Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.008exploits catalogados

34.638CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.662 exploits

Referência✓ VexDay Proof

Apple Mac OSX Safari 2.0.3 (417.9.2) - 'ROWSPAN' Denial of Service (PoC)

CVE-2006-2019—dososx

Apple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows remote attackers to cause a denial of service (CP

23RISCO

abrir ↗

Referência

CVE-2015-1422

CVE-2015-1422—

Multiple cross-site scripting (XSS) vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2015-1318

CVE-2015-1318—

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a craf

38RISCO

abrir ↗

Referência

CVE-2015-1318

CVE-2015-1318—

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a craf

38RISCO

abrir ↗

Referência

CVE-2018-0746

CVE-2018-0746—

The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Wi

23RISCO

abrir ↗

Referência

CVE-2018-10068

CVE-2018-10068—

The jDownloads extension before 3.2.59 for Joomla! has XSS.

23RISCO

abrir ↗

Referência

CVE-2009-3534

CVE-2009-3534—

Directory traversal vulnerability in index.php in LionWiki 3.0.3, when magic_quotes_gpc is disabled, allows remote attac

23RISCO

abrir ↗

Referência

CVE-2009-3219

CVE-2009-3219—

Directory traversal vulnerability in a.php in AR Web Content Manager (AWCM) 2.1, when magic_quotes_gpc is disabled, allo

23RISCO

abrir ↗

Referência

CVE-2010-2138

CVE-2010-2138—

Multiple directory traversal vulnerabilities in ProMan 0.1.1 and earlier allow remote attackers to include and execute a

23RISCO

abrir ↗

Referência

CVE-2010-2138

CVE-2010-2138—

Multiple directory traversal vulnerabilities in ProMan 0.1.1 and earlier allow remote attackers to include and execute a

23RISCO

abrir ↗

Referência

CVE-2017-9834

CVE-2017-9834—

SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2017-9869

CVE-2017-9869—

The II_step_one function in layer2.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows rem

23RISCO

abrir ↗

Referência

CVE-2019-6205

CVE-2019-6205—

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Moja

23RISCO

abrir ↗

Referência

CVE-2019-6205

CVE-2019-6205—

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Moja

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ksemail - Local File Inclusion

CVE-2008-1751—webappsphp

Multiple directory traversal vulnerabilities in index.php in Ksemail allow remote attackers to read arbitrary local file

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vlbook 1.21 - Cross-Site Scripting / Local File Inclusion

CVE-2008-2073—webappsphp

Directory traversal vulnerability in include/global.inc.php in Virtual Design Studio vlbook 1.21 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

OneCMS 2.5 - 'install_mod.php' Local File Inclusion

CVE-2008-2482—webappsphp

Directory traversal vulnerability in install_mod.php in insanevisions OneCMS 2.5 allows remote attackers to include and

23RISCO

abrir ↗

Referência✓ VexDay Proof

Panda Security ActiveScan 2.0 (Update) - Remote Buffer Overflow

CVE-2008-3156—remotewindows

The ActiveScan ActiveX Control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to download and

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyPHPsite - Local File Inclusion

CVE-2008-6018—webappsphp

Directory traversal vulnerability in index.php in MyPHPSite, when magic_quotes_gpc is disabled, allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

SineCMS 2.3.5 - Local File Inclusion / Remote Code Execution

CVE-2008-7163—webappsphp

Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and earlier, when register_globals is en

23RISCO

abrir ↗

Referência

CVE-2010-0702

CVE-2010-0702—

SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2010-0702

CVE-2010-0702—

SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2016-1749

CVE-2016-1749—

IOUSBFamily in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a d

23RISCO

abrir ↗

Referência

CVE-2015-7568

CVE-2015-7568—

SQL injection vulnerability in the password recovery feature in Yeager CMS 1.2.1 allows remote attackers to change the a

23RISCO

abrir ↗

Referência

CVE-2015-7568

CVE-2015-7568—

SQL injection vulnerability in the password recovery feature in Yeager CMS 1.2.1 allows remote attackers to change the a

23RISCO

abrir ↗

Referência

CVE-2024-25734

CVE-2024-25734HIGH

An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. The TELNET service prompts for a password only a

41RISCO

abrir ↗

Referência

CVE-2007-3703

CVE-2007-3703—

Stack-based buffer overflow in a certain ActiveX control in sasatl.dll 1.5.0.531 in Zenturi Program Checker (ProgramChec

23RISCO

abrir ↗

Referência

CVE-2013-1803

CVE-2013-1803—

Multiple SQL injection vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2018-0743

CVE-2018-0743—

Windows Subsystem for Linux in Windows 10 version 1703, Windows 10 version 1709, and Windows Server, version 1709 allows

23RISCO

abrir ↗

Referência

CVE-2012-6522

CVE-2012-6522—

Directory traversal vulnerability in the getContent function in codes/wcms.php in w-CMS 2.01 allows remote attackers to

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.