Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.589exploits catalogados

34.508CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8.216Nuclei 4.223Metasploit 3.464✓ só verificadosrecentes populares risco

21.554 exploits

Referência

CVE-2015-7570

CVE-2015-7570—

Multiple server-side request forgery (SSRF) vulnerabilities in Yeager CMS 1.2.1 allow remote attackers to trigger outbou

23RISCO

abrir ↗

Referência

CVE-2017-17874

CVE-2017-17874—

Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product

23RISCO

abrir ↗

Referência

CVE-2009-4754

CVE-2009-4754—

Stack-based buffer overflow in Mercury Audio Player 1.21 allows remote attackers to execute arbitrary code via a long st

23RISCO

abrir ↗

Referência

CVE-2009-4754

CVE-2009-4754—

Stack-based buffer overflow in Mercury Audio Player 1.21 allows remote attackers to execute arbitrary code via a long st

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple DNS Plus 5.0/4.1 - Remote Denial of Service

CVE-2008-3208—doswindows

Simple DNS Plus 4.1, 5.0, and possibly other versions before 5.1.101 allows remote attackers to cause a denial of servic

23RISCO

abrir ↗

Referência

CVE-2017-0062

CVE-2017-0062—

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; W

28RISCO

abrir ↗

Referência✓ VexDay Proof

EO Video 1.36 - Local Heap Overflow Denial of Service / (PoC)

CVE-2008-3733—doswindows

Stack-based buffer overflow in EO Video (eo-video) 1.36 allows remote attackers to cause a denial of service (applicatio

23RISCO

abrir ↗

Referência✓ VexDay Proof

Document Imaging SDK 10.95 - ActiveX Buffer Overflow (PoC)

CVE-2008-3209—doswindows

Heap-based buffer overflow in the OpenGifFile function in BiGif.dll in Black Ice Document Imaging SDK 10.95 allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

RTS Sentry Digital Surveillance - 'CamPanel.dll 2.1.0.2' Remote Buffer Overflow

CVE-2008-4548—remotewindows

Stack-based buffer overflow in the PTZCamPanelCtrl ActiveX control (CamPanel.dll) in RTS Sentry 2.1.0.2 allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

VideoLAN VLC Media Player 0.9.8a - Web UI 'input' Remote Denial of Service

CVE-2009-1045—doswindows

requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack consumption and crash) via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Icarus 2.0 - '.pgn' Local Stack Overflow (SEH)

CVE-2009-1071—localwindows

Stack-based buffer overflow in Icarus 2.0 allows remote attackers to cause a denial of service (application crash) or ex

23RISCO

abrir ↗

Referência

CVE-2016-4808

CVE-2016-4808—

Web2py versions 2.14.5 and below was affected by CSRF (Cross Site Request Forgery) vulnerability, which allows an attack

23RISCO

abrir ↗

Referência

CVE-2016-8023

CVE-2016-8023—

Authentication bypass by assumed-immutable data vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3

23RISCO

abrir ↗

Referência

CVE-2016-4312

CVE-2016-4312—

XML external entity (XXE) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 before WSO2-CARBON-PATCH

23RISCO

abrir ↗

Referência

CVE-2016-4312

CVE-2016-4312—

XML external entity (XXE) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 before WSO2-CARBON-PATCH

23RISCO

abrir ↗

Referência

CVE-2022-4395

CVE-2022-4395CRITICAL

Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload

53RISCO

abrir ↗

Referência

CVE-2018-19550

CVE-2018-19550—

Interspire Email Marketer through 6.1.6 allows arbitrary file upload via a surveys_submit.php "create survey and submit

23RISCO

abrir ↗

Referência

CVE-2023-2779

CVE-2023-2779MEDIUM

Super Socializer < 7.13.52 - Reflected XSS

48RISCO

abrir ↗

Referência

CVE-2023-2779

CVE-2023-2779MEDIUM

Super Socializer < 7.13.52 - Reflected XSS

48RISCO

abrir ↗

Referência

CVE-2023-2779

CVE-2023-2779MEDIUM

Super Socializer < 7.13.52 - Reflected XSS

48RISCO

abrir ↗

Referência✓ VexDay Proof

CliServ Web Community 0.65 - 'cl_headers' Include

CVE-2006-7068—webappsphp

PHP remote file inclusion vulnerability in CliServ Web Community 0.65 and earlier allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2010-4884

CVE-2010-4884—

PHP remote file inclusion vulnerability in guestbook/gbook.php in Gaestebuch 1.2 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2020-16602

CVE-2020-16602—

Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a ra

23RISCO

abrir ↗

Referência

CVE-2017-3631

CVE-2017-3631—

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported versio

38RISCO

abrir ↗

Referência

CVE-2017-3631

CVE-2017-3631—

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported versio

38RISCO

abrir ↗

Referência✓ VexDay Proof

TEC-IT TBarCode - OCX ActiveX Arbitrary File Overwrite

CVE-2007-3233—remotewindows

The TEC-IT TBarCode OCX ActiveX control (TBarCode7.ocx) 7.0.2.3524 allows remote attackers to overwrite arbitrary files

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cisco Phone 7940 - Remote Denial of Service

CVE-2007-5583—doshardware

Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service ("486 Busy" response

23RISCO

abrir ↗

Referência✓ VexDay Proof

Arcadem LE 2.04 - 'loadadminpage' Remote File Inclusion

CVE-2007-6542—webappsphp

PHP remote file inclusion vulnerability in admin/frontpage_right.php in Arcadem LE 2.04 and earlier allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component SimpleBoard 1.0.1 - Arbitrary File Upload

CVE-2008-6814—webappsphp

Unrestricted file upload vulnerability in image_upload.php in the SimpleBoard (com_simpleboard) component 1.0.1 and earl

23RISCO

abrir ↗

Referência✓ VexDay Proof

TYPSoft FTP Server 1.11 - 'ABORT' Remote Denial of Service

CVE-2009-1668—doswindows

TYPSoft FTP Server 1.11 allows remote attackers to cause a denial of service (CPU consumption) by sending an ABOR (abort

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.