Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.523 exploits

Referência

CVE-2021-30632

CVE-2021-30632HIGHsob ataque

Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap c

83RISCO

abrir ↗

Referência

CVE-2014-5091

CVE-2014-5091—

A vulnerability exits in Status2K 2.5 Server Monitoring Software via the multies parameter to includes/functions.php, wh

28RISCO

abrir ↗

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.10 - Remote Code Execution

CVE-2008-0382—webappsphp

Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via

35RISCO

abrir ↗

Referência

CVE-2009-2634

CVE-2009-2634—

PHP remote file inclusion vulnerability in toolbar_ext.php in the MediaLibrary (com_media_library) component 1.5.3 Basic

23RISCO

abrir ↗

Referência

CVE-2018-15141

CVE-2018-15141—

Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authent

28RISCO

abrir ↗

Referência

CVE-2016-6602

CVE-2016-6602—

ZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which allows context-dependen

50RISCO

abrir ↗

Referência

CVE-2006-3890

CVE-2006-3890—

Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in

28RISCO

abrir ↗

Referência

CVE-2019-3025

CVE-2019-3025—

Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. The supported versi

28RISCO

abrir ↗

Referência

CVE-2015-2825

CVE-2015-2825—

Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPres

28RISCO

abrir ↗

Referência

CVE-2020-35848

CVE-2020-35848—

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.

60RISCO

abrir ↗

Referência

CVE-2010-1350

CVE-2010-1350—

SQL injection vulnerability in the JP Jobs (com_jp_jobs) component 1.4.1 and earlier for Joomla! allows remote attackers

23RISCO

abrir ↗

Referência

OpenKM 6.3.2 < 6.3.7 - Remote Command Execution (Metasploit)

CVE-2019-11445—webappsjsp

OpenKM 6.3.2 through 6.3.7 allows an attacker to upload a malicious JSP file into the /okm:root directories and move tha

28RISCO

abrir ↗

Referência

CVE-2018-1218

CVE-2018-1218—

In Dell EMC NetWorker versions prior to 9.2.1.1, versions prior to 9.1.1.6, 9.0.x, and versions prior to 8.2.4.11, the '

28RISCO

abrir ↗

Referência

CVE-2015-3088

CVE-2015-3088—

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows an

35RISCO

abrir ↗

Referência

CVE-2016-3473

CVE-2016-3473—

Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0,

28RISCO

abrir ↗

Referência

CVE-2013-3526

CVE-2013-3526—

Cross-site scripting (XSS) vulnerability in js/ta_loaded.js.php in the Traffic Analyzer plugin, possibly 3.3.2 and earli

43RISCO

abrir ↗

Referência

CVE-2020-5726

CVE-2020-5726—

The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A rem

23RISCO

abrir ↗

Referência

CVE-2017-10246

CVE-2017-10246—

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: iHelp). Suppo

28RISCO

abrir ↗

Referência

CVE-2021-31933

CVE-2021-31933HIGH

A remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input sanitization of a paramete

46RISCO

abrir ↗

Referência

CVE-2018-4237

CVE-2018-4237—

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS b

43RISCO

abrir ↗

Referência

CVE-2013-6127

CVE-2013-6127—

The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53

28RISCO

abrir ↗

Referência

CVE-2017-11152

CVE-2017-11152—

Directory traversal vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 all

28RISCO

abrir ↗

Referência

CVE-2016-1879

CVE-2016-1879—

The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, w

28RISCO

abrir ↗

Referência

CVE-2016-1879

CVE-2016-1879—

The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, w

28RISCO

abrir ↗

Referência

CVE-2019-1149

CVE-2019-1149HIGH

Microsoft Graphics Remote Code Execution Vulnerability

46RISCO

abrir ↗

Referência

CVE-2019-3810

CVE-2019-3810MEDIUM

A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported vers

38RISCO

abrir ↗

Referência✓ VexDay Proof

Seagull 0.6.3 - 'files' Remote File Disclosure

CVE-2008-0465—webappsphp

Directory traversal vulnerability in optimizer.php in Seagull 0.6.3 allows remote attackers to read arbitrary files via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Comodo AntiVirus 2.0 - 'ExecuteStr()' Remote Command Execution

CVE-2008-0470—remotewindows

A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteS

35RISCO

abrir ↗

Referência

CVE-2019-6973

CVE-2019-6973—

Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server

28RISCO

abrir ↗

Referência

CVE-2019-6973

CVE-2019-6973—

Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.