Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.813exploits catalogados

35.788CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.549 exploits

Referência

CVE-2017-6984

CVE-2017-6984—

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iTun

23RISCO

abrir ↗

Referência

CVE-2012-5907

CVE-2012-5907—

Directory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2014-3806

CVE-2014-3806—

Directory traversal vulnerability in cgi-bin/help/doIt.cgi in VMTurbo Operations Manager before 4.6 allows remote attack

23RISCO

abrir ↗

Referência

CVE-2014-3806

CVE-2014-3806—

Directory traversal vulnerability in cgi-bin/help/doIt.cgi in VMTurbo Operations Manager before 4.6 allows remote attack

23RISCO

abrir ↗

Referência

CVE-2013-2619

CVE-2013-2619—

Directory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary files via a .. (dot dot

23RISCO

abrir ↗

Referência

CVE-2013-2619

CVE-2013-2619—

Directory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary files via a .. (dot dot

23RISCO

abrir ↗

Referência

CVE-2014-10010

CVE-2014-10010—

Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary file

23RISCO

abrir ↗

Referência

CVE-2024-13985

CVE-2024-13985CRITICAL

Dahua EIMS capture_handle.action RCE

68RISCO

abrir ↗

Referência

CVE-2024-13985

CVE-2024-13985CRITICAL

Dahua EIMS capture_handle.action RCE

68RISCO

abrir ↗

Referência

CVE-2024-13985

CVE-2024-13985CRITICAL

Dahua EIMS capture_handle.action RCE

68RISCO

abrir ↗

Referência

CVE-2010-4774

CVE-2010-4774—

SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2017-15920

CVE-2017-15920—

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer

23RISCO

abrir ↗

Referência

CVE-2017-15920

CVE-2017-15920—

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer

23RISCO

abrir ↗

Referência

CVE-2013-2225

CVE-2013-2225—

inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _pr

23RISCO

abrir ↗

Referência

CVE-2014-4874

CVE-2014-4874—

BMC Track-It! 11.3.0.355 allows remote authenticated users to read arbitrary files by visiting the TrackItWeb/Attachment

23RISCO

abrir ↗

Referência

CVE-2020-7384

CVE-2020-7384HIGH

Client-Side Command Injection in Rapid7 Metasploit

68RISCO

abrir ↗

Referência

CVE-2018-10258

CVE-2018-10258—

A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges to

23RISCO

abrir ↗

Referência

CVE-2018-10258

CVE-2018-10258—

A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges to

23RISCO

abrir ↗

Referência

CVE-2017-6549

CVE-2017-6549—

Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W

23RISCO

abrir ↗

Referência

CVE-2020-11803

CVE-2020-11803—

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with th

23RISCO

abrir ↗

Referência

CVE-2019-17124

CVE-2019-17124—

Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.

28RISCO

abrir ↗

Referência✓ VexDay Proof

Tumbleweed SecureTransport 4.6.1 FileTransfer - ActiveX Buffer Overflow

CVE-2008-1724—remotewindows

Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX cont

50RISCO

abrir ↗

Referência

CVE-2015-6402

CVE-2015-6402—

Cross-site scripting (XSS) vulnerability in the management interface on Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11,

23RISCO

abrir ↗

Referência

CVE-2020-7384

CVE-2020-7384HIGH

Client-Side Command Injection in Rapid7 Metasploit

68RISCO

abrir ↗

Referência

CVE-2010-4800

CVE-2010-4800—

SQL injection vulnerability in doadd.php in BaconMap 1.0 allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência

CVE-2024-5655

CVE-2024-5655CRITICAL

Improper Access Control in GitLab

48RISCO

abrir ↗

Referência

CVE-2017-0220

CVE-2017-0220—

The Windows kernel in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows Server 2012 Gold allows authenticat

23RISCO

abrir ↗

Referência

CVE-2009-4818

CVE-2009-4818—

Unrestricted file upload vulnerability in upload.php in PHPSimplicity Simplicity oF Upload 1.3.2 allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2019-20204

CVE-2019-20204—

The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/* at the beginn

23RISCO

abrir ↗

Referência

CVE-2016-4311

CVE-2016-4311—

Cross-site request forgery (CSRF) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote at

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.