Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.765exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.703Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.492 exploits

Referência

CVE-2016-0974

CVE-2016-0974—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and

35RISCO

abrir ↗

Referência

CVE-2011-0500

CVE-2011-0500—

Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions;

50RISCO

abrir ↗

Referência

CVE-2009-2650

CVE-2009-2650—

Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a d

50RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual Studio 6.0 - 'PDWizard.ocx' Remote Command Execution

CVE-2007-4891—remotewindows

A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) St

35RISCO

abrir ↗

Referência✓ VexDay Proof

GuppY 4.6.3 - 'index.php?selskin' Remote File Inclusion

CVE-2007-5844—webappsphp

Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to include and execute arbi

23RISCO

abrir ↗

Referência

CVE-2019-10664

CVE-2019-10664—

Domoticz before 4.10578 allows SQL Injection via the idx parameter in CWebServer::GetFloorplanImage in WebServer.cpp.

23RISCO

abrir ↗

Referência

CVE-2015-0064

CVE-2015-0064—

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applica

28RISCO

abrir ↗

Referência

CVE-2019-1405

CVE-2019-1405HIGHsob ataqueransomware

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows

91RISCO

abrir ↗

Referência

CVE-2015-1158

CVE-2015-1158—

The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-va

28RISCO

abrir ↗

Referência

CVE-2002-0082

CVE-2002-0082—

The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly

28RISCO

abrir ↗

Referência

CVE-2018-7182

CVE-2018-7182—

The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-

28RISCO

abrir ↗

Referência

CVE-2018-7182

CVE-2018-7182—

The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-

28RISCO

abrir ↗

Referência

CVE-2015-2431

CVE-2015-2431—

Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lyn

28RISCO

abrir ↗

Referência

CVE-2016-0999

CVE-2016-0999—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows

28RISCO

abrir ↗

Referência

CVE-2018-16059

CVE-2018-16059—

Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename par

43RISCO

abrir ↗

Referência

CVE-2016-0997

CVE-2016-0997—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows

28RISCO

abrir ↗

Referência✓ VexDay Proof

PHPCOIN 1.2.3 - 'session_set.php' Remote File Inclusion

CVE-2006-4424—webappsphp

PHP remote file inclusion vulnerability in coin_includes/constants.php in phpCOIN 1.2.3 allows remote attackers to execu

23RISCO

abrir ↗

Referência

CVE-2021-37589

CVE-2021-37589—

Virtua Cobranca before 12R allows SQL Injection on the login page.

50RISCO

abrir ↗

Referência

CVE-2013-2574

CVE-2013-2574—

An Access vulnerability exists in FOSCAM IP Camera FI8620 due to insufficient access restrictions in the /tmpfs/ and /lo

28RISCO

abrir ↗

Referência

CVE-2013-2574

CVE-2013-2574—

An Access vulnerability exists in FOSCAM IP Camera FI8620 due to insufficient access restrictions in the /tmpfs/ and /lo

28RISCO

abrir ↗

Referência

CVE-2016-8870

CVE-2016-8870—

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before

60RISCO

abrir ↗

Referência

CVE-2009-1699

CVE-2009-1699—

The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for i

28RISCO

abrir ↗

Referência

CVE-2017-11517

CVE-2017-11517—

Stack-based buffer overflow in GCoreServer.exe in the server in Geutebrueck Gcore 1.3.8.42 and 1.4.2.37 allows remote at

43RISCO

abrir ↗

Referência

CVE-2019-1150

CVE-2019-1150HIGH

Microsoft Graphics Remote Code Execution Vulnerability

46RISCO

abrir ↗

Referência

CVE-2019-1150

CVE-2019-1150HIGH

Microsoft Graphics Remote Code Execution Vulnerability

46RISCO

abrir ↗

Referência

CVE-2019-7274

CVE-2019-7274—

Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.

28RISCO

abrir ↗

Referência

CVE-2018-12327

CVE-2018-12327—

Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or es

28RISCO

abrir ↗

Referência

CVE-2024-6366

CVE-2024-6366CRITICAL

User Profile Builder < 3.11.8 - Unauthenticated Media Upload

68RISCO

abrir ↗

Referência

CVE-2024-12847

CVE-2024-12847CRITICAL

NETGEAR DGN setup.cgi OS Command Injection

68RISCO

abrir ↗

Referência

CVE-2024-12847

CVE-2024-12847CRITICAL

NETGEAR DGN setup.cgi OS Command Injection

68RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.