Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

22.492 exploits

Referência

CVE-2017-13772

CVE-2017-13772—

Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated

35RISCO

abrir ↗

Referência

CVE-2017-8734

CVE-2017-8734—

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arb

35RISCO

abrir ↗

Referência

CVE-2013-1359

CVE-2013-1359—

An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5

60RISCO

abrir ↗

Referência

CVE-2023-27823

CVE-2023-27823CRITICAL

An authentication bypass in Optoma 1080PSTX C02 allows an attacker to access the administration console without valid cr

60RISCO

abrir ↗

Referência✓ VexDay Proof

GForge < 4.6b2 - 'skill_delete' SQL Injection

CVE-2007-4966—webappsphp

SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2010-2309

CVE-2010-2309—

Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary cod

50RISCO

abrir ↗

Referência

CVE-2009-2639

CVE-2009-2639—

SQL injection vulnerability in admin.php in MRCGIGUY The Ticket System 2.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2017-14535

CVE-2017-14535—

trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php

50RISCO

abrir ↗

Referência

CVE-2015-8256

CVE-2015-8256—

Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras.

35RISCO

abrir ↗

Referência

CVE-2015-8256

CVE-2015-8256—

Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras.

35RISCO

abrir ↗

Referência

CVE-2019-12518

CVE-2019-12518—

Anviz CrossChex access control management software 4.3.8.0 and 4.3.12 is vulnerable to a buffer overflow vulnerability.

50RISCO

abrir ↗

Referência

CVE-2020-15050

CVE-2020-15050—

An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2. Remote attackers can read arbitrary fi

50RISCO

abrir ↗

Referência

CVE-2015-5131

CVE-2015-5131—

Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR

35RISCO

abrir ↗

Referência

CVE-2015-5132

CVE-2015-5132—

Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR

35RISCO

abrir ↗

Referência

CVE-2023-6623

CVE-2023-6623CRITICAL

Essential Blocks < 4.4.3 - Unauthenticated Local File Inclusion

75RISCO

abrir ↗

Referência✓ VexDay Proof

eLitius 1.0 - Remote Command Execution

CVE-2009-1659—webappsphp

Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote attackers to bypass intende

23RISCO

abrir ↗

Referência

CVE-2018-0770

CVE-2018-0770—

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitra

45RISCO

abrir ↗

Referência

CVE-2017-1000083

CVE-2017-1000083—

backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to e

50RISCO

abrir ↗

Referência

CVE-2018-8096

CVE-2018-8096—

Datalust Seq before 4.2.605 is vulnerable to Authentication Bypass (with the attacker obtaining admin access) via '"Name

35RISCO

abrir ↗

Referência

CVE-2009-2655

CVE-2009-2655—

mshtml.dll in Microsoft Internet Explorer 7 and 8 on Windows XP SP3 allows remote attackers to cause a denial of service

28RISCO

abrir ↗

Referência

CVE-2023-1133

CVE-2023-1133CRITICAL

CVE-2023-1133

75RISCO

abrir ↗

Referência

CVE-2009-3494

CVE-2009-3494—

Multiple SQL injection vulnerabilities in index.php in T-HTB Manager 0.5, when magic_quotes_gpc is disabled, allow remot

23RISCO

abrir ↗

Referência

CVE-2009-2692

CVE-2009-2692—

The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socke

43RISCO

abrir ↗

Referência

CVE-2009-2779

CVE-2009-2779—

SQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2009-2781

CVE-2009-2781—

SQL injection vulnerability in forum.php in Arab Portal 2.x, when magic_quotes_gpc is disabled, allows remote authentica

23RISCO

abrir ↗

Referência

CVE-2009-2891

CVE-2009-2891—

SQL injection vulnerability in list.php in PHP Scripts Now Riddles allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2009-3590

CVE-2009-3590—

SQL injection vulnerability in showcat.php in VS PANEL 7.3.6 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2019-17503

CVE-2019-17503—

An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. An unauthenticated user can access /osm/REG

50RISCO

abrir ↗

Referência

CVE-2020-6010

CVE-2020-6010—

LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection

50RISCO

abrir ↗

Referência

CVE-2015-5134

CVE-2015-5134—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.