Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.813exploits catalogados

35.788CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.523 exploits

Referência

CVE-2014-0112

CVE-2014-0112—

ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which all

60RISCO

abrir ↗

Referência

CVE-2020-25495

CVE-2020-25495—

A reflected Cross-site scripting (XSS) vulnerability in Xinuo (formerly SCO) Openserver version 5 and 6 allows remote at

38RISCO

abrir ↗

Referência✓ VexDay Proof

Pluxml 0.3.1 - Remote Code Execution

CVE-2007-3432—webappsphp

Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

CA BrightStor ARCserve Backup r11.5 - ActiveX Remote Buffer Overflow

CVE-2008-1472—remotewindows

Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including Br

50RISCO

abrir ↗

Referência

CVE-2010-4401

CVE-2010-4401—

languages.inc.php in DynPG CMS 4.2.0 allows remote attackers to obtain sensitive information via a direct request, which

23RISCO

abrir ↗

Referência

CVE-2022-0848

CVE-2022-0848CRITICAL

OS Command Injection in part-db/part-db

60RISCO

abrir ↗

Referência

CVE-2014-8493

CVE-2014-8493—

ZTE ZXHN H108L with firmware 4.0.0d_ZRQ_GR4 allows remote attackers to modify the CWMP configuration via a crafted reque

23RISCO

abrir ↗

Referência

CVE-2016-1607

CVE-2016-1607—

Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Novell Filr before 2.0 Sec

23RISCO

abrir ↗

Referência

CVE-2019-12900

CVE-2019-12900CRITICAL

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

48RISCO

abrir ↗

Referência

CVE-2019-12900

CVE-2019-12900CRITICAL

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

48RISCO

abrir ↗

Referência

CVE-2017-6823

CVE-2017-6823—

Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter to dapur/ in an app

23RISCO

abrir ↗

Referência

CVE-2017-2491

CVE-2017-2491—

Use after free vulnerability in the String.replace method JavaScriptCore in Apple Safari in iOS before 10.3 allows remot

23RISCO

abrir ↗

Referência

Joomla! Component jLike 1.0 - Information Leak

CVE-2018-6610—webappsphp

Information Leakage exists in the jLike 1.0 component for Joomla! via a task=getUserByCommentId request.

23RISCO

abrir ↗

Referência✓ VexDay Proof

TOSMO/Mambo 1.4.13a - 'absolute_path' Remote File Inclusion

CVE-2007-2317—webappsphp

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and p

23RISCO

abrir ↗

Referência

CVE-2015-3000

CVE-2015-3000—

SysAid Help Desk before 15.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a lar

23RISCO

abrir ↗

Referência

CVE-2019-8404

CVE-2019-8404—

An issue was discovered in Webiness Inventory 2.3. The ProductModel component allows Arbitrary File Upload via a crafted

23RISCO

abrir ↗

Referência

CVE-2019-8404

CVE-2019-8404—

An issue was discovered in Webiness Inventory 2.3. The ProductModel component allows Arbitrary File Upload via a crafted

23RISCO

abrir ↗

Referência

CVE-2017-1000367

CVE-2017-1000367—

Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_

23RISCO

abrir ↗

Referência

CVE-2017-1000367

CVE-2017-1000367—

Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_

23RISCO

abrir ↗

Referência✓ VexDay Proof

FirmWorX 0.1.2 - Multiple Remote File Inclusions

CVE-2007-2891—webappsphp

Multiple PHP remote file inclusion vulnerabilities in FirmWorX 0.1.2 allow remote attackers to execute arbitrary PHP cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

NVR SP2 2.0 'nvUtility.dll 1.0.14.0' - 'DeleteXMLFile()' Insecure Method

CVE-2007-4583—remotewindows

Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in nvUtility.dll 1.0.14.0 in

23RISCO

abrir ↗

Referência

CVE-2008-4178

CVE-2008-4178—

SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and D

23RISCO

abrir ↗

Referência

CVE-2017-14086

CVE-2017-14086—

Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated u

23RISCO

abrir ↗

Referência

CVE-2017-14086

CVE-2017-14086—

Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated u

23RISCO

abrir ↗

Referência

CVE-2016-9813

CVE-2016-9813—

The _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of ser

23RISCO

abrir ↗

Referência

CVE-2009-3226

CVE-2009-3226—

SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Cl

23RISCO

abrir ↗

Referência

CVE-2018-13042

CVE-2018-13042—

The 1Password application 6.8 for Android is affected by a Denial Of Service vulnerability. By starting the activity com

23RISCO

abrir ↗

Referência

CVE-2004-1720

CVE-2004-1720—

The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sens

23RISCO

abrir ↗

Referência

CVE-2014-7910

CVE-2014-7910—

Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service o

23RISCO

abrir ↗

Referência✓ VexDay Proof

RunCMS 1.5.2 - 'debug_show.php' SQL Injection

CVE-2007-2539—webappsphp

The show_files function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive information (file existe

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.