Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.523 exploits

Referência

CVE-2019-11932

CVE-2019-11932—

A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version

35RISCO

abrir ↗

Referência

CVE-2019-11932

CVE-2019-11932—

A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version

35RISCO

abrir ↗

Referência

CVE-2019-11374

CVE-2019-11374—

74CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin&c=admin&a=add URI.

23RISCO

abrir ↗

Referência

CVE-2019-11374

CVE-2019-11374—

74CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin&c=admin&a=add URI.

23RISCO

abrir ↗

Referência

CVE-2020-25557

CVE-2020-25557—

In CMSuno 1.6.2, an attacker can inject malicious PHP code as a "username" while changing his/her username & password. A

23RISCO

abrir ↗

Referência

CVE-2020-25538

CVE-2020-25538—

An authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php file in CMSuno 1.6.2 and r

23RISCO

abrir ↗

Referência

CVE-2011-4876

CVE-2011-4876—

Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008;

23RISCO

abrir ↗

Referência

CVE-2009-4623

CVE-2009-4623—

Multiple PHP remote file inclusion vulnerabilities in Advanced Comment System 1.0 allow remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

The Merchant 2.2.0 - 'index.php?show' Remote File Inclusion

CVE-2007-2424—webappsphp

PHP remote file inclusion vulnerability in help/index.php in The Merchant (themerchant) 2.2 allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2018-20580

CVE-2018-20580—

The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java co

23RISCO

abrir ↗

Referência

CVE-2018-20580

CVE-2018-20580—

The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java co

23RISCO

abrir ↗

Referência

CVE-2016-1240

CVE-2016-1240—

The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debia

38RISCO

abrir ↗

Referência

CVE-2016-1240

CVE-2016-1240—

The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debia

38RISCO

abrir ↗

Referência

CVE-2017-14089

CVE-2017-14089—

An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated u

23RISCO

abrir ↗

Referência

CVE-2017-14089

CVE-2017-14089—

An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated u

23RISCO

abrir ↗

Referência

CVE-2014-5086

CVE-2014-5086—

A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrite

23RISCO

abrir ↗

Referência

CVE-2018-9010

CVE-2018-9010—

Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via t

23RISCO

abrir ↗

Referência

CVE-2011-5167

CVE-2011-5167—

Heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control (TTF16.ocx) 6.3.5 Buil

23RISCO

abrir ↗

Referência

CVE-2019-6215

CVE-2019-6215—

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safa

23RISCO

abrir ↗

Referência

CVE-2010-3212

CVE-2010-3212—

SQL injection vulnerability in index.php in Seagull 0.6.7 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simplog 0.9.2 - 's' Remote Command Execution

CVE-2006-1777—webappsphp

Directory traversal vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin Sniplets 1.1.2 - Remote File Inclusion / Cross-Site Scripting / Remote Code Execution

CVE-2008-1060—webappsphp

Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote a

35RISCO

abrir ↗

Referência

CVE-2009-4983

CVE-2009-4983—

Multiple cross-site scripting (XSS) vulnerabilities in Silurus Classifieds 1.0 allow remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência

CVE-2018-15576

CVE-2018-15576—

An issue was discovered in EasyLogin Pro through 1.3.0. Encryptor.php contains an unserialize call that can be exploited

23RISCO

abrir ↗

Referência

CVE-2018-15576

CVE-2018-15576—

An issue was discovered in EasyLogin Pro through 1.3.0. Encryptor.php contains an unserialize call that can be exploited

23RISCO

abrir ↗

Referência✓ VexDay Proof

Neostrada Livebox Router - Remote Network Down (PoC)

CVE-2008-6497—doswindows

The Neostrada Livebox ADSL Router allows remote attackers to cause a denial of service (network outage) via multiple HTT

23RISCO

abrir ↗

Referência

CVE-2008-3408

CVE-2008-3408—

Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attackers to ex

23RISCO

abrir ↗

Referência

CVE-2017-0259

CVE-2017-0259—

The Windows kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703,

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 0.2.149.27 - A HREF Denial of Service

CVE-2008-6998—doswindows

Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.2

23RISCO

abrir ↗

Referência

CVE-2020-11699

CVE-2020-11699—

An issue was discovered in Titan SpamTitan 7.07. Improper validation of the parameter fname on the page certs-x.php woul

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.