Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.240exploits catalogados

34.800CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.796GitHub PoC 13.837VulnCheck XDB 8.460Nuclei 4.237Metasploit 3.467✓ só verificadosrecentes populares risco

21.796 exploits

Referência

CVE-2010-4181

CVE-2010-4181—

Directory traversal vulnerability in Yaws 1.89 allows remote attackers to read arbitrary files via ..\ (dot dot backslas

23RISCO

abrir ↗

Referência

CVE-2017-9640

CVE-2017-9640—

A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5;

23RISCO

abrir ↗

Referência✓ VexDay Proof

DB Top Sites 1.0 - 'index.php?u' Local File Inclusion

CVE-2009-2110—webappsphp

Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic_quotes_gpc is disabled, allow remote attack

23RISCO

abrir ↗

Referência

CVE-2006-4131

CVE-2006-4131—

Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, all

23RISCO

abrir ↗

Referência

CVE-2009-3150

CVE-2009-3150—

SQL injection vulnerability in index.php in Multi Website 1.5 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2010-4056

CVE-2010-4056—

solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon recei

23RISCO

abrir ↗

Referência

CVE-2017-11664

CVE-2017-11664—

The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory

23RISCO

abrir ↗

Referência

CVE-2015-3313

CVE-2015-3313—

SQL injection vulnerability in WordPress Community Events plugin before 1.4.

23RISCO

abrir ↗

Referência

CVE-2015-3313

CVE-2015-3313—

SQL injection vulnerability in WordPress Community Events plugin before 1.4.

23RISCO

abrir ↗

Referência

CVE-2014-8393

CVE-2014-8393—

DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel

23RISCO

abrir ↗

Referência

CVE-2006-2152

CVE-2006-2152—

PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier, when regist

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nokia N95-8 browser - 'setAttributeNode' Method Crash

CVE-2009-0649—doshardware

The web browser in Symbian OS on the Nokia N95 cell phone allows remote attackers to cause a denial of service (crash) v

23RISCO

abrir ↗

Referência

CVE-2017-13262

CVE-2017-13262—

In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. Th

23RISCO

abrir ↗

Referência

CVE-2017-13262

CVE-2017-13262—

In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. Th

23RISCO

abrir ↗

Referência

CVE-2018-8532

CVE-2018-8532—

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious

28RISCO

abrir ↗

Referência

CVE-2017-14087

CVE-2017-14087—

A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Ho

23RISCO

abrir ↗

Referência

CVE-2017-14087

CVE-2017-14087—

A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Ho

23RISCO

abrir ↗

Referência

CVE-2012-0276

CVE-2012-0276—

Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (applicat

23RISCO

abrir ↗

Referência

CVE-2012-0276

CVE-2012-0276—

Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (applicat

23RISCO

abrir ↗

Referência

CVE-2010-1930

CVE-2010-1930—

Off-by-one error in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allows remote attackers to cause a denial of service (dae

23RISCO

abrir ↗

Referência✓ VexDay Proof

SysInfo 1.21 - 'sysinfo.cgi' Remote Command Execution

CVE-2006-1831—webappscgi

Direct static code injection vulnerability in sysinfo.cgi in sysinfo 1.21 and possibly other versions before 2.25 allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple Web Content Management System - SQL Injection

CVE-2007-0093—webappsphp

SQL injection vulnerability in page.php in Simple Web Content Management System allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

OllyDBG 1.10 and ImpREC 1.7f - Export Name Buffer Overflow

CVE-2008-3148—localwindows

Stack-based buffer overflow in (1) OllyDBG 1.10 and (2) ImpREC 1.7f allows user-assisted attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2008-1436

CVE-2008-1436—

Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) Ne

35RISCO

abrir ↗

Referência

CVE-2020-27930

CVE-2020-27930HIGHsob ataque

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, wat

76RISCO

abrir ↗

Referência

CVE-2014-8835

CVE-2014-8835—

The xpc_data_get_bytes function in libxpc in Apple OS X before 10.10.2 does not verify that a dictionary's Attributes ke

23RISCO

abrir ↗

Referência

CVE-2014-8835

CVE-2014-8835—

The xpc_data_get_bytes function in libxpc in Apple OS X before 10.10.2 does not verify that a dictionary's Attributes ke

23RISCO

abrir ↗

Referência

CVE-2016-10504

CVE-2016-10504—

Heap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG before 2.2.0 allows remote

23RISCO

abrir ↗

Referência

CVE-2022-24263

CVE-2022-24263—

Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-m

23RISCO

abrir ↗

Referência

CVE-2018-8533

CVE-2018-8533—

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious X

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.