Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.813exploits catalogados

35.788CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.549 exploits

Referência

CVE-2010-5014

CVE-2010-5014—

SQL injection vulnerability in standings.php in Elite Gaming Ladders 3.5 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência

CVE-2010-5015

CVE-2010-5015—

SQL injection vulnerability in view_photo.php in 2daybiz Network Community Script allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2018-4386

CVE-2018-4386—

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iO

23RISCO

abrir ↗

Referência

CVE-2009-3318

CVE-2009-3318—

Directory traversal vulnerability in the Roland Breedveld Album (com_album) component 1.14 for Joomla! allows remote att

38RISCO

abrir ↗

Referência

CVE-2019-12137

CVE-2019-12137—

Typora 0.9.9.24.6 on macOS allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substr

23RISCO

abrir ↗

Referência

CVE-2016-6503

CVE-2016-6503—

The CORBA IDL dissectors in Wireshark 2.x before 2.0.5 on 64-bit Windows platforms do not properly interact with Visual

23RISCO

abrir ↗

Referência

CVE-2017-5227

CVE-2017-5227—

QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by

23RISCO

abrir ↗

Referência✓ VexDay Proof

DivX Player 6.7 - '.srt' File Subtitle Parsing Buffer Overflow

CVE-2008-1912—localwindows

Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause

28RISCO

abrir ↗

Referência✓ VexDay Proof

Opencart 1.1.8 - 'route' Local File Inclusion

CVE-2009-1621—webappsphp

Directory traversal vulnerability in index.php in OpenCart 1.1.8 allows remote attackers to read arbitrary files via a .

23RISCO

abrir ↗

Referência

CVE-2016-3717

CVE-2016-3717—

The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files vi

28RISCO

abrir ↗

Referência

CVE-2009-3272

CVE-2009-3272—

Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other versions before 4.1.2,

23RISCO

abrir ↗

Referência

CVE-2018-12589

CVE-2018-12589—

Polaris Office 2017 8.1 allows attackers to execute arbitrary code via a Trojan horse puiframeworkproresenu.dll file in

28RISCO

abrir ↗

Referência

CVE-2018-12589

CVE-2018-12589—

Polaris Office 2017 8.1 allows attackers to execute arbitrary code via a Trojan horse puiframeworkproresenu.dll file in

28RISCO

abrir ↗

Referência

CVE-2018-7466

CVE-2018-7466—

install/installNewDB.php in TestLink through 1.9.16 allows remote attackers to conduct injection attacks by leveraging c

23RISCO

abrir ↗

Referência

CVE-2018-7466

CVE-2018-7466—

install/installNewDB.php in TestLink through 1.9.16 allows remote attackers to conduct injection attacks by leveraging c

23RISCO

abrir ↗

Referência

CVE-2020-27423

CVE-2020-27423—

Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial o

23RISCO

abrir ↗

Referência

CVE-2019-8391

CVE-2019-8391—

qdPM 9.1 suffers from Cross-site Scripting (XSS) via configuration?type=[XSS] parameter.

23RISCO

abrir ↗

Referência

CVE-2014-9208

CVE-2014-9208—

Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attacker

23RISCO

abrir ↗

Referência

CVE-2012-0025

CVE-2012-0025—

Double free vulnerability in the Free_All_Memory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the Fla

23RISCO

abrir ↗

Referência✓ VexDay Proof

MapLab MS4W 2.2.1 - Remote File Inclusion

CVE-2007-1843—webappsphp

PHP remote file inclusion vulnerability in gmapfactory/params.php in MapLab 2.2.1, when register_globals is enabled, all

23RISCO

abrir ↗

Referência

CVE-2010-0758

CVE-2010-0758—

SQL injection vulnerability in news_desc.php in Softbiz Jobs allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2016-4273

CVE-2016-4273—

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637

28RISCO

abrir ↗

Referência✓ VexDay Proof

CodeAvalanche FreeWallpaper - Remote Database Disclosure

CVE-2008-5897—webappsasp

CodeAvalanche FreeWallpaper stores sensitive information under the web root with insufficient access control, which allo

23RISCO

abrir ↗

Referência

CVE-2013-1463

CVE-2013-1463—

Cross-site scripting (XSS) vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4

23RISCO

abrir ↗

Referência

CVE-2019-8927

CVE-2019-8927—

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zon

23RISCO

abrir ↗

Referência

CVE-2013-2682

CVE-2013-2682—

Cisco Linksys E4200 1.0.05 Build 7 devices contain a Clickjacking Vulnerability which allows remote attackers to obtain

23RISCO

abrir ↗

Referência✓ VexDay Proof

ReVou Twitter Clone - Admin Password Change

CVE-2008-6752—webappsphp

adminlogin/password.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging does not verify the original passw

23RISCO

abrir ↗

Referência

CVE-2009-3500

CVE-2009-3500—

Multiple SQL injection vulnerabilities in BPowerHouse BPGames 1.0 allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

mxCamArchive 2.2 - Bypass Configuration Download

CVE-2008-6955—webappsphp

mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

MySpace Content Zone 3.x - Arbitrary File Upload

CVE-2007-6668—webappsphp

admin/uploadgames.php in MySpace Content Zone (MCZ) 3.x does not require administrative privileges, which allows remote

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.