Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.589exploits catalogados

34.508CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8.216Nuclei 4.223Metasploit 3.464✓ só verificadosrecentes populares risco

21.554 exploits

Referência✓ VexDay Proof

CliServ Web Community 0.65 - 'cl_headers' Include

CVE-2006-7068—webappsphp

PHP remote file inclusion vulnerability in CliServ Web Community 0.65 and earlier allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2010-4884

CVE-2010-4884—

PHP remote file inclusion vulnerability in guestbook/gbook.php in Gaestebuch 1.2 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2020-16602

CVE-2020-16602—

Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a ra

23RISCO

abrir ↗

Referência

CVE-2017-3631

CVE-2017-3631—

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported versio

38RISCO

abrir ↗

Referência

CVE-2017-3631

CVE-2017-3631—

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported versio

38RISCO

abrir ↗

Referência✓ VexDay Proof

TEC-IT TBarCode - OCX ActiveX Arbitrary File Overwrite

CVE-2007-3233—remotewindows

The TEC-IT TBarCode OCX ActiveX control (TBarCode7.ocx) 7.0.2.3524 allows remote attackers to overwrite arbitrary files

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cisco Phone 7940 - Remote Denial of Service

CVE-2007-5583—doshardware

Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service ("486 Busy" response

23RISCO

abrir ↗

Referência✓ VexDay Proof

Arcadem LE 2.04 - 'loadadminpage' Remote File Inclusion

CVE-2007-6542—webappsphp

PHP remote file inclusion vulnerability in admin/frontpage_right.php in Arcadem LE 2.04 and earlier allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component SimpleBoard 1.0.1 - Arbitrary File Upload

CVE-2008-6814—webappsphp

Unrestricted file upload vulnerability in image_upload.php in the SimpleBoard (com_simpleboard) component 1.0.1 and earl

23RISCO

abrir ↗

Referência✓ VexDay Proof

TYPSoft FTP Server 1.11 - 'ABORT' Remote Denial of Service

CVE-2009-1668—doswindows

TYPSoft FTP Server 1.11 allows remote attackers to cause a denial of service (CPU consumption) by sending an ABOR (abort

23RISCO

abrir ↗

Referência

CVE-2011-1670

CVE-2011-1670—

Cross-site scripting (XSS) vulnerability in actions/add.php in InTerra Blog Machine 1.84, and possibly earlier versions,

23RISCO

abrir ↗

Referência

CVE-2009-0855

CVE-2009-0855—

Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 bef

23RISCO

abrir ↗

Referência

CVE-2012-2602

CVE-2012-2602—

Multiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before

23RISCO

abrir ↗

Referência

CVE-2009-3664

CVE-2009-3664—

Multiple directory traversal vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to include or exec

23RISCO

abrir ↗

Referência

CVE-2014-3849

CVE-2014-3849—

The iMember360 plugin 3.8.012 through 3.9.001 for WordPress does not properly restrict access, which allows remote attac

23RISCO

abrir ↗

Referência

CVE-2014-3849

CVE-2014-3849—

The iMember360 plugin 3.8.012 through 3.9.001 for WordPress does not properly restrict access, which allows remote attac

23RISCO

abrir ↗

Referência

CVE-2021-24145

CVE-2021-24145—

Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE

60RISCO

abrir ↗

Referência

CVE-2013-0663

CVE-2013-0663—

Cross-site request forgery (CSRF) vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM10

23RISCO

abrir ↗

Referência

CVE-2017-6074

CVE-2017-6074—

The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST p

23RISCO

abrir ↗

Referência

CVE-2017-6074

CVE-2017-6074—

The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST p

23RISCO

abrir ↗

Referência✓ VexDay Proof

Advanced Webhost Billing System (AWBS) 2.4.0 - 'cart2.php' Remote File Inclusion

CVE-2007-2272—webappsphp

PHP remote file inclusion vulnerability in docs/front-end-demo/cart2.php in Advanced Webhost Billing System (AWBS) 2.4.0

23RISCO

abrir ↗

Referência

CVE-2016-8523

CVE-2016-8523—

A Remote Arbitrary Code Execution vulnerability in HPE Smart Storage Administrator version before v2.60.18.0 was found.

28RISCO

abrir ↗

Referência

CVE-2017-7183

CVE-2017-7183—

The TFTP server in ExtraPuTTY 0.30 and earlier allows remote attackers to cause a denial of service (crash) via a large

23RISCO

abrir ↗

Referência

CVE-2009-3019

CVE-2009-3019—

Microsoft Internet Explorer 6 on Windows XP SP2 and SP3, and Internet Explorer 7 on Vista, allows remote attackers to ca

28RISCO

abrir ↗

Referência

CVE-2017-7183

CVE-2017-7183—

The TFTP server in ExtraPuTTY 0.30 and earlier allows remote attackers to cause a denial of service (crash) via a large

23RISCO

abrir ↗

Referência

CVE-2018-16606

CVE-2018-16606—

In ProConf before 6.1, an Insecure Direct Object Reference (IDOR) allows any author to view and grab all submitted paper

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft FoxServer - 'vfp6r.dll 6.0.8862.0' ActiveX Command Execution

CVE-2008-0236—remotewindows

An ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0) allows remote attackers to execute arbitrary comma

28RISCO

abrir ↗

Referência✓ VexDay Proof

PhpAddEdit 1.3 - 'cookie' Authentication Bypass

CVE-2008-6581—webappsphp

23RISCO

abrir ↗

Referência✓ VexDay Proof

eZip Wizard 3.0 - Local Stack Buffer Overflow (PoC) (SEH)

CVE-2009-1058—doswindows

Stack-based buffer overflow in ZipGenius might allow remote attackers to execute arbitrary code via a crafted .zip file

23RISCO

abrir ↗

Referência

CVE-2018-6323

CVE-2018-6323—

The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU B

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.