Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.020exploits catalogados

35.276CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8.604Nuclei 4.251Metasploit 3.473✓ só verificadosrecentes populares risco

22.166 exploits

Referência

CVE-2009-4784

CVE-2009-4784—

SQL injection vulnerability in the Joaktree (com_joaktree) component 1.0 for Joomla! allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2009-4792

CVE-2009-4792—

SQL injection vulnerability in includes/content/member_content.php in BandSite CMS 1.1.4 allows remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2015-4877

CVE-2015-4877—

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.

23RISCO

abrir ↗

Referência

CVE-2015-4877

CVE-2015-4877—

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.

23RISCO

abrir ↗

Referência

CVE-2015-4878

CVE-2015-4878—

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.

23RISCO

abrir ↗

Referência

CVE-2015-4878

CVE-2015-4878—

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.

23RISCO

abrir ↗

Referência

CVE-2015-5119

CVE-2015-5119HIGHsob ataque

Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.

100RISCO

abrir ↗

Referência

CVE-2015-5122

CVE-2015-5122HIGHsob ataque

Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player

100RISCO

abrir ↗

Referência

CVE-2015-5133

CVE-2015-5133—

Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR

35RISCO

abrir ↗

Referência

CVE-2015-5285

CVE-2015-5285—

CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduc

23RISCO

abrir ↗

Referência

CVE-2015-5287

CVE-2015-5287—

The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain perm

38RISCO

abrir ↗

Referência

CVE-2015-5287

CVE-2015-5287—

The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain perm

38RISCO

abrir ↗

Referência

CVE-2015-5452

CVE-2015-5452—

SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2015-5453

CVE-2015-5453—

Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell

50RISCO

abrir ↗

Referência✓ VexDay Proof

Traffic Stats - 'referralUrl.php?offset' SQL Injection

CVE-2007-3840—webappsphp

SQL injection vulnerability in referralUrl.php in Traffic Stats allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2015-5465

CVE-2015-5465—

Silicon Integrated Systems WindowsXP Display Manager (aka VGA Driver Manager and VGA Display Manager) 6.14.10.3930 allow

23RISCO

abrir ↗

Referência

CVE-2015-5465

CVE-2015-5465—

Silicon Integrated Systems WindowsXP Display Manager (aka VGA Driver Manager and VGA Display Manager) 6.14.10.3930 allow

23RISCO

abrir ↗

Referência

CVE-2015-5529

CVE-2015-5529—

Multiple cross-site scripting (XSS) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to injec

23RISCO

abrir ↗

Referência

CVE-2015-5531

CVE-2015-5531—

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unsp

60RISCO

abrir ↗

Referência

CVE-2015-5531

CVE-2015-5531—

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unsp

60RISCO

abrir ↗

Referência

CVE-2015-5531

CVE-2015-5531—

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unsp

60RISCO

abrir ↗

Referência

CVE-2015-5531

CVE-2015-5531—

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unsp

60RISCO

abrir ↗

Referência

CVE-2015-5540

CVE-2015-5540—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu

35RISCO

abrir ↗

Referência✓ VexDay Proof

Data Dynamics ActiveBar - ActiveX 'actbar3.ocx 3.1' Insecure Methods

CVE-2007-3883—remotewindows

The Data Dynamics ActiveBar ActiveX control (actbar3.ocx) 3.2 and earlier allows remote attackers to create or overwrite

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft DirectX SAMI File Parsing - Remote Stack Overflow

CVE-2007-3901—remotewindows

Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for

50RISCO

abrir ↗

Referência✓ VexDay Proof

A-shop 0.70 - Remote File Deletion

CVE-2007-3937—webappsasp

Multiple SQL injection vulnerabilities in A-shop 0.70 and earlier allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows Explorer - '.GIF' Image Denial of Service

CVE-2007-3958—doswindows

Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service via a certa

28RISCO

abrir ↗

Referência

CVE-2010-0249

CVE-2010-0249HIGHsob ataque

Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and S

100RISCO

abrir ↗

Referência

CVE-2015-5736

CVE-2015-5736—

The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel

23RISCO

abrir ↗

Referência

CVE-2015-5754

CVE-2015-5754—

Race condition in runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 all

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.