Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.523 exploits

Referência

CVE-2012-4284

CVE-2012-4284—

A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the se

50RISCO

abrir ↗

Referência

CVE-2012-4284

CVE-2012-4284—

A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the se

50RISCO

abrir ↗

Referência

CVE-2017-15049

CVE-2017-15049—

The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when c

28RISCO

abrir ↗

Referência

CVE-2017-15049

CVE-2017-15049—

The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when c

28RISCO

abrir ↗

Referência

CVE-2019-1912

CVE-2019-1912CRITICAL

Cisco Small Business 220 Series Smart Switches Authentication Bypass Vulnerability

53RISCO

abrir ↗

Referência

CVE-2019-5722

CVE-2019-5722—

An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Due to a lack of user input validation in parameter handl

23RISCO

abrir ↗

Referência

CVE-2010-5278

CVE-2010-5278—

Directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl, and possi

43RISCO

abrir ↗

Referência

CVE-2009-2574

CVE-2009-2574—

index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via

23RISCO

abrir ↗

Referência

CVE-2013-6810

CVE-2013-6810—

The server in Brocade Network Advisor before 12.1.0, as used in EMC Connectrix Manager Converged Network Edition (CMCNE)

28RISCO

abrir ↗

Referência

CVE-2013-6810

CVE-2013-6810—

The server in Brocade Network Advisor before 12.1.0, as used in EMC Connectrix Manager Converged Network Edition (CMCNE)

28RISCO

abrir ↗

Referência

CVE-2010-0764

CVE-2010-0764—

SQL injection vulnerability in index.php in KuwaitPHP eSmile allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2010-0765

CVE-2010-0765—

fipsForum 2.6 stores sensitive information under the web root with insufficient access control, which allows remote atta

23RISCO

abrir ↗

Referência

CVE-2017-3730

CVE-2017-3730—

Bad (EC)DHE parameters cause a client crash

35RISCO

abrir ↗

Referência

CVE-2019-25224

CVE-2019-25224CRITICAL

WP Database Backup < 5.2 - Unauthenticated OS Command Injection

68RISCO

abrir ↗

Referência

CVE-2018-15140

CVE-2018-15140—

Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authent

28RISCO

abrir ↗

Referência

CVE-2018-13784

CVE-2018-13784—

PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfi

28RISCO

abrir ↗

Referência

CVE-2018-13784

CVE-2018-13784—

PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfi

28RISCO

abrir ↗

Referência

CVE-2012-4412

CVE-2012-4412—

Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-depende

28RISCO

abrir ↗

Referência

CVE-2009-4615

CVE-2009-4615—

SQL injection vulnerability in review.php in MYRE Holiday Rental Manager allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência

CVE-2020-15492

CVE-2020-15492—

An issue was discovered in INNEO Startup TOOLS 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804. The sut_srv.exe we

28RISCO

abrir ↗

Referência

CVE-2017-6315

CVE-2017-6315—

Astaro Security Gateway (aka ASG) 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx

28RISCO

abrir ↗

Referência

CVE-2016-1713

CVE-2016-1713—

Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger

43RISCO

abrir ↗

Referência

CVE-2010-0951

CVE-2010-0951—

SQL injection vulnerability in go_target.php in dev4u CMS allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Agares phpAutoVideo 2.21 - 'articlecat' SQL Injection (1)

CVE-2008-0262—webappsphp

SQL injection vulnerability in includes/articleblock.php in Agares PhpAutoVideo 2.21 allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2019-7262

CVE-2019-7262—

Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).

28RISCO

abrir ↗

Referência

CVE-2011-0501

CVE-2011-0501—

Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions all

28RISCO

abrir ↗

Referência

CVE-2011-4362

CVE-2011-4362—

Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lighttp

28RISCO

abrir ↗

Referência

CVE-2015-4666

CVE-2015-4666—

Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attack

43RISCO

abrir ↗

Referência

CVE-2015-4666

CVE-2015-4666—

Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attack

43RISCO

abrir ↗

Referência

CVE-2020-11749

CVE-2020-11749—

Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.