Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.105exploits catalogados

36.321CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.008VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

22.573 exploits

Referência✓ VexDay Proof

WM Downloader 3.0.0.9 - '.m3u' Universal Stack Overflow

CVE-2009-1327—localwindows

Stack-based buffer overflow in Mini-stream WM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a

23RISCO

abrir ↗

Referência

CVE-2018-13416

CVE-2018-13416—

In Universal Media Server (UMS) 7.1.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML Extern

28RISCO

abrir ↗

Referência

CVE-2021-24946

CVE-2021-24946—

Modern Events Calendar < 6.1.5 - Unauthenticated Blind SQL Injection

60RISCO

abrir ↗

Referência

CVE-2018-6006

CVE-2018-6006—

SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter.

28RISCO

abrir ↗

Referência

CVE-2018-5726

CVE-2018-5726—

MASTER IPCAMERA01 3.3.4.2103 devices allow remote attackers to obtain sensitive information via a crafted HTTP request,

28RISCO

abrir ↗

Referência

CVE-2018-5726

CVE-2018-5726—

MASTER IPCAMERA01 3.3.4.2103 devices allow remote attackers to obtain sensitive information via a crafted HTTP request,

28RISCO

abrir ↗

Referência✓ VexDay Proof

Mini-stream RM-MP3 Converter 3.0.0.7 - '.m3u' Local Stack Overflow (PoC)

CVE-2009-1328—doswindows

Stack-based buffer overflow in Mini-stream RM-MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code vi

23RISCO

abrir ↗

Referência

CVE-2019-0573

CVE-2019-0573—

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,

28RISCO

abrir ↗

Referência

CVE-2020-24881

CVE-2020-24881—

SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.

60RISCO

abrir ↗

Referência

CVE-2013-4694

CVE-2013-4694—

Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial

28RISCO

abrir ↗

Referência

CVE-2013-4694

CVE-2013-4694—

Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial

28RISCO

abrir ↗

Referência

CVE-2009-2441

CVE-2009-2441—

Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject a

23RISCO

abrir ↗

Referência

CVE-2009-4551

CVE-2009-4551—

SQL injection vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência

CVE-2014-3805

CVE-2014-3805—

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a

28RISCO

abrir ↗

Referência

CVE-2020-28337

CVE-2020-28337—

A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to g

28RISCO

abrir ↗

Referência

CVE-2022-30286

CVE-2022-30286—

pyscriptjs (aka PyScript Demonstrator) in PyScript through 2022-05-04 allows a remote user to read Python source code.

28RISCO

abrir ↗

Referência

CVE-2017-8871

CVE-2017-8871—

The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial o

28RISCO

abrir ↗

Referência

CVE-2010-1952

CVE-2010-1952—

Directory traversal vulnerability in the BeeHeard (com_beeheard) and BeeHeard Lite (com_beeheardlite) component 1.0 for

43RISCO

abrir ↗

Referência

CVE-2018-7264

CVE-2018-7264—

The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is prone to multiple out

28RISCO

abrir ↗

Referência

CVE-2009-3308

CVE-2009-3308—

SQL injection vulnerability in show-cat.php in FanUpdate 2.2.1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2016-6175

CVE-2016-6175—

Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via

28RISCO

abrir ↗

Referência

CVE-2013-2679

CVE-2013-2679—

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Linksys E4200 router with firmware 1.0.05 build 7 allow rem

28RISCO

abrir ↗

Referência

CVE-2019-8385

CVE-2019-8385—

An issue was discovered in Thomson Reuters Desktop Extensions 1.9.0.358. An unauthenticated directory traversal and loca

28RISCO

abrir ↗

Referência

CVE-2010-0372

CVE-2010-0372—

SQL injection vulnerability in the Articlemanager (com_articlemanager) component for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2022-45297

CVE-2022-45297CRITICAL

EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter.

48RISCO

abrir ↗

Referência

CVE-2019-16701

CVE-2019-16701—

pfSense through 2.3.4 through 2.4.4-p3 allows Remote Code Injection via a methodCall XML document with a pfsense.exec_ph

28RISCO

abrir ↗

Referência

CVE-2018-16060

CVE-2018-16060—

Mitsubishi Electric Europe B.V. SmartRTU devices allow remote attackers to obtain sensitive information (directory listi

28RISCO

abrir ↗

Referência

CVE-2018-5972

CVE-2018-5972—

SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listin

28RISCO

abrir ↗

Referência

CVE-2009-2450

CVE-2009-2450—

The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Pers

23RISCO

abrir ↗

Referência

CVE-2020-14947

CVE-2020-14947—

OCS Inventory NG 2.7 allows Remote Command Execution via shell metacharacters to require/commandLine/CommandLine.php bec

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.