Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.523 exploits

Referência

CVE-2015-2459

CVE-2015-2459—

ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,

35RISCO

abrir ↗

Referência

CVE-2024-6039

CVE-2024-6039MEDIUM

Feng Office Workspaces sql injection

33RISCO

abrir ↗

Referência

CVE-2023-36874

CVE-2023-36874HIGHsob ataque

Windows Error Reporting Service Elevation of Privilege Vulnerability

98RISCO

abrir ↗

Referência

CVE-2019-9792

CVE-2019-9792—

The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during

28RISCO

abrir ↗

Referência

CVE-2017-6026

CVE-2017-6026—

A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware ver

35RISCO

abrir ↗

Referência

CVE-2018-13415

CVE-2018-13415—

In Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External En

35RISCO

abrir ↗

Referência

CVE-2018-7300

CVE-2018-7300—

Directory Traversal / Arbitrary File Write / Remote Code Execution in the User.setLanguage method in eQ-3 AG Homematic C

35RISCO

abrir ↗

Referência

CVE-2019-6714

CVE-2019-6714—

An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File Inclusion vulnerability in Po

35RISCO

abrir ↗

Referência

CVE-2013-3120

CVE-2013-3120—

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory co

35RISCO

abrir ↗

Referência

CVE-2017-12718

CVE-2017-12718—

A Classic Buffer Overflow issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version

28RISCO

abrir ↗

Referência

CVE-2014-0050

CVE-2014-0050—

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products,

60RISCO

abrir ↗

Referência

CVE-2009-4542

CVE-2009-4542—

Cross-site scripting (XSS) vulnerability in newticket.php in IsolSoft Support Center 2.5 allows remote attackers to inje

23RISCO

abrir ↗

Referência

CVE-2009-4553

CVE-2009-4553—

Stack-based buffer overflow in iRehearse allows remote attackers to cause a denial of service (application crash) or pos

23RISCO

abrir ↗

Referência

CVE-2018-17254

CVE-2018-17254—

The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter.

60RISCO

abrir ↗

Referência

CVE-2013-2569

CVE-2013-2569—

A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is dis

35RISCO

abrir ↗

Referência

CVE-2017-2986

CVE-2017-2986—

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (F

35RISCO

abrir ↗

Referência

CVE-2017-3078

CVE-2017-3078—

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Text

35RISCO

abrir ↗

Referência✓ VexDay Proof

virtue news - SQL Injection / Cross-Site Scripting

CVE-2009-2019—webappsphp

SQL injection vulnerability in news_detail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2016-0974

CVE-2016-0974—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and

35RISCO

abrir ↗

Referência

CVE-2011-0500

CVE-2011-0500—

Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions;

50RISCO

abrir ↗

Referência

CVE-2009-2650

CVE-2009-2650—

Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a d

50RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual Studio 6.0 - 'PDWizard.ocx' Remote Command Execution

CVE-2007-4891—remotewindows

A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) St

35RISCO

abrir ↗

Referência✓ VexDay Proof

GuppY 4.6.3 - 'index.php?selskin' Remote File Inclusion

CVE-2007-5844—webappsphp

Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to include and execute arbi

23RISCO

abrir ↗

Referência

CVE-2019-10664

CVE-2019-10664—

Domoticz before 4.10578 allows SQL Injection via the idx parameter in CWebServer::GetFloorplanImage in WebServer.cpp.

23RISCO

abrir ↗

Referência

CVE-2011-5052

CVE-2011-5052—

Stack-based buffer overflow in CoCSoft Stream Down 6.8.0 allows remote web servers to execute arbitrary code via a long

43RISCO

abrir ↗

Referência

CVE-2017-16995

CVE-2017-16995—

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial

50RISCO

abrir ↗

Referência

CVE-2017-16995

CVE-2017-16995—

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial

50RISCO

abrir ↗

Referência

CVE-2017-16995

CVE-2017-16995—

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial

50RISCO

abrir ↗

Referência

CVE-2015-0040

CVE-2015-0040—

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co

35RISCO

abrir ↗

Referência

CVE-2017-0561

CVE-2017-0561—

A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.