Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.107exploits catalogados

36.322CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

22.573 exploits

Referência✓ VexDay Proof

MikroTik RouterOS 3.13 - SNMP write (Set request)

CVE-2008-6976—remotehardware

MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System (N

23RISCO

abrir ↗

Referência✓ VexDay Proof

RSSonate - 'xml2rss.php' Remote File Inclusion

CVE-2006-5518—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Christopher Fowler (Rhode Island) RSSonate allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-0458

CVE-2010-0458—

Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2010-0461

CVE-2010-0461—

SQL injection vulnerability in the casino (com_casino) component 1.0 for Joomla! allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2010-0461

CVE-2010-0461—

SQL injection vulnerability in the casino (com_casino) component 1.0 for Joomla! allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2018-10655

CVE-2018-10655—

DLPnpAuditor.exe in DeviceLock Plug and Play Auditor (freeware) 5.72 has a Unicode Buffer Overflow (SEH).

28RISCO

abrir ↗

Referência

CVE-2018-10655

CVE-2018-10655—

DLPnpAuditor.exe in DeviceLock Plug and Play Auditor (freeware) 5.72 has a Unicode Buffer Overflow (SEH).

28RISCO

abrir ↗

Referência

CVE-2010-1046

CVE-2010-1046—

Multiple SQL injection vulnerabilities in index.php in Rostermain 1.1 and earlier allow remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2009-3484

CVE-2009-3484—

Stack-based buffer overflow in Core FTP 2.1 build 1612 allows user-assisted remote attackers to execute arbitrary code v

23RISCO

abrir ↗

Referência

CVE-2014-0995

CVE-2014-0995—

The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of serv

28RISCO

abrir ↗

Referência

CVE-2012-4864

CVE-2012-4864—

Oreans WinLicense 2.1.8.0 allows remote attackers to cause a denial of service (memory corruption and crash) and possibl

23RISCO

abrir ↗

Referência

CVE-2012-4864

CVE-2012-4864—

Oreans WinLicense 2.1.8.0 allows remote attackers to cause a denial of service (memory corruption and crash) and possibl

23RISCO

abrir ↗

Referência

CVE-2015-7250

CVE-2015-7250—

Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE

28RISCO

abrir ↗

Referência

CVE-2012-1933

CVE-2012-1933—

Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when register_global

23RISCO

abrir ↗

Referência

CVE-2018-8729

CVE-2018-8729—

Multiple cross-site scripting (XSS) vulnerabilities in the Activity Log plugin before 2.4.1 for WordPress allow remote a

23RISCO

abrir ↗

Referência

CVE-2013-4094

CVE-2013-4094—

The Key Management feature in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quake 3 Engine Client (Windows x86) - CS_ITEms Remote Overflow

CVE-2006-3401—doswindows_x86

Stack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows remote attackers to cause

23RISCO

abrir ↗

Referência✓ VexDay Proof

Activist Mobilization Platform (AMP) 3.2 - Remote File Inclusion

CVE-2007-1571—webappsphp

PHP remote file inclusion vulnerability in includes/base.php in Radical Designs Activist Mobilization Platform (AMP) 3.2

23RISCO

abrir ↗

Referência✓ VexDay Proof

Scribe 0.2 - PHP Remote Code Execution

CVE-2007-5822—webappsphp

Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inje

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX xnu 1228.3.13 - IPv6-ipcomp Remote kernel Denial of Service (PoC)

CVE-2008-0177—dosmultiple

The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check th

28RISCO

abrir ↗

Referência

CVE-2021-25094

CVE-2021-25094—

Tatsu < 3.3.12 - Unauthenticated RCE

60RISCO

abrir ↗

Referência

CVE-2015-2679

CVE-2015-2679—

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2015-2679

CVE-2015-2679—

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2014-10010

CVE-2014-10010—

Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary file

23RISCO

abrir ↗

Referência

CVE-2010-3906

CVE-2010-3906—

Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Referência

CVE-2009-4775

CVE-2009-4775—

Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of

23RISCO

abrir ↗

Referência

CVE-2009-4775

CVE-2009-4775—

Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of

23RISCO

abrir ↗

Referência

CVE-2017-15035

CVE-2017-15035—

EmTec PyroBatchFTP before 3.18 allows remote servers to cause a denial of service (application crash).

23RISCO

abrir ↗

Referência

CVE-2016-1415

CVE-2016-1415—

Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to cause a denial of servi

23RISCO

abrir ↗

Referência✓ VexDay Proof

ActiveKB 1.5 - Insecure Cookie Handling/Arbitrary Admin Access

CVE-2008-2338—webappsphp

Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth cookie to true when a

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.