Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.523 exploits

Referência

CVE-2011-0518

CVE-2011-0518—

Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, allo

43RISCO

abrir ↗

Referência

CVE-2012-3575

CVE-2012-3575—

Unrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress allows remote attacke

28RISCO

abrir ↗

Referência

CVE-2010-2128

CVE-2010-2128—

Directory traversal vulnerability in the JE Quotation Form (com_jequoteform) component 1.0b1 for Joomla! allows remote a

43RISCO

abrir ↗

Referência

CVE-2021-43062

CVE-2021-43062MEDIUM

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version 7.0

53RISCO

abrir ↗

Referência

CVE-2017-5799

CVE-2017-5799—

A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP ve

28RISCO

abrir ↗

Referência

CVE-2018-1821

CVE-2018-1821HIGH

IBM Operational Decision Management 8.5, 8.6, 8.7, 8.8, and 8.9 is vulnerable to a XML External Entity Injection (XXE) a

46RISCO

abrir ↗

Referência

CVE-2010-4719

CVE-2010-4719—

Directory traversal vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to r

43RISCO

abrir ↗

Referência

CVE-2010-4719

CVE-2010-4719—

Directory traversal vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to r

43RISCO

abrir ↗

Referência✓ VexDay Proof

PHPBB2 MODificat 0.2.0 - 'functions.php' Remote File Inclusion

CVE-2007-0656—webappsphp

PHP remote file inclusion vulnerability in includes/functions.php in phpBB2-MODificat 0.2.0 and earlier allows remote at

28RISCO

abrir ↗

Referência

CVE-2020-35729

CVE-2020-35729—

KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter.

60RISCO

abrir ↗

Referência

CVE-2018-8469

CVE-2018-8469—

An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppCont

28RISCO

abrir ↗

Referência

CVE-2018-8463

CVE-2018-8463—

An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppCont

28RISCO

abrir ↗

Referência

CVE-2018-20220

CVE-2018-20220—

An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. While the web interface requires authen

28RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-RESIDENCE 0.7.2 - 'Search' SQL Injection

CVE-2008-0353—webappsphp

SQL injection vulnerability in visualizza_tabelle.php in php-residence 0.7.2 and 1.0 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component ClickHeat 1.0.1 - Multiple Remote File Inclusions

CVE-2008-5793—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats (com_clickheat) component 1.0.1 for

28RISCO

abrir ↗

Referência

CVE-2009-2604

CVE-2009-2604—

Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2018-0934

CVE-2018-0934—

ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution,

35RISCO

abrir ↗

Referência

CVE-2009-3170

CVE-2009-3170—

Stack-based buffer overflow in AIMP2 Audio Converter 2.53 (build 330) and earlier allows remote attackers to cause a den

28RISCO

abrir ↗

Referência

CVE-2012-6429

CVE-2012-6429—

Buffer overflow in the PrepareSync method in the SyncService.dll ActiveX control in Samsung Kies before 2.5.1.12123_2_7

28RISCO

abrir ↗

Referência

CVE-2012-4886

CVE-2012-4886—

Stack-based buffer overflow in wpsio.dll in Kingsoft WPS Office 2012 possibly 8.1.0.3238 allows remote attackers to exec

28RISCO

abrir ↗

Referência

CVE-2012-4886

CVE-2012-4886—

Stack-based buffer overflow in wpsio.dll in Kingsoft WPS Office 2012 possibly 8.1.0.3238 allows remote attackers to exec

28RISCO

abrir ↗

Referência✓ VexDay Proof

nweb2fax 0.2.7 - Multiple Vulnerabilities

CVE-2008-6668—webappsphp

Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary file

43RISCO

abrir ↗

Referência

CVE-2020-8512

CVE-2020-8512—

In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter.

43RISCO

abrir ↗

Referência✓ VexDay Proof

Digital Data Communications - 'RtspVaPgCtrl' Class Remote Buffer Overflow

CVE-2008-0380—remotewindows

Buffer overflow in the Digital Data Communications RtspVaPgCtrl ActiveX control (RtspVapgDecoder.dll 1.1.0.29) allows re

28RISCO

abrir ↗

Referência

CVE-2010-1270

CVE-2010-1270—

SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2023-22855

CVE-2023-22855CRITICAL

Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 808

53RISCO

abrir ↗

Referência

CVE-2019-8341

CVE-2019-8341—

An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where

35RISCO

abrir ↗

Referência

CVE-2023-22855

CVE-2023-22855CRITICAL

Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 808

53RISCO

abrir ↗

Referência

CVE-2019-7666

CVE-2019-7666—

Prima Systems FlexAir, Versions 2.3.38 and prior. The application allows improper authentication using the MD5 hash valu

28RISCO

abrir ↗

Referência

CVE-2018-14634

CVE-2018-14634HIGHsob ataque

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with a

76RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.