Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.445exploits catalogados

34.432CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

21.497 exploits

Referência

CVE-2014-2021

CVE-2014-2021—

Cross-site scripting (XSS) vulnerability in admincp/apilog.php in vBulletin 4.2.2 and earlier, and 5.0.x through 5.0.5 a

23RISCO

abrir ↗

Referência

CVE-2017-14322

CVE-2017-14322—

The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior

35RISCO

abrir ↗

Referência

CVE-2013-6025

CVE-2013-6025—

The XMLParse procedure in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 ESD 2 allows remote authenticated users to re

23RISCO

abrir ↗

Referência

CVE-2017-2446

CVE-2017-2446—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef

23RISCO

abrir ↗

Referência

CVE-2017-2446

CVE-2017-2446—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef

23RISCO

abrir ↗

Referência

CVE-2007-3162

CVE-2007-3162—

Buffer overflow in the NotSafe function in the idaiehlp ActiveX control in idaiehlp.dll 1.9.1.74 in Internet Download Ac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Opera Web Browser 9.00 - 'iframe' Remote Denial of Service

CVE-2006-3353—dosmultiple

Opera 9 allows remote attackers to cause a denial of service (crash) via a crafted web page that triggers an out-of-boun

23RISCO

abrir ↗

Referência✓ VexDay Proof

Foxit Reader 2.0 - 'PDF' Remote Denial of Service

CVE-2007-2186—doswindows

Foxit Reader 2.0 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Opera 9.2 - '.torrent' Remote Denial of Service

CVE-2007-2274—dosmultiple

The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service (CPU consumption and app

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyNewsletter 0.8 (beta5) - Multiple Vulnerabilities

CVE-2007-2372—webappsphp

admin/send_mod.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier prints a Location header but does not exit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Data Dynamics ActiveBar (Actbar3.ocx 3.2) - Multiple Insecure Methods

CVE-2007-3883—remotewindows

The Data Dynamics ActiveBar ActiveX control (actbar3.ocx) 3.2 and earlier allows remote attackers to create or overwrite

23RISCO

abrir ↗

Referência✓ VexDay Proof

Data Dynamics ActiveBar - ActiveX 'actbar3.ocx 3.1' Insecure Methods

CVE-2007-3883—remotewindows

The Data Dynamics ActiveBar ActiveX control (actbar3.ocx) 3.2 and earlier allows remote attackers to create or overwrite

23RISCO

abrir ↗

Referência✓ VexDay Proof

X-Cart - Multiple Remote File Inclusions

CVE-2007-4907—webappsphp

Multiple PHP remote file inclusion vulnerabilities in X-Cart allow remote attackers to execute arbitrary PHP code via a

23RISCO

abrir ↗

Referência

CVE-2019-16645

CVE-2019-16645—

An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) cre

23RISCO

abrir ↗

Referência

CVE-2019-15501

CVE-2019-15501—

Reflected cross site scripting (XSS) in L-Soft LISTSERV before 16.5-2018a exists via the /scripts/wa.exe OK parameter.

38RISCO

abrir ↗

Referência

CVE-2015-7564

CVE-2015-7564—

Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Internet Download Accelerator 5.2 - Remote Buffer Overflow (PoC)

CVE-2007-3162—doswindows

Buffer overflow in the NotSafe function in the idaiehlp ActiveX control in idaiehlp.dll 1.9.1.74 in Internet Download Ac

23RISCO

abrir ↗

Referência

CVE-2013-5528

CVE-2013-5528—

Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager all

43RISCO

abrir ↗

Referência

CVE-2010-1607

CVE-2010-1607—

Directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface (aka WMI or com_wmi) component 1.5.0

38RISCO

abrir ↗

Referência

CVE-2015-5696

CVE-2015-5696—

Dell Netvault Backup before 10.0.5 allows remote attackers to cause a denial of service (crash) via a crafted request.

23RISCO

abrir ↗

Referência

CVE-2015-5696

CVE-2015-5696—

Dell Netvault Backup before 10.0.5 allows remote attackers to cause a denial of service (crash) via a crafted request.

23RISCO

abrir ↗

Referência

CVE-2020-8947

CVE-2020-8947—

functions_netflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metac

28RISCO

abrir ↗

Referência

CVE-2010-1715

CVE-2010-1715—

Directory traversal vulnerability in the Online Examination (aka Online Exam or com_onlineexam) component 1.5.0 for Joom

38RISCO

abrir ↗

Referência

CVE-2010-1469

CVE-2010-1469—

Directory traversal vulnerability in the Ternaria Informatica JProject Manager (com_jprojectmanager) component 1.0 for J

38RISCO

abrir ↗

Referência✓ VexDay Proof

Pluxml 0.3.1 - Remote Code Execution

CVE-2007-3432—webappsphp

Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute

23RISCO

abrir ↗

Referência

CVE-2013-5528

CVE-2013-5528—

Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager all

43RISCO

abrir ↗

Referência✓ VexDay Proof

KVIrc 3.4.0 - Virgo Remote Format String (PoC)

CVE-2008-4748—doswindows

Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC UR

23RISCO

abrir ↗

Referência

CVE-2009-3704

CVE-2009-3704—

ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service

23RISCO

abrir ↗

Referência

CVE-2020-25495

CVE-2020-25495—

A reflected Cross-site scripting (XSS) vulnerability in Xinuo (formerly SCO) Openserver version 5 and 6 allows remote at

38RISCO

abrir ↗

Referência✓ VexDay Proof

AsteriDex 3.0 - 'callboth.php' Remote Code Execution

CVE-2007-3621—webappsphp

Multiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote attackers to inject ar

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.