Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.652exploits catalogados

34.545CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.581GitHub PoC 13.708VulnCheck XDB 8.225Nuclei 4.228Metasploit 3.467✓ só verificadosrecentes populares risco

21.581 exploits

Referência✓ VexDay Proof

Linksys WRT54G Firmware 1.00.9 - Security Bypass (1)

CVE-2008-1247—remotehardware

The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts,

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP PORTAL - Remote Database Disclosure

CVE-2008-5562—webappsasp

ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Total Video Player 1.31 - 'DefaultSkin.ini' Local Stack Overflow

CVE-2009-0261—localwindows

Stack-based buffer overflow in EffectMatrix Total Video Player 1.31 allows user-assisted attackers to execute arbitrary

43RISCO

abrir ↗

Referência✓ VexDay Proof

FipsCMS Light 2.1 - 'db.mdb' Remote Database Disclosure

CVE-2009-2022—webappsasp

fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote

23RISCO

abrir ↗

Referência

CVE-2016-1755

CVE-2016-1755—

The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebMatic 2.6 - 'index_album.php' Remote File Inclusion

CVE-2007-0839—webappsphp

Multiple PHP remote file inclusion vulnerabilities in index/index_album.php in Valarsoft WebMatic 2.6 allow remote attac

23RISCO

abrir ↗

Referência

CVE-2015-4591

CVE-2015-4591—

eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows remo

23RISCO

abrir ↗

Referência

CVE-2015-4591

CVE-2015-4591—

eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

STWC-Counter 3.4.0 - 'downloadcounter.php' Remote File Inclusion

CVE-2007-1233—webappsphp

PHP remote file inclusion vulnerability in downloadcounter.php in STWC-Counter 3.4.0.0 and earlier allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2009-2766

CVE-2009-2766—

httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs unde

23RISCO

abrir ↗

Referência

CVE-2009-4453

CVE-2009-4453—

Insecure method vulnerability in SoftCab Sound Converter ActiveX control (sndConverter.ocx) 1.2 allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-2313

CVE-2010-2313—

Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic_qu

23RISCO

abrir ↗

Referência

CVE-2010-2313

CVE-2010-2313—

Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic_qu

23RISCO

abrir ↗

Referência

CVE-2019-1476

CVE-2019-1476—

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

23RISCO

abrir ↗

Referência✓ VexDay Proof

PPLive 1.9.21 - '/LoadModule' URI Handlers Argument Injection

CVE-2009-1087—remotewindows

Multiple argument injection vulnerabilities in PPLive.exe in PPLive 1.9.21 and earlier allow remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2019-1152

CVE-2019-1152HIGH

Microsoft Graphics Remote Code Execution Vulnerability

46RISCO

abrir ↗

Referência

CVE-2016-8021

CVE-2016-8021—

Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3

23RISCO

abrir ↗

Referência

CVE-2021-42165

CVE-2021-42165—

MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing c

28RISCO

abrir ↗

Referência

CVE-2019-1144

CVE-2019-1144HIGH

Microsoft Graphics Remote Code Execution Vulnerability

46RISCO

abrir ↗

Referência

CVE-2019-1145

CVE-2019-1145HIGH

Microsoft Graphics Remote Code Execution Vulnerability

46RISCO

abrir ↗

Referência

CVE-2021-20031

CVE-2021-20031—

A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management

43RISCO

abrir ↗

Referência

CVE-2018-6911

CVE-2018-6911—

The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS

28RISCO

abrir ↗

Referência

Mitrastar GPT-2541GNAC-N1 - Privilege escalation

CVE-2021-42165—remotehardware

MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing c

28RISCO

abrir ↗

Referência

CVE-2017-18256

CVE-2017-18256—

Brave Browser before 0.13.0 allows remote attackers to cause a denial of service (resource consumption) via a long alert

23RISCO

abrir ↗

Referência

CVE-2012-0904

CVE-2012-0904—

VLC media player 1.1.11 allows remote attackers to cause a denial of service (crash) via a long string in an amr file.

23RISCO

abrir ↗

Referência

CVE-2017-8477

CVE-2017-8477—

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2,

23RISCO

abrir ↗

Referência

CVE-2023-4114

CVE-2023-4114MEDIUM

PHP Jabbers Night Club Booking Software index.php cross site scripting

48RISCO

abrir ↗

Referência

CVE-2017-13876

CVE-2017-13876—

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS b

23RISCO

abrir ↗

Referência

CVE-2022-50794

CVE-2022-50794CRITICAL

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Command Injection via Username

48RISCO

abrir ↗

Referência✓ VexDay Proof

Agora 1.4 RC1 - 'MysqlfinderAdmin.php' Remote File Inclusion

CVE-2006-7194—webappsphp

PHP remote file inclusion vulnerability in modules/Mysqlfinder/MysqlfinderAdmin.php in Agora 1.4 RC1, when register_glob

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.