Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

22.573 exploits

Referência

CVE-2018-10088

CVE-2018-10088—

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE

50RISCO

abrir ↗

Referência

CVE-2014-0980

CVE-2014-0980—

Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI f

50RISCO

abrir ↗

Referência

CVE-2015-6000

CVE-2015-6000—

Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger

50RISCO

abrir ↗

Referência

CVE-2017-14537

CVE-2017-14537—

trixbox 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/index.php?packages or the lang parameter

50RISCO

abrir ↗

Referência

CVE-2022-36446

CVE-2022-36446—

software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.

60RISCO

abrir ↗

Referência

CVE-2017-5487

CVE-2017-5487—

wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before

45RISCO

abrir ↗

Referência

CVE-2014-8586

CVE-2014-8586—

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to exe

50RISCO

abrir ↗

Referência

CVE-2014-8586

CVE-2014-8586—

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to exe

50RISCO

abrir ↗

Referência✓ VexDay Proof

Half-Life CSTRIKE Server 1.6 - 'no-steam' Denial of Service

CVE-2008-7203—dosmultiple

Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service (crash) via multiple cr

23RISCO

abrir ↗

Referência✓ VexDay Proof

AAA EasyGrid ActiveX 3.51 - Remote File Overwrite

CVE-2009-0134—remotewindows

Insecure method vulnerability in the EasyGrid.SGCtrl.32 ActiveX control in EasyGrid.ocx 1.0.0.1 in AAA EasyGrid ActiveX

23RISCO

abrir ↗

Referência

CVE-2022-26965

CVE-2022-26965—

In Pluck 4.7.16, an admin user can use the theme upload functionality at /admin.php?action=themeinstall to perform remot

35RISCO

abrir ↗

Referência

CVE-2016-1101

CVE-2016-1101—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RISCO

abrir ↗

Referência

CVE-2016-1101

CVE-2016-1101—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RISCO

abrir ↗

Referência✓ VexDay Proof

VUPlayer 2.49 - '.asx' HREF Local Buffer Overflow (PoC)

CVE-2009-0174—doswindows

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in th

28RISCO

abrir ↗

Referência✓ VexDay Proof

VUPlayer 2.49 - '.asx' 'HREF' Universal Buffer Overflow

CVE-2009-0174—localwindows

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in th

28RISCO

abrir ↗

Referência✓ VexDay Proof

VUPlayer 2.49 - '.asx' HREF Local Buffer Overflow (2)

CVE-2009-0174—localwindows

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in th

28RISCO

abrir ↗

Referência

CVE-2010-0688

CVE-2010-0688—

Stack-based buffer overflow in Orbital Viewer 1.04 allows user-assisted remote attackers to execute arbitrary code via a

50RISCO

abrir ↗

Referência

CVE-2018-7582

CVE-2018-7582—

WebLog Expert Web Server Enterprise 9.4 allows Remote Denial Of Service (daemon crash) via a long HTTP Accept Header to

35RISCO

abrir ↗

Referência

CVE-2018-7582

CVE-2018-7582—

WebLog Expert Web Server Enterprise 9.4 allows Remote Denial Of Service (daemon crash) via a long HTTP Accept Header to

35RISCO

abrir ↗

Referência

CVE-2017-6884

CVE-2017-6884HIGHsob ataqueransomware

A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vul

83RISCO

abrir ↗

Referência✓ VexDay Proof

Free Download Manager 2.5/3.0 - Authorisation Stack Buffer Overflow (PoC)

CVE-2009-0183—doswindows

Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allo

50RISCO

abrir ↗

Referência

CVE-2022-37661

CVE-2022-37661—

SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution (RCE) via the ping host feature.

35RISCO

abrir ↗

Referência

CVE-2022-37661

CVE-2022-37661—

SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution (RCE) via the ping host feature.

35RISCO

abrir ↗

Referência

CVE-2022-37661

CVE-2022-37661—

SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution (RCE) via the ping host feature.

35RISCO

abrir ↗

Referência

CVE-2011-2763

CVE-2011-2763—

The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) and 4.7.18 allows remote attackers to execute arbitra

50RISCO

abrir ↗

Referência

CVE-2008-5232

CVE-2008-5232—

Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3

35RISCO

abrir ↗

Referência

CVE-2012-3752

CVE-2012-3752—

Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a de

50RISCO

abrir ↗

Referência✓ VexDay Proof

Xerox Phaser 8400 - Remote Reboot (Denial of Service)

CVE-2008-3571—doshardware

The Xerox Phaser 8400 allows remote attackers to cause a denial of service (reboot) via an empty UDP packet to port 1900

35RISCO

abrir ↗

Referência

CVE-2012-5975

CVE-2012-5975—

The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6

50RISCO

abrir ↗

Referência

CVE-2018-13109

CVE-2018-13109—

All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerabili

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.