Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.114exploits catalogados

31.649CVEs com exploração pública

0testados em laboratório

Todos Exploit-DB 22.469Referência 19.810GitHub PoC 13.116VulnCheck XDB 8.069Nuclei 4.188Metasploit 3.462✓ só verificadosrecentes populares risco

19.791 exploits

Referência

CVE-2010-2263

CVE-2010-2263—

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or

60RISCO

abrir ↗

Referência

CVE-2019-0568

CVE-2019-0568—

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

35RISCO

abrir ↗

Referência

CVE-2012-0209

CVE-2012-0209—

Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November

60RISCO

abrir ↗

Referência

CVE-2016-1543

CVE-2016-1543—

The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux a

60RISCO

abrir ↗

Referência

CVE-2016-1543

CVE-2016-1543—

The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux a

60RISCO

abrir ↗

Referência

CVE-2016-1543

CVE-2016-1543—

The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux a

60RISCO

abrir ↗

Referência

CVE-2024-12084

CVE-2024-12084CRITICAL

Rsync: heap buffer overflow in rsync due to improper checksum length handling

70RISCO

abrir ↗

Referência

CVE-2019-6453

CVE-2019-6453—

mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The a

45RISCO

abrir ↗

Referência

CVE-2010-3973

CVE-2010-3973—

The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in

60RISCO

abrir ↗

Referência

CVE-2015-2845

CVE-2015-2845—

The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arb

60RISCO

abrir ↗

Referência

CVE-2015-2845

CVE-2015-2845—

The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arb

60RISCO

abrir ↗

Referência

CVE-2015-2845

CVE-2015-2845—

The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arb

60RISCO

abrir ↗

Referência

CVE-2011-0267

CVE-2011-0267—

Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remote at

60RISCO

abrir ↗

Referência

CVE-2022-29885

CVE-2022-29885—

EncryptInterceptor does not provide complete protection on insecure networks

45RISCO

abrir ↗

Referência

CVE-2014-9727

CVE-2014-9727—

AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter t

60RISCO

abrir ↗

Referência

CVE-2019-19509

CVE-2019-19509—

An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a

60RISCO

abrir ↗

Referência

CVE-2019-19509

CVE-2019-19509—

An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a

60RISCO

abrir ↗

Referência

CVE-2019-19509

CVE-2019-19509—

An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a

60RISCO

abrir ↗

Referência

CVE-2017-8641

CVE-2017-8641—

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve

45RISCO

abrir ↗

Referência

CVE-2013-2751

CVE-2013-2751—

Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator

60RISCO

abrir ↗

Referência

CVE-2013-2751

CVE-2013-2751—

Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator

60RISCO

abrir ↗

Referência

CVE-2019-11231

CVE-2019-11231—

An issue was discovered in GetSimple CMS through 3.3.15. insufficient input sanitation in the theme-edit.php file allows

60RISCO

abrir ↗

Referência

CVE-2014-8684

CVE-2014-8684—

CodeIgniter before 3.0 and Kohana 3.2.3 and earlier and 3.3.x through 3.3.2 make it easier for remote attackers to spoof

60RISCO

abrir ↗

Referência

GOM Player 2.1.6.3499 - 'GomWeb3.dll 1.0.0.12' Remote Overflow

CVE-2007-5779—

Buffer overflow in the GomManager (GomWeb Control) ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Playe

60RISCO

abrir ↗

Referência

CVE-2016-7241

CVE-2016-7241—

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of

45RISCO

abrir ↗

Referência

CVE-2018-20434

CVE-2018-20434—

LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to htm

60RISCO

abrir ↗

Referência

CVE-2018-20434

CVE-2018-20434—

LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to htm

60RISCO

abrir ↗

Referência

CVE-2003-0264

CVE-2003-0264—

Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO arg

60RISCO

abrir ↗

Referência

CVE-2016-3247

CVE-2016-3247—

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of

45RISCO

abrir ↗

Referência

CVE-2019-19985

CVE-2019-19985MEDIUM

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file downloa

70RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.