Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.523 exploits

Referência

CVE-2018-12827

CVE-2018-12827—

Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead t

35RISCO

abrir ↗

Referência

CVE-2011-5170

CVE-2011-5170—

Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code vi

50RISCO

abrir ↗

Referência

CVE-2017-11317

CVE-2017-11317CRITICALsob ataque

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload

100RISCO

abrir ↗

Referência

CVE-2010-5193

CVE-2010-5193—

Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageView

50RISCO

abrir ↗

Referência

CVE-2021-46378

CVE-2021-46378—

DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an unauthenticated remote

35RISCO

abrir ↗

Referência

CVE-2016-7054

CVE-2016-7054—

ChaCha20/Poly1305 heap-buffer-overflow

35RISCO

abrir ↗

Referência

CVE-2017-6026

CVE-2017-6026—

A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware ver

35RISCO

abrir ↗

Referência

CVE-2018-13415

CVE-2018-13415—

In Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External En

35RISCO

abrir ↗

Referência

CVE-2018-7300

CVE-2018-7300—

Directory Traversal / Arbitrary File Write / Remote Code Execution in the User.setLanguage method in eQ-3 AG Homematic C

35RISCO

abrir ↗

Referência

CVE-2019-6714

CVE-2019-6714—

An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File Inclusion vulnerability in Po

35RISCO

abrir ↗

Referência

CVE-2013-3120

CVE-2013-3120—

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory co

35RISCO

abrir ↗

Referência

CVE-2017-12718

CVE-2017-12718—

A Classic Buffer Overflow issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version

28RISCO

abrir ↗

Referência

CVE-2014-0050

CVE-2014-0050—

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products,

60RISCO

abrir ↗

Referência

CVE-2009-4542

CVE-2009-4542—

Cross-site scripting (XSS) vulnerability in newticket.php in IsolSoft Support Center 2.5 allows remote attackers to inje

23RISCO

abrir ↗

Referência

CVE-2009-4553

CVE-2009-4553—

Stack-based buffer overflow in iRehearse allows remote attackers to cause a denial of service (application crash) or pos

23RISCO

abrir ↗

Referência

CVE-2018-9995

CVE-2018-9995—

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISCO

abrir ↗

Referência

CVE-2012-3137

CVE-2012-3137—

The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 all

35RISCO

abrir ↗

Referência

CVE-2019-9041

CVE-2019-9041—

An issue was discovered in ZZZCMS zzzphp V1.6.1. In the inc/zzz_template.php file, the parserIfLabel() function's filter

50RISCO

abrir ↗

Referência

CVE-2014-1683

CVE-2014-1683—

The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248

50RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows - '.doc' Malformed Pointers Denial of Service

CVE-2007-1347—doswindows

Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remot

35RISCO

abrir ↗

Referência

CVE-2009-4962

CVE-2009-4962—

Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a

50RISCO

abrir ↗

Referência

CVE-2017-15663

CVE-2017-15663—

In Flexense Disk Pulse Enterprise v10.1.18, the Control Protocol suffers from a denial of service vulnerability. The att

28RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_school 1.4 - 'classid' SQL Injection

CVE-2009-2014—webappsphp

SQL injection vulnerability in the ComSchool (com_school) component 1.4 for Joomla! allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2009-4574

CVE-2009-4574—

SQL injection vulnerability in country_escorts.php in I-Escorts Directory Script allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

DM Guestbook 0.4.1 - Multiple Local File Inclusions

CVE-2007-5821—webappsphp

Multiple directory traversal vulnerabilities in DM Guestbook 0.4.1 and earlier allow remote attackers to include and exe

23RISCO

abrir ↗

Referência

CVE-2013-3336

CVE-2013-3336—

Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to read arbitrary files

60RISCO

abrir ↗

Referência

CVE-2009-4588

CVE-2009-4588—

Heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control in WindsPly.ocx 3.5.0.0 Beta, 3.0.0.5, and earlie

50RISCO

abrir ↗

Referência✓ VexDay Proof

nuBoard 0.5 - 'site' Remote File Inclusion

CVE-2007-5841—webappsphp

PHP remote file inclusion vulnerability in admin/index.php in nuBoard 0.5 allows remote attackers to execute arbitrary P

35RISCO

abrir ↗

Referência

CVE-2010-5081

CVE-2010-5081—

Stack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to execute arbitrary code vi

50RISCO

abrir ↗

Referência

CVE-2010-5081

CVE-2010-5081—

Stack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to execute arbitrary code vi

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.