Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.313exploits catalogados

34.834CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentes populares risco

21.797 exploits

Referência

CVE-2011-4831

CVE-2011-4831—

Directory traversal vulnerability in webFileBrowser.php in Web File Browser 0.4b14 allows remote authenticated users to

23RISCO

abrir ↗

Referência

CVE-2020-6862

CVE-2020-6862—

V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could lo

23RISCO

abrir ↗

Referência

CVE-2014-9448

CVE-2014-9448—

Buffer overflow in Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 allows remote attackers to execute arbitrary code or

23RISCO

abrir ↗

Referência

CVE-2014-9448

CVE-2014-9448—

Buffer overflow in Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 allows remote attackers to execute arbitrary code or

23RISCO

abrir ↗

Referência

CVE-2018-5985

CVE-2018-5985—

SQL Injection exists in the LiveCRM SaaS Cloud 1.0 component for Joomla! via an r=site/login&company_id= request.

28RISCO

abrir ↗

Referência

CVE-2021-22911

CVE-2021-22911—

A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenti

60RISCO

abrir ↗

Referência

CVE-2017-5344

CVE-2017-5344—

An issue was discovered in dotCMS through 3.6.1. The findChildrenByFilter() function which is called by the web accessib

23RISCO

abrir ↗

Referência

CVE-2013-6796

CVE-2013-6796—

The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, whic

23RISCO

abrir ↗

Referência

CVE-2013-6796

CVE-2013-6796—

The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, whic

23RISCO

abrir ↗

Referência

CVE-2019-15083

CVE-2019-15083—

Default installations of Zoho ManageEngine ServiceDesk Plus 10.0 before 10500 are vulnerable to XSS injected by a workst

23RISCO

abrir ↗

Referência

CVE-2018-5988

CVE-2018-5988—

SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobile_preview.php or index.php.

28RISCO

abrir ↗

Referência

CVE-2020-37125

CVE-2020-37125CRITICAL

Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution

48RISCO

abrir ↗

Referência

CVE-2014-4018

CVE-2014-4018—

The ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK has a default password of admin for the admin account, which

23RISCO

abrir ↗

Referência

CVE-2014-4018

CVE-2014-4018—

The ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK has a default password of admin for the admin account, which

23RISCO

abrir ↗

Referência

CVE-2017-2457

CVE-2017-2457—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issu

23RISCO

abrir ↗

Referência

CVE-2011-5006

CVE-2011-5006—

Stack-based buffer overflow in QQPlayer 3.2.845 allows remote attackers to execute arbitrary code via a crafted PnSize v

23RISCO

abrir ↗

Referência

ManageEngine Service Desk 10.0 - Cross-Site Scripting

CVE-2019-15083—webappsjava

Default installations of Zoho ManageEngine ServiceDesk Plus 10.0 before 10500 are vulnerable to XSS injected by a workst

23RISCO

abrir ↗

Referência

CVE-2015-7986

CVE-2015-7986—

The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a deni

23RISCO

abrir ↗

Referência

CVE-2010-0390

CVE-2010-0390—

Unrestricted file upload vulnerability in maxImageUpload/index.php in PHP F1 Max's Image Uploader 1.0, when Apache is no

23RISCO

abrir ↗

Referência

CVE-2010-4863

CVE-2010-4863—

Cross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2012-4250

CVE-2012-4250—

Stack-based buffer overflow in the RequestScreenOptimization function in the XProcessControl.ocx ActiveX control in msls

23RISCO

abrir ↗

Referência

CVE-2015-4594

CVE-2015-4594—

eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability. When authenticating a user, the a

23RISCO

abrir ↗

Referência

CVE-2015-4594

CVE-2015-4594—

eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability. When authenticating a user, the a

23RISCO

abrir ↗

Referência

CVE-2019-12616

CVE-2019-12616—

An issue was discovered in phpMyAdmin before 4.9.0. A vulnerability was found that allows an attacker to trigger a CSRF

28RISCO

abrir ↗

Referência

CVE-2023-28288

CVE-2023-28288HIGH

Microsoft SharePoint Server Spoofing Vulnerability

41RISCO

abrir ↗

Referência

CVE-2018-0952

CVE-2018-0952—

An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-0802

CVE-2010-0802—

SQL injection vulnerability in index.php in (nv2) Awards 1.1.0, a modification for Invision Power Board, allows remote a

23RISCO

abrir ↗

Referência

CVE-2012-2593

CVE-2012-2593—

Cross-site scripting (XSS) vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Moodle < 1.6.9/1.7.7/1.8.9/1.9.5 - File Disclosure

CVE-2009-1171—webappsphp

The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assist

23RISCO

abrir ↗

Referência

CVE-2016-2208

CVE-2016-2208—

The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute a

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.