Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.107exploits catalogados

36.322CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

22.936 exploits

Referência

CVE-2016-0199

CVE-2016-0199—

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service

35RISCO

abrir ↗

Referência

CVE-2016-0199

CVE-2016-0199—

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service

35RISCO

abrir ↗

Referência

CVE-2018-8552

CVE-2018-8552—

An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which coul

35RISCO

abrir ↗

Referência

CVE-2017-16887

CVE-2017-16887—

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact

35RISCO

abrir ↗

Referência

CVE-2018-8133

CVE-2018-8133—

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

35RISCO

abrir ↗

Referência

CVE-2008-4844

CVE-2008-4844—

Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet

50RISCO

abrir ↗

Referência

CVE-2008-4844

CVE-2008-4844—

Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet

50RISCO

abrir ↗

Referência

Microweber 1.2.11 - Remote Code Execution (RCE) (Authenticated)

CVE-2022-0557HIGHwebappsphp

OS Command Injection in microweber/microweber

53RISCO

abrir ↗

Referência✓ VexDay Proof

Sepal SPBOARD 4.5 - 'board.cgi' Remote Command Execution

CVE-2008-4873—webappscgi

board.cgi in Sepal SPBOARD 4.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the fil

23RISCO

abrir ↗

Referência

CVE-2010-2309

CVE-2010-2309—

Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary cod

50RISCO

abrir ↗

Referência

CVE-2009-2639

CVE-2009-2639—

SQL injection vulnerability in admin.php in MRCGIGUY The Ticket System 2.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2017-14535

CVE-2017-14535—

trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php

50RISCO

abrir ↗

Referência

CVE-2015-8256

CVE-2015-8256—

Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras.

35RISCO

abrir ↗

Referência

CVE-2019-12518

CVE-2019-12518—

Anviz CrossChex access control management software 4.3.8.0 and 4.3.12 is vulnerable to a buffer overflow vulnerability.

50RISCO

abrir ↗

Referência

CVE-2015-5131

CVE-2015-5131—

Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR

35RISCO

abrir ↗

Referência

CVE-2015-5132

CVE-2015-5132—

Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR

35RISCO

abrir ↗

Referência

RAD SecFlow-1v SF_0290_2.3.01.26 - Cross-Site Request Forgery (Reboot)

CVE-2020-13259—webappshardware

A vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF_0290_2.3.01.26 could allow an unauth

23RISCO

abrir ↗

Referência

CVE-2020-13379

CVE-2020-13379—

The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows

60RISCO

abrir ↗

Referência

CVE-2023-6623

CVE-2023-6623CRITICAL

Essential Blocks < 4.4.3 - Unauthenticated Local File Inclusion

75RISCO

abrir ↗

Referência

CVE-2018-13862

CVE-2018-13862—

Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allow unauthorized remote attacker

35RISCO

abrir ↗

Referência

CVE-2009-3491

CVE-2009-3491—

SQL injection vulnerability in the Kinfusion SportFusion (com_sportfusion) component 0.2.2 through 0.2.3 for Joomla! all

23RISCO

abrir ↗

Referência

CVE-2018-19524

CVE-2018-19524—

An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1, DT721-cb SDOTB

35RISCO

abrir ↗

Referência

CVE-2018-19524

CVE-2018-19524—

An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1, DT721-cb SDOTB

35RISCO

abrir ↗

Referência

CVE-2016-3304

CVE-2016-3304—

The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007

35RISCO

abrir ↗

Referência

CVE-2016-3303

CVE-2016-3303—

The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007

35RISCO

abrir ↗

Referência

CVE-2017-0108

CVE-2017-0108—

The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 20

35RISCO

abrir ↗

Referência

CVE-2014-7285

CVE-2014-7285—

The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to exe

50RISCO

abrir ↗

Referência

CVE-2017-6465

CVE-2017-6465—

Remote Code Execution was discovered in FTPShell Client 6.53. By default, the client sends a PWD command to the FTP serv

50RISCO

abrir ↗

Referência

CVE-2017-6465

CVE-2017-6465—

Remote Code Execution was discovered in FTPShell Client 6.53. By default, the client sends a PWD command to the FTP serv

50RISCO

abrir ↗

Referência

CVE-2017-8541

CVE-2017-8541—

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serve

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.