Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.313exploits catalogados

34.834CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentes populares risco

21.797 exploits

Referência

CVE-2013-6627

CVE-2013-6627—

net/http/http_stream_parser.cc in Google Chrome before 31.0.1650.48 does not properly process HTTP Informational (aka 1x

23RISCO

abrir ↗

Referência

CVE-2013-6627

CVE-2013-6627—

net/http/http_stream_parser.cc in Google Chrome before 31.0.1650.48 does not properly process HTTP Informational (aka 1x

23RISCO

abrir ↗

Referência

CVE-2012-6506

CVE-2012-6506—

Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote atta

23RISCO

abrir ↗

Referência

CVE-2018-10969

CVE-2018-10969—

SQL injection vulnerability in the Pie Register plugin before 3.0.10 for WordPress allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

CDex 1.70b2 (Windows XP SP3) - '.ogg' Local Buffer Overflow

CVE-2009-1039—localwindows

Buffer overflow in CDex 1.70b2 allows remote attackers to execute arbitrary code via a crafted Info header in an Ogg Vor

23RISCO

abrir ↗

Referência

CVE-2014-4170

CVE-2014-4170—

A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restric

28RISCO

abrir ↗

Referência✓ VexDay Proof

X.Org xorg-server 1.1.1-48.13 - Probe for Files (PoC)

CVE-2007-5958—dosmultiple

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Agares phpAutoVideo 2.21 - Local/Remote File Inclusion

CVE-2007-6615—webappsphp

Directory traversal vulnerability in includes/block.php in Agares Media phpAutoVideo 2.21 allows remote attackers to inc

23RISCO

abrir ↗

Referência✓ VexDay Proof

VidiScript (Avatar) - Arbitrary File Upload

CVE-2008-6518—webappsphp

Unrestricted file upload vulnerability in the profile feature in VidiScript allows registered remote authenticated users

23RISCO

abrir ↗

Referência

CVE-2020-12501

CVE-2020-12501CRITICAL

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

48RISCO

abrir ↗

Referência

CVE-2020-12501

CVE-2020-12501CRITICAL

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

48RISCO

abrir ↗

Referência

CVE-2017-8852

CVE-2017-8852—

SAP SAPCAR 721.510 has a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted CAR archive file

23RISCO

abrir ↗

Referência

CVE-2013-2501

CVE-2013-2501—

Cross-site scripting (XSS) vulnerability in the Terillion Reviews plugin before 1.2 for WordPress allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2018-16083

CVE-2018-16083—

An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote

23RISCO

abrir ↗

Referência

CVE-2012-1198

CVE-2012-1198—

base_ag_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allows remote attackers to execute arbitrary code by

23RISCO

abrir ↗

Referência

CVE-2017-13797

CVE-2017-13797—

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud

23RISCO

abrir ↗

Referência

CVE-2016-1769

CVE-2016-1769—

QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (m

23RISCO

abrir ↗

Referência

CVE-2016-1767

CVE-2016-1767—

QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (m

23RISCO

abrir ↗

Referência

CVE-2017-14507

CVE-2017-14507—

Multiple SQL injection vulnerabilities in the Content Timeline plugin 4.4.2 for WordPress allow remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2015-4614

CVE-2015-4614—

Multiple SQL injection vulnerabilities in includes/Function.php in the Easy2Map plugin before 1.2.5 for WordPress allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

WinFTP Server 2.3.0 - 'LIST' (Authenticated) Remote Buffer Overflow

CVE-2009-0351—remotewindows

Stack-based buffer overflow in WFTPSRV.exe in WinFTP 2.3.0 allows remote authenticated users to execute arbitrary code v

23RISCO

abrir ↗

Referência

CVE-2009-3659

CVE-2009-3659—

SQL injection vulnerability in file/stats.php in BS Counter 2.5.3 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Snircd 1.3.4 - 'send_user_mode' Denial of Service

CVE-2008-1501—dosmultiple

The send_user_mode function in s_user.c in (1) Undernet ircu 2.10.12.12 and earlier, (2) snircd 1.3.4 and earlier, and u

23RISCO

abrir ↗

Referência

CVE-2009-3661

CVE-2009-3661—

Multiple SQL injection vulnerabilities in the DJ-Catalog (com_djcatalog) component for Joomla! allow remote attackers to

23RISCO

abrir ↗

Referência

CVE-2009-4581

CVE-2009-4581—

Directory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when magic_quotes_gpc is dis

23RISCO

abrir ↗

Referência

CVE-2010-1109

CVE-2010-1109—

Multiple SQL injection vulnerabilities in index.php in phpMySport 1.4, when magic_quotes_gpc is disabled, allow remote a

23RISCO

abrir ↗

Referência

CVE-2018-11444

CVE-2018-11444—

A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0.

23RISCO

abrir ↗

Referência

CVE-2014-8997

CVE-2014-8997—

Unrestricted file upload vulnerability in the Photo functionality in DigitalVidhya Digi Online Examination System 2.0 al

23RISCO

abrir ↗

Referência

CVE-2018-17375

CVE-2018-17375—

SQL Injection exists in the Music Collection 3.0.3 component for Joomla! via the id parameter.

23RISCO

abrir ↗

Referência

CVE-2018-17375

CVE-2018-17375—

SQL Injection exists in the Music Collection 3.0.3 component for Joomla! via the id parameter.

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.