Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.062exploits catalogados

31.617CVEs com exploração pública

0testados em laboratório

Todos Exploit-DB 22.467Referência 19.791GitHub PoC 13.086VulnCheck XDB 8.069Nuclei 4.187Metasploit 3.462✓ só verificadosrecentes populares risco

19.791 exploits

Referência

CVE-2023-25690

CVE-2023-25690CRITICAL

Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

70RISCO

Referência

CVE-2014-0497

CVE-2014-0497HIGHsob ataque

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Ma

100RISCO

Referência

CVE-2023-2796

CVE-2023-2796—

EventON < 2.1.2 - Unauthenticated Event Access

50RISCO

Referência

CVE-2021-24155

CVE-2021-24155—

Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

60RISCO

Referência

CVE-2021-24155

CVE-2021-24155—

Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

60RISCO

Referência

CVE-2017-14493

CVE-2017-14493—

Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execu

45RISCO

Referência

CVE-2016-10073

CVE-2016-10073—

The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the emai

60RISCO

Referência

CVE-2016-10073

CVE-2016-10073—

The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the emai

60RISCO

Referência

Bea Weblogic Apache Connector - Code Execution / Denial of Service

CVE-2008-3257—

Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10

60RISCO

Referência

CVE-2021-25094

CVE-2021-25094—

Tatsu < 3.3.12 - Unauthenticated RCE

60RISCO

Referência

CVE-2021-25094

CVE-2021-25094—

Tatsu < 3.3.12 - Unauthenticated RCE

60RISCO

Referência

CVE-2010-2075

CVE-2010-2075—

UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally

60RISCO

Referência

CVE-2013-5311

CVE-2013-5311—

Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL com

23RISCO

Referência

CVE-2016-5195

CVE-2016-5195HIGHsob ataque

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Referência

CVE-2016-5195

CVE-2016-5195HIGHsob ataque

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Referência

CVE-2016-5195

CVE-2016-5195HIGHsob ataque

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Referência

CVE-2016-5195

CVE-2016-5195HIGHsob ataque

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Referência

CVE-2016-5195

CVE-2016-5195HIGHsob ataque

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Referência

CVE-2016-5195

CVE-2016-5195HIGHsob ataque

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Referência

CVE-2016-5195

CVE-2016-5195HIGHsob ataque

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Referência

CVE-2016-5195

CVE-2016-5195HIGHsob ataque

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Referência

CVE-2016-5195

CVE-2016-5195HIGHsob ataque

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Referência

CVE-2016-5195

CVE-2016-5195HIGHsob ataque

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Referência

CVE-2017-11317

CVE-2017-11317CRITICALsob ataque

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload

100RISCO

Referência

Sun Board 1.00.00 alpha - Remote File Inclusion

CVE-2007-3370—

Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrar

45RISCO

Referência

CVE-2015-0779

CVE-2015-0779—

Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11

60RISCO

Referência

CVE-2016-10174

CVE-2016-10174CRITICALsob ataque

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cg

100RISCO

Referência

CVE-2016-10174

CVE-2016-10174CRITICALsob ataque

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cg

100RISCO

Referência

CVE-2019-1935

CVE-2019-1935CRITICAL

Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data SCP User Default Credentials Vulnerability

85RISCO

Referência

CVE-2019-1935

CVE-2019-1935CRITICAL

Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data SCP User Default Credentials Vulnerability

85RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.