Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.580exploits catalogados

34.506CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.683VulnCheck XDB 8.213Nuclei 4.223Metasploit 3.464✓ só verificadosrecentes populares risco

21.534 exploits

Referência

CVE-2017-6095

CVE-2017-6095—

A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/list

23RISCO

abrir ↗

Referência

CVE-2020-6318

CVE-2020-6318CRITICAL

A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (>

48RISCO

abrir ↗

Referência

CVE-2017-2483

CVE-2017-2483—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b

23RISCO

abrir ↗

Referência✓ VexDay Proof

IBM Rational ClearQuest - Web Authentication Bypass / SQL Injection

CVE-2007-4368—webappscgi

SQL injection vulnerability in /main in IBM Rational ClearQuest (CQ) Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

MikroTik RouterOS 3.13 - SNMP write (Set request)

CVE-2008-6976—remotehardware

MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System (N

23RISCO

abrir ↗

Referência

CVE-2021-25094

CVE-2021-25094—

Tatsu < 3.3.12 - Unauthenticated RCE

60RISCO

abrir ↗

Referência

CVE-2015-2679

CVE-2015-2679—

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2015-2679

CVE-2015-2679—

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2010-3906

CVE-2010-3906—

Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Referência

CVE-2010-4401

CVE-2010-4401—

languages.inc.php in DynPG CMS 4.2.0 allows remote attackers to obtain sensitive information via a direct request, which

23RISCO

abrir ↗

Referência

CVE-2009-4775

CVE-2009-4775—

Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of

23RISCO

abrir ↗

Referência

CVE-2009-4775

CVE-2009-4775—

Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of

23RISCO

abrir ↗

Referência

CVE-2017-15035

CVE-2017-15035—

EmTec PyroBatchFTP before 3.18 allows remote servers to cause a denial of service (application crash).

23RISCO

abrir ↗

Referência

CVE-2016-1415

CVE-2016-1415—

Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to cause a denial of servi

23RISCO

abrir ↗

Referência

CVE-2009-4216

CVE-2009-4216—

Directory traversal vulnerability in funzioni/lib/menulast.php in klinza professional cms 5.0.1 and earlier allows remot

23RISCO

abrir ↗

Referência

CVE-2014-3139

CVE-2014-3139—

recoveryconsole/bpl/snmpd.php in Unitrends Enterprise Backup 7.3.0 allows remote attackers to bypass authentication by s

23RISCO

abrir ↗

Referência✓ VexDay Proof

Python 2.4.2 - 'realpath()' Local Stack Overflow

CVE-2006-1542—locallinux

Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ultra Crypto Component - 'CryptoX.dll 2.0 SaveToFile()' Insecure Method

CVE-2007-4902—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Co

23RISCO

abrir ↗

Referência✓ VexDay Proof

idmos-phoenix CMS - 'aural.php' Remote File Inclusion

CVE-2007-5294—webappsphp

PHP remote file inclusion vulnerability in core/aural.php in IDMOS 1.0-beta (aka Phoenix) allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

freeSSHd 1.2.1 - (Authenticated) Remote Stack Overflow (PoC)

CVE-2008-2573—doswindows

Stack-based buffer overflow in SFTP in freeSSHd 1.2.1 allows remote authenticated users to execute arbitrary code via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

SyndeoCMS 2.6.0 - Local File Inclusion / Cross-Site Scripting

CVE-2008-5272—webappsphp

Multiple directory traversal vulnerabilities in Fred Stuurman SyndeoCMS 2.6.0 allow remote authenticated users to read a

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS 2.3.1 - Multiple Local File Inclusions

CVE-2008-6884—webappsphp

Multiple directory traversal vulnerabilities in XOOPS 2.3.1, when register_globals is enabled, allow remote attackers to

23RISCO

abrir ↗

Referência

CVE-2015-5529

CVE-2015-5529—

Multiple cross-site scripting (XSS) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to injec

23RISCO

abrir ↗

Referência

CVE-2019-25707

CVE-2019-25707HIGH

eBrigade ERP 4.5 SQL Injection via pdf.php

41RISCO

abrir ↗

Referência

CVE-2014-5112

CVE-2014-5112—

maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary commands via shell metacha

23RISCO

abrir ↗

Referência

CVE-2010-1050

CVE-2010-1050—

SQL injection vulnerability in index.php in AudiStat 1.3 allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência

CVE-2009-4761

CVE-2009-4761—

Stack-based buffer overflow in Mini-stream RM Downloader allows remote attackers to execute arbitrary code via a long st

23RISCO

abrir ↗

Referência

CVE-2009-4761

CVE-2009-4761—

Stack-based buffer overflow in Mini-stream RM Downloader allows remote attackers to execute arbitrary code via a long st

23RISCO

abrir ↗

Referência

CVE-2010-2348

CVE-2010-2348—

Stack-based buffer overflow in Batch Audio Converter Lite Edition 1.0.0.0 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência

Adiscon LogAnalyzer v.4.1.13 - Cross Site Scripting

CVE-2023-36306—webappsphp

A Cross Site Scripting (XSS) vulnerability in Adiscon Aiscon LogAnalyzer through 4.1.13 allows a remote attacker to exec

38RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.