Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.652exploits catalogados

34.545CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.581GitHub PoC 13.708VulnCheck XDB 8.225Nuclei 4.228Metasploit 3.467✓ só verificadosrecentes populares risco

21.581 exploits

Referência

CVE-2006-4611

CVE-2006-4611—

Buffer overflow in the _tor_resolve function in dsocks.c in dsocks before 1.4 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2020-14073

CVE-2020-14073—

XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties. An attacker with Read/Write privileges can c

23RISCO

abrir ↗

Referência

CVE-2021-25679

CVE-2021-25679—

The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issues. T

23RISCO

abrir ↗

Referência

CVE-2010-1652

CVE-2010-1652—

Directory traversal vulnerability in the HelpCenter module in Help Center Live (HCL) 2.0.6 and 2.1.7 allows remote attac

23RISCO

abrir ↗

Referência

CVE-2010-1652

CVE-2010-1652—

Directory traversal vulnerability in the HelpCenter module in Help Center Live (HCL) 2.0.6 and 2.1.7 allows remote attac

23RISCO

abrir ↗

Referência

CVE-2018-10309

CVE-2018-10309—

The Responsive Cookie Consent plugin before 1.8 for WordPress mishandles number fields, leading to XSS.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Netref 4 - 'cat_for_aff.php' Source Code Disclosure

CVE-2006-5618—webappsphp

Directory traversal vulnerability in script/cat_for_aff.php in Netref 4 allows remote attackers to read arbitrary files

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hot or Not Clone by Jnshosts.com - Database Backup Dump

CVE-2007-6603—webappsphp

Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rianxosencabos CMS 0.9 - Insecure Cookie Handling

CVE-2008-4244—webappsphp

Rianxosencabos CMS 0.9 allows remote attackers to bypass authentication and gain administrative access by setting the us

23RISCO

abrir ↗

Referência✓ VexDay Proof

MODx CMS 0.9.6.2 - Remote File Inclusion / Cross-Site Scripting

CVE-2008-5939—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in MODx CMS 0.9.6.2 and earlier allows remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Safari - 'ARGUMENTS' Array Integer Overflow HeapSpray (PoC)

CVE-2009-0070—dosmultiple

Integer signedness error in Apple Safari allows remote attackers to read the contents of arbitrary memory locations, cau

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre Shopping Mall - Insecure Cookie Handling

CVE-2008-6232—webappsphp

Pre Shopping Mall allows remote attackers to bypass authentication and gain administrative access by setting the (1) adm

23RISCO

abrir ↗

Referência✓ VexDay Proof

blogplus 1.0 - Multiple Local File Inclusions

CVE-2009-1246—webappsphp

Multiple directory traversal vulnerabilities in Blogplus 1.0 allow remote attackers to include and execute arbitrary loc

23RISCO

abrir ↗

Referência

CVE-2019-19781

CVE-2019-19781CRITICALsob ataqueransomware

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

Referência

CVE-2010-1946

CVE-2010-1946—

Multiple PHP remote file inclusion vulnerabilities in openMairie Openregistrecil 1.02, when register_globals is enabled,

23RISCO

abrir ↗

Referência

CVE-2010-1946

CVE-2010-1946—

Multiple PHP remote file inclusion vulnerabilities in openMairie Openregistrecil 1.02, when register_globals is enabled,

23RISCO

abrir ↗

Referência

CVE-2021-36711

CVE-2021-36711—

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.

28RISCO

abrir ↗

Referência

CVE-2021-38759

CVE-2021-38759—

Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain a

28RISCO

abrir ↗

Referência

CVE-2021-39312

CVE-2021-39312HIGH

True Ranker <= 2.2.2 Directory Traversal/Arbitrary File Read

78RISCO

abrir ↗

Referência

CVE-2021-39316

CVE-2021-39316HIGH

ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure

68RISCO

abrir ↗

Referência

Wordpress Plugin BulletProof Security 5.1 - Sensitive Information Disclosure

CVE-2021-39327MEDIUMwebappsphp

BulletProof Security <= 5.1 Sensitive Information Disclosure

70RISCO

abrir ↗

Referência

CVE-2021-4034

CVE-2021-4034HIGHsob ataque

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

Referência

CVE-2021-4034

CVE-2021-4034HIGHsob ataque

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

Referência

CVE-2021-21985

CVE-2021-21985CRITICALsob ataqueransomware

The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual

100RISCO

abrir ↗

Referência

CVE-2021-21985

CVE-2021-21985CRITICALsob ataqueransomware

The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual

100RISCO

abrir ↗

Referência

CVE-2024-21887

CVE-2024-21887CRITICALsob ataqueransomware

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x,

100RISCO

abrir ↗

Referência

CVE-2021-26084

CVE-2021-26084CRITICALsob ataqueransomware

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

abrir ↗

Referência

CVE-2021-35464

CVE-2021-35464CRITICALsob ataqueransomware

ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pa

100RISCO

abrir ↗

Referência

CVE-2021-35464

CVE-2021-35464CRITICALsob ataqueransomware

ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pa

100RISCO

abrir ↗

Referência

CVE-2024-23897

CVE-2024-23897CRITICALsob ataqueransomware

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.