Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.526exploits catalogados

34.478CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.534GitHub PoC 13.654VulnCheck XDB 8.213Nuclei 4.218Metasploit 3.464✓ só verificadosrecentes populares risco

21.534 exploits

Referência

CVE-2015-4127

CVE-2015-4127—

Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810 for WordPress allows remote attackers t

38RISCO

abrir ↗

Referência

CVE-2015-4127

CVE-2015-4127—

Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810 for WordPress allows remote attackers t

38RISCO

abrir ↗

Referência

CVE-2021-21972

CVE-2021-21972CRITICALsob ataqueransomware

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor

100RISCO

abrir ↗

Referência

CVE-2014-2072

CVE-2014-2072—

Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks

23RISCO

abrir ↗

Referência

CVE-2014-2072

CVE-2014-2072—

Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks

23RISCO

abrir ↗

Referência

CVE-2017-13261

CVE-2017-13261—

In bnep_process_control_packet of bnep_utils.cc, there is a possible out of bounds read due to a missing bounds check. T

23RISCO

abrir ↗

Referência

CVE-2017-13261

CVE-2017-13261—

In bnep_process_control_packet of bnep_utils.cc, there is a possible out of bounds read due to a missing bounds check. T

23RISCO

abrir ↗

Referência

CVE-2011-3487

CVE-2011-3487—

Directory traversal vulnerability in CarelDataServer.exe in Carel PlantVisor 2.4.4 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2015-7647

CVE-2015-7647—

Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux all

28RISCO

abrir ↗

Referência

CVE-2018-9107

CVE-2018-9107—

CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing exte

23RISCO

abrir ↗

Referência

CVE-2018-7690

CVE-2018-7690MEDIUM

MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access

33RISCO

abrir ↗

Referência

CVE-2014-2009

CVE-2014-2009—

The mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to obtain credentials, the installation path

23RISCO

abrir ↗

Referência✓ VexDay Proof

CA BrightStor ARCserve - 'tapeeng.exe' Remote Buffer Overflow

CVE-2006-6917—remotewindows

Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server before SP2 allows remote a

28RISCO

abrir ↗

Referência✓ VexDay Proof

News Bin Pro 5.33 - '.nbi' Local Buffer Overflow

CVE-2007-1074—localwindows

Multiple buffer overflows in NewsBin Pro 5.33 and NewsBin Pro 4.x allow user-assisted remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS Creamotion - 'securite.php' Remote File Inclusion

CVE-2007-5298—webappsphp

Multiple PHP remote file inclusion vulnerabilities in CMS Creamotion allow remote attackers to execute arbitrary PHP cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zeeways Shaadi Clone 2.0 - Authentication Bypass (1)

CVE-2008-6912—webappsphp

Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direct

23RISCO

abrir ↗

Referência✓ VexDay Proof

Gretech GOM Encoder 1.0.0.11 - '.Subtitle' Buffer Overflow (PoC)

CVE-2009-1022—doswindows

Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allow

23RISCO

abrir ↗

Referência

CVE-2017-7456

CVE-2017-7456—

Moxa MXView 2.8 allows remote attackers to cause a Denial of Service by sending overly long junk payload for the MXView

28RISCO

abrir ↗

Referência

CVE-2018-2380

CVE-2018-2380MEDIUMsob ataqueransomware

SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information pr

68RISCO

abrir ↗

Referência

CVE-2014-4971

CVE-2014-4971—

Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write

43RISCO

abrir ↗

Referência

CVE-2014-4971

CVE-2014-4971—

Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write

43RISCO

abrir ↗

Referência

CVE-2014-2009

CVE-2014-2009—

The mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to obtain credentials, the installation path

23RISCO

abrir ↗

Referência

CVE-2010-1977

CVE-2010-1977—

Directory traversal vulnerability in the J!WHMCS Integrator (com_jwhmcs) component 1.5.0 for Joomla! allows remote attac

38RISCO

abrir ↗

Referência✓ VexDay Proof

Fuzzylime CMS 3.03a - Local Inclusion / Arbitrary File Corruption

CVE-2009-2176—webappsphp

Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, al

23RISCO

abrir ↗

Referência

CVE-2010-1603

CVE-2010-1603—

Directory traversal vulnerability in the ZiMB Core (aka ZiMBCore or com_zimbcore) component 0.1 in the ZiMB Manager coll

38RISCO

abrir ↗

Referência

CVE-2014-4971

CVE-2014-4971—

Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write

43RISCO

abrir ↗

Referência

CVE-2010-1603

CVE-2010-1603—

Directory traversal vulnerability in the ZiMB Core (aka ZiMBCore or com_zimbcore) component 0.1 in the ZiMB Manager coll

38RISCO

abrir ↗

Referência

CVE-2017-11358

CVE-2017-11358—

The read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service

23RISCO

abrir ↗

Referência

CVE-2010-3129

CVE-2010-3129—

Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to

23RISCO

abrir ↗

Referência

CVE-2010-3129

CVE-2010-3129—

Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.