Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.813exploits catalogados

35.788CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.523 exploits

Referência

CVE-2010-0279

CVE-2010-0279—

Unrestricted file upload vulnerability in upload.php in BTS-GI Read excel 1.1 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin Sniplets 1.1.2 - Remote File Inclusion / Cross-Site Scripting / Remote Code Execution

CVE-2008-1061—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allow remote at

38RISCO

abrir ↗

Referência

CVE-2018-16299

CVE-2018-16299—

The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php file parameter.

50RISCO

abrir ↗

Referência

CVE-2018-16299

CVE-2018-16299—

The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php file parameter.

50RISCO

abrir ↗

Referência✓ VexDay Proof

Najdi.si Toolbar - ActiveX Remote Buffer Overflow (PoC)

CVE-2008-7103—doswindows

Stack-based buffer overflow in an ActiveX control in najdisitoolbar.dll in Najdi.si Toolbar 2.0.4.1 allows remote attack

23RISCO

abrir ↗

Referência

CVE-2021-40352

CVE-2021-40352—

OpenEMR 6.0.0 has a pnotes_print.php?noteid= Insecure Direct Object Reference vulnerability via which an attacker can re

23RISCO

abrir ↗

Referência

CVE-2009-3058

CVE-2009-3058—

Stack-based buffer overflow in akPlayer 1.9.0 allows remote attackers to execute arbitrary code via a long string in a .

23RISCO

abrir ↗

Referência

CVE-2009-3059

CVE-2009-3059—

Multiple SQL injection vulnerabilities in Joker Board (aka JBoard) 2.0 and earlier allow remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Download Accelerator Plus DAP 8.6 - 'AniGIF.ocx' Buffer Overflow (PoC)

CVE-2008-3702—doswindows

Multiple stack-based buffer overflows in the Animation GIF ActiveX control in JComSoft AniGIF.ocx 1.12 and 2.47, as used

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple iTunes 8.0.2.20/QuickTime 7.5.5 - '.mov' Multiple Off By Overflows (PoC)

CVE-2008-5406—doswindows

Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denia

23RISCO

abrir ↗

Referência✓ VexDay Proof

Phoenician Casino FlashAX - ActiveX Remote Code Execution

CVE-2008-5691—remotewindows

Heap-based buffer overflow in the Phoenician Casino FlashAX ActiveX control 1.0.0.7 allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2017-3546

CVE-2017-3546—

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChann

23RISCO

abrir ↗

Referência

CVE-2019-19516

CVE-2019-19516—

Intelbras WRN 150 1.0.18 devices allow CSRF via GO=system_password.asp to the goform/SysToolChangePwd URI to change a pa

23RISCO

abrir ↗

Referência

CVE-2016-0145

CVE-2016-0145—

The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

35RISCO

abrir ↗

Referência

CVE-2017-11346

CVE-2017-11346—

Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors invo

35RISCO

abrir ↗

Referência

CVE-2019-19516

CVE-2019-19516—

Intelbras WRN 150 1.0.18 devices allow CSRF via GO=system_password.asp to the goform/SysToolChangePwd URI to change a pa

23RISCO

abrir ↗

Referência

CVE-2011-2506

CVE-2011-2506—

setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restric

23RISCO

abrir ↗

Referência

CVE-2012-1011

CVE-2012-1011—

actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restrictions

23RISCO

abrir ↗

Referência

CVE-2022-2840

CVE-2022-2840—

Zephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLi

28RISCO

abrir ↗

Referência

CVE-2012-1661

CVE-2012-1661—

ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, wh

28RISCO

abrir ↗

Referência

CVE-2012-1661

CVE-2012-1661—

ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, wh

28RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component SimpleBoard 1.0.3 - 'catid' SQL Injection

CVE-2008-1077—webappsphp

SQL injection vulnerability in index.php in the Simpleboard (com_simpleboard) 1.0.3 Stable component for Mambo and Jooml

23RISCO

abrir ↗

Referência

CVE-2009-3249

CVE-2009-3249—

Multiple directory traversal vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

osTicket 1.12 - Formula Injection

CVE-2019-14749—webappsphp

An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. CSV (aka Formula) injection exists in the ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! 1.5.12 TinyMCE - Remote Code Execution (via Arbitrary File Upload)

CVE-2011-4906—webappsphp

Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP code execution.

23RISCO

abrir ↗

Referência

CVE-2016-4309

CVE-2016-4309—

Session fixation vulnerability in Symphony CMS 2.6.7, when session.use_only_cookies is disabled, allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2012-6050

CVE-2012-6050—

The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service (CPU consu

23RISCO

abrir ↗

Referência

CVE-2009-2535

CVE-2009-2535—

Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and Thunderbird allow remote attackers to cause a denia

23RISCO

abrir ↗

Referência

CVE-2009-3705

CVE-2009-3705—

PHP remote file inclusion vulnerability in debugger.php in Achievo before 1.4.0 allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2017-6553

CVE-2017-6553—

Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.