Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.107exploits catalogados

36.322CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

22.573 exploits

Referência

CVE-2014-4912

CVE-2014-4912—

An Arbitrary File Upload issue was discovered in Frog CMS 0.9.5 due to lack of extension validation.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mozilla Firefox 3.0.5 - location.hash Remote Crash

CVE-2008-5715—doswindows

Mozilla Firefox 3.0.5 on Windows Vista allows remote attackers to cause a denial of service (application crash) via Java

23RISCO

abrir ↗

Referência

CVE-2018-7316

CVE-2018-7316—

Arbitrary File Upload exists in the Proclaim 9.1.1 component for Joomla! via a mediafileform action.

23RISCO

abrir ↗

Referência

CVE-2010-1132

CVE-2010-1132—

The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allow

23RISCO

abrir ↗

Referência

CVE-2017-9749

CVE-2017-9749—

The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer

23RISCO

abrir ↗

Referência

CVE-2019-25441

CVE-2019-25441CRITICAL

thesystem 1.0 Command Injection via run_command endpoint

48RISCO

abrir ↗

Referência

CVE-2008-4558

CVE-2008-4558—

Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2023-27524

CVE-2023-27524HIGHsob ataque

Apache Superset: Session validation vulnerability when using provided default SECRET_KEY

100RISCO

abrir ↗

Referência

CVE-2010-1302

CVE-2010-1302—

Directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs (com_dwgraphs) component 1.0 for Joomla! a

38RISCO

abrir ↗

Referência

CVE-2017-14704

CVE-2017-14704—

Multiple unrestricted file upload vulnerabilities in the (1) imageSubmit and (2) proof_submit functions in Claydip Larav

23RISCO

abrir ↗

Referência✓ VexDay Proof

Eggdrop/Windrop 1.6.19 - ctcpbuf Remote Crash

CVE-2009-1789—dosmultiple

mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of

23RISCO

abrir ↗

Referência

CVE-2009-3203

CVE-2009-3203—

SQL injection vulnerability in store.php in AJ Auction Pro OOPD 2.x allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2012-4253

CVE-2012-4253—

Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a

38RISCO

abrir ↗

Referência

CVE-2017-1000499

CVE-2017-1000499—

phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a

23RISCO

abrir ↗

Referência

CVE-2018-8002

CVE-2018-8002—

In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.

23RISCO

abrir ↗

Referência

CVE-2017-9640

CVE-2017-9640—

A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5;

23RISCO

abrir ↗

Referência

CVE-2009-3205

CVE-2009-3205—

SQL injection vulnerability in main.php in CBAuthority allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2006-4131

CVE-2006-4131—

Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, all

23RISCO

abrir ↗

Referência

CVE-2010-4056

CVE-2010-4056—

solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon recei

23RISCO

abrir ↗

Referência

CVE-2017-11664

CVE-2017-11664—

The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory

23RISCO

abrir ↗

Referência

CVE-2023-27524

CVE-2023-27524HIGHsob ataque

Apache Superset: Session validation vulnerability when using provided default SECRET_KEY

100RISCO

abrir ↗

Referência

CVE-2015-3313

CVE-2015-3313—

SQL injection vulnerability in WordPress Community Events plugin before 1.4.

23RISCO

abrir ↗

Referência

CVE-2006-2152

CVE-2006-2152—

PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier, when regist

23RISCO

abrir ↗

Referência

CVE-2017-13262

CVE-2017-13262—

In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. Th

23RISCO

abrir ↗

Referência

CVE-2018-8532

CVE-2018-8532—

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious

28RISCO

abrir ↗

Referência✓ VexDay Proof

Nokia N95-8 browser - 'setAttributeNode' Method Crash

CVE-2009-0649—doshardware

The web browser in Symbian OS on the Nokia N95 cell phone allows remote attackers to cause a denial of service (crash) v

23RISCO

abrir ↗

Referência

CVE-2009-3225

CVE-2009-3225—

Multiple cross-site scripting (XSS) vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro, and possibly Almond Af

23RISCO

abrir ↗

Referência

CVE-2012-0276

CVE-2012-0276—

Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (applicat

23RISCO

abrir ↗

Referência

CVE-2012-0276

CVE-2012-0276—

Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (applicat

23RISCO

abrir ↗

Referência✓ VexDay Proof

SysInfo 1.21 - 'sysinfo.cgi' Remote Command Execution

CVE-2006-1831—webappscgi

Direct static code injection vulnerability in sysinfo.cgi in sysinfo 1.21 and possibly other versions before 2.25 allows

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.