Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.666exploits catalogados

32.032CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.896GitHub PoC 13.204VulnCheck XDB 8.127Nuclei 4.191Metasploit 3.462✓ só verificadosrecentes populares risco

19.896 exploits

Referência

CVE-2016-10074

CVE-2016-10074—

The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass

35RISCO

Referência

CVE-2016-10074

CVE-2016-10074—

The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass

35RISCO

Referência

CVE-2019-0841

CVE-2019-0841HIGHsob ataqueransomware

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

98RISCO

Referência

CVE-2019-0841

CVE-2019-0841HIGHsob ataqueransomware

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

98RISCO

Referência

CVE-2019-0841

CVE-2019-0841HIGHsob ataqueransomware

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

98RISCO

Referência

CVE-2019-0841

CVE-2019-0841HIGHsob ataqueransomware

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

98RISCO

Referência

CVE-2019-0841

CVE-2019-0841HIGHsob ataqueransomware

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

98RISCO

Referência

CVE-2010-4740

CVE-2010-4740—

Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote

50RISCO

Referência

Joomla! Component Joomlaradio 5.0 - Remote File Inclusion

CVE-2007-4923—

PHP remote file inclusion vulnerability in admin.joomlaradiov5.php in the Joomla Radio 5 (com_joomlaradiov5) component f

35RISCO

Referência

PHPht Topsites - 'common.php' Remote File Inclusion

CVE-2006-5458—

PHP remote file inclusion vulnerability in common.php in Hinton Design phpht Topsites allows remote attackers to execute

23RISCO

Referência

CVE-2016-0063

CVE-2016-0063—

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service

35RISCO

Referência

CVE-2015-4455

CVE-2015-4455—

Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin

50RISCO

Referência

CVE-2010-3407

CVE-2010-3407—

Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server i

50RISCO

Referência

CVE-2016-2389

CVE-2016-2389—

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMI

50RISCO

Referência

CVE-2016-2389

CVE-2016-2389—

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMI

50RISCO

Referência

VideoLAN VLC Media Player < 0.9.6 - '.rt' Local Stack Buffer Overflow

CVE-2008-5036—

Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execu

50RISCO

Referência

CVE-2009-2261

CVE-2009-2261—

PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .z

50RISCO

Referência

Kodak Image Viewer - TIF/TIFF Code Execution (MS07-055)

CVE-2007-2217—

Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote at

35RISCO

Referência

CVE-2021-3317

CVE-2021-3317—

KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on the original value of

35RISCO

Referência

CVE-2011-0966

CVE-2011-0966—

Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Serv

35RISCO

Referência

Microsoft Help Workshop 4.03.0002 - '.cnt' Local Buffer Overflow

CVE-2007-0352—

Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitr

35RISCO

Referência

Creative Software AutoUpdate Engine - ActiveX Stack Overflow

CVE-2008-0955—

Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote atta

50RISCO

Referência

CVE-2016-0122

CVE-2016-0122—

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Compa

35RISCO

Referência

CVE-2008-1609

CVE-2008-1609—

Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to

35RISCO

Referência

JAF CMS 4.0 RC2 - Multiple Remote File Inclusions

CVE-2008-1609—

Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to

35RISCO

Referência

CVE-2023-29689

CVE-2023-29689—

PyroCMS 3.9 contains a remote code execution (RCE) vulnerability that can be exploited through a server-side template in

35RISCO

Referência

CVE-2017-17411

CVE-2017-17411—

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0. Authe

60RISCO

Referência

CVE-2015-2065

CVE-2015-2065—

SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery (contus-video-gallery) plugin b

50RISCO

Referência

CVE-2015-2065

CVE-2015-2065—

SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery (contus-video-gallery) plugin b

50RISCO

Referência

CVE-2015-3083

CVE-2015-3083—

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460

35RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.