Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.523 exploits

Referência

CVE-2010-0187

CVE-2010-0187—

Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service

28RISCO

abrir ↗

Referência

CVE-2018-0980

CVE-2018-0980—

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

35RISCO

abrir ↗

Referência

CVE-2018-0933

CVE-2018-0933—

ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution,

35RISCO

abrir ↗

Referência✓ VexDay Proof

Hexamail Server 3.0.0.001 - 'pop3' Remote Overflow (PoC)

CVE-2007-4646—doswindows

Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of servi

28RISCO

abrir ↗

Referência

CVE-2014-6437

CVE-2014-6437—

Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices allow remote attackers to obtain sensitive device configurat

28RISCO

abrir ↗

Referência

CVE-2019-1151

CVE-2019-1151HIGH

Microsoft Graphics Remote Code Execution Vulnerability

46RISCO

abrir ↗

Referência

CVE-2009-2601

CVE-2009-2601—

SQL injection vulnerability in the Joomlaequipment (aka JUser or com_juser) component 2.0.4 for Joomla! allows remote at

23RISCO

abrir ↗

Referência

CVE-2004-1423

CVE-2004-1423—

Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth o

28RISCO

abrir ↗

Referência

CVE-2009-2603

CVE-2009-2603—

Multiple SQL injection vulnerabilities in index.php in Escon SupportPortal Pro 3.0 allow remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2017-1084

CVE-2017-1084—

In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections a

28RISCO

abrir ↗

Referência

CVE-2017-1084

CVE-2017-1084—

In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections a

28RISCO

abrir ↗

Referência

CVE-2007-0213

CVE-2007-0213—

Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, wh

35RISCO

abrir ↗

Referência

CVE-2017-6360

CVE-2017-6360—

QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and obtain sensitive information

35RISCO

abrir ↗

Referência

CVE-2019-13605

CVE-2019-13605—

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in

28RISCO

abrir ↗

Referência

CVE-2015-3456

CVE-2015-3456—

The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a

28RISCO

abrir ↗

Referência

CVE-2018-9248

CVE-2018-9248—

FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass via a "Cookie: Name=0admin" header.

28RISCO

abrir ↗

Referência

CVE-2020-28977

CVE-2020-28977—

The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a

28RISCO

abrir ↗

Referência

CVE-2010-4977

CVE-2010-4977—

SQL injection vulnerability in menu.php in the Canteen (com_canteen) component 1.0 for Joomla! allows remote attackers t

43RISCO

abrir ↗

Referência

CVE-2009-2618

CVE-2009-2618—

SQL injection vulnerability in the Surveys (aka NS-Polls) module in MDPro (MD-Pro) 1.083.x allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

sPHPell 1.01 - Multiple Remote File Inclusions

CVE-2007-3522—webappsphp

Multiple PHP remote file inclusion vulnerabilities in sPHPell 1.01 allow remote attackers to execute arbitrary PHP code

35RISCO

abrir ↗

Referência✓ VexDay Proof

EDraw Office Viewer Component 5.3 - 'FtpDownloadFile()' Remote Buffer Overflow

CVE-2007-5257—doswindows

Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Compone

28RISCO

abrir ↗

Referência

CVE-2009-4680

CVE-2009-4680—

SQL injection vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2022-24715

CVE-2022-24715HIGH

Arbitrary code execution for authenticated users in Icinga Web 2

46RISCO

abrir ↗

Referência✓ VexDay Proof

BitchX 1.1 Final - MODE Remote Heap Overflow

CVE-2007-4584—remotelinux

Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in

28RISCO

abrir ↗

Referência

CVE-2014-7186

CVE-2014-7186—

The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial o

35RISCO

abrir ↗

Referência

CVE-2013-5220

CVE-2013-5220—

goform/login on the HOT HOTBOX router with software 2.1.11 allows remote attackers to cause a denial of service (device

23RISCO

abrir ↗

Referência

CVE-2009-3663

CVE-2009-3663—

Format string vulnerability in the h_readrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to

28RISCO

abrir ↗

Referência

CVE-2010-5300

CVE-2010-5300—

Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service (crash

28RISCO

abrir ↗

Referência

CVE-2020-24223

CVE-2020-24223—

Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters.

43RISCO

abrir ↗

Referência

CVE-2013-5318

CVE-2013-5318—

SQL injection vulnerability in Ginkgo CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the rang par

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.