPHP 1.5.1.1740, cmd.php has XSS via the ZC_BLOG_SUBNAME parameter or ZC_UPLOAD_FILETYPE parameter. NOTE: the so

23RISCO

abrir ↗

Referência

CVE-2018-7736

CVE-2018-7736—

In Z-BlogPHP 1.5.1.1740, cmd.php has XSS via the ZC_BLOG_SUBNAME parameter or ZC_UPLOAD_FILETYPE parameter. NOTE: the so

23RISCO

abrir ↗

Referência

CVE-2012-1614

CVE-2012-1614—

Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request

23RISCO

abrir ↗

Referência

CVE-2012-1614

CVE-2012-1614—

Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.