Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

22.492 exploits

Referência✓ VexDay Proof

Leap CMS 0.1.4 - SQL Injection / Cross-Site Scripting / Arbitrary File Upload

CVE-2009-1614—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web scr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mini-stream ASX to MP3 Converter 3.0.0.7 - '.RAM' Local Buffer Overflow

CVE-2009-1642—localwindows

Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2017-11165

CVE-2017-11165—

dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and configuration information via a d

50RISCO

abrir ↗

Referência✓ VexDay Proof

Soritong MP3 Player 1.0 - Local Buffer Overflow (SEH)

CVE-2009-1643—localwindows

Stack-based buffer overflow in Sorinara Soritong MP3 Player 1.0 allows remote attackers to execute arbitrary code via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sorinara Streaming Audio Player 0.9 - '.pla' Local Stack Overflow (PoC)

CVE-2009-1644—doswindows

Stack-based buffer overflow in Sorinara Streaming Audio Player 0.9 allows remote attackers to execute arbitrary code via

23RISCO

abrir ↗

Referência

CVE-2006-6199

CVE-2006-6199—

Stack-based buffer overflow in BlazeVideo BlazeDVD Standard and Professional 5.0, and possibly earlier, allows remote at

50RISCO

abrir ↗

Referência✓ VexDay Proof

Mini-stream RM-MP3 Converter 3.0.0.7 - '.asx' Local Buffer Overflow

CVE-2009-1645—localwindows

Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

VMware Inc 6.0.0 - 'vielib.dll 2.2.5.42958' Remode Code Execution

CVE-2007-4058—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows

28RISCO

abrir ↗

Referência

CVE-2018-19459

CVE-2018-19459—

Adult Filter 1.0 has a Buffer Overflow via a crafted Black Domain List file.

23RISCO

abrir ↗

Referência

CVE-2024-20353

CVE-2024-20353HIGHsob ataque

A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Fir

93RISCO

abrir ↗

Referência✓ VexDay Proof

The Recipe Script 5 - Authentication Bypass / Database Backup

CVE-2009-1662—webappsphp

Multiple SQL injection vulnerabilities in admin/login.php in Wright Way Services Recipe Script 5 allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2015-7768

CVE-2015-7768—

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD comma

50RISCO

abrir ↗

Referência

CVE-2016-0151

CVE-2016-0151HIGHsob ataqueransomware

The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,

83RISCO

abrir ↗

Referência

CVE-2018-7422

CVE-2018-7422—

A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to re

50RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows XP/2003 - IGMP v3 Denial of Service (MS06-007) (1)

CVE-2006-0021—doswindows

Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang)

35RISCO

abrir ↗

Referência

CVE-2011-5003

CVE-2011-5003—

Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier a

50RISCO

abrir ↗

Referência

CVE-2011-5165

CVE-2011-5165—

Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem

50RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin mygallery 1.4b4 - Remote File Inclusion

CVE-2007-2426—webappsphp

PHP remote file inclusion vulnerability in myfunctions/mygallerybrowser.php in the myGallery 1.4b4 and earlier plugin fo

35RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module cjay content 3 - Remote File Inclusion

CVE-2007-3220—webappsphp

PHP remote file inclusion vulnerability in admin/editor2/spaw_control.class.php in the Cjay Content 3 module for XOOPS a

35RISCO

abrir ↗

Referência✓ VexDay Proof

PHPNews 0.93 - 'format_menue' Remote File Inclusion

CVE-2007-4232—webappsphp

PHP remote file inclusion vulnerability in admin/inc/change_action.php in Andreas Robertz PHPNews 0.93 allows remote att

35RISCO

abrir ↗

Referência

CVE-2015-5477

CVE-2015-5477—

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (

60RISCO

abrir ↗

Referência

CVE-2017-0059

CVE-2017-0059MEDIUMsob ataque

Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via

75RISCO

abrir ↗

Referência

CVE-2017-0059

CVE-2017-0059MEDIUMsob ataque

Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via

75RISCO

abrir ↗

Referência

CVE-2017-0059

CVE-2017-0059MEDIUMsob ataque

Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via

75RISCO

abrir ↗

Referência✓ VexDay Proof

2DayBiz Custom T-shirt Design - SQL Injection / Cross-Site Scripting

CVE-2009-1820—webappsphp

Cross-site scripting (XSS) vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2015-2208

CVE-2015-2208—

The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via she

50RISCO

abrir ↗

Referência

CVE-2015-5477

CVE-2015-5477—

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (

60RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component ArtForms 2.1 b7 - Remote File Inclusion

CVE-2009-1822—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the InterJoomla ArtForms (com_artforms) component 2.1b7 for Joomla

23RISCO

abrir ↗

Referência

CVE-2009-4660

CVE-2009-4660—

Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to

50RISCO

abrir ↗

Referência✓ VexDay Proof

ArcaVir 2009 < 9.4.320X.9 - 'ps_drv.sys' Local Privilege Escalation

CVE-2009-1824—localwindows

The ps_drv.sys kernel driver in ArcaBit ArcaVir 2009 Antivirus Protection 9.4.3201.9 and earlier, ArcaVir 2009 Internet

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.