Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

22.492 exploits

Referência

CVE-2012-3399

CVE-2012-3399—

Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the

50RISCO

abrir ↗

Referência

CVE-2011-3322

CVE-2011-3322—

Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows

50RISCO

abrir ↗

Referência

CVE-2024-3272

CVE-2024-3272CRITICALsob ataque

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials

100RISCO

abrir ↗

Referência✓ VexDay Proof

WM Downloader - '.m3u' Local Stack Overflow (PoC)

CVE-2009-1327—doswindows

Stack-based buffer overflow in Mini-stream WM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a

23RISCO

abrir ↗

Referência

CVE-2019-6977

CVE-2019-6977—

gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch funct

35RISCO

abrir ↗

Referência

CVE-2019-6977

CVE-2019-6977—

gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch funct

35RISCO

abrir ↗

Referência

CVE-2018-19422

CVE-2018-19422—

/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, beca

50RISCO

abrir ↗

Referência

CVE-2018-19422

CVE-2018-19422—

/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, beca

50RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX - 'mount_smbfs' Local Stack Buffer Overflow

CVE-2007-3876—localosx

Stack-based buffer overflow in SMB in Apple Mac OS X 10.4.11 allows local users to execute arbitrary code via (1) a long

23RISCO

abrir ↗

Referência✓ VexDay Proof

TFTP Server for Windows 1.4 - ST Remote BSS Overflow

CVE-2008-2161—remotewindows

Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execut

50RISCO

abrir ↗

Referência

CVE-2019-0211

CVE-2019-0211HIGHsob ataque

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privilege

83RISCO

abrir ↗

Referência

CVE-2019-0211

CVE-2019-0211HIGHsob ataque

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privilege

83RISCO

abrir ↗

Referência

CVE-2019-0211

CVE-2019-0211HIGHsob ataque

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privilege

83RISCO

abrir ↗

Referência

CVE-2019-0211

CVE-2019-0211HIGHsob ataque

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privilege

83RISCO

abrir ↗

Referência

CVE-2014-5519

CVE-2014-5519—

The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a dev

50RISCO

abrir ↗

Referência

CVE-2014-5519

CVE-2014-5519—

The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a dev

50RISCO

abrir ↗

Referência

CVE-2021-27877

CVE-2021-27877HIGHsob ataqueransomware

An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authenticat

98RISCO

abrir ↗

Referência✓ VexDay Proof

ABC Advertise 1.0 - Admin Password Disclosure

CVE-2009-1550—webappsphp

Zakkis Technology ABC Advertise 1.0 does not properly restrict access to admin.inc.php, which allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2016-7203

CVE-2016-7203—

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a de

35RISCO

abrir ↗

Referência

CVE-2015-6973

CVE-2015-6973—

Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to

35RISCO

abrir ↗

Referência

CVE-2015-6973

CVE-2015-6973—

Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to

35RISCO

abrir ↗

Referência

CVE-2016-7237

CVE-2016-7237—

Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, W

35RISCO

abrir ↗

Referência

CVE-2022-23221

CVE-2022-23221CRITICAL

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IG

60RISCO

abrir ↗

Referência

CVE-2016-10175

CVE-2016-10175—

The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. Thi

50RISCO

abrir ↗

Referência

CVE-2009-3193

CVE-2009-3193—

SQL injection vulnerability in the DigiFolio (com_digifolio) component 1.52 for Joomla! allows remote attackers to execu

23RISCO

abrir ↗

Referência

CVE-2010-4142

CVE-2010-4142—

Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a

50RISCO

abrir ↗

Referência✓ VexDay Proof

RM Downloader 3.0.0.9 - '.RAM' Local Buffer Overflow

CVE-2009-1646—localwindows

Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a

23RISCO

abrir ↗

Referência

CVE-2008-5053

CVE-2008-5053—

PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader (com_rssreader) 1.0 component fo

35RISCO

abrir ↗

Referência

CVE-2011-5165

CVE-2011-5165—

Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem

50RISCO

abrir ↗

Referência✓ VexDay Proof

Shutter 0.1.1 - Multiple SQL Injections

CVE-2009-1650—webappsphp

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.