Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.666exploits catalogados

32.032CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.896GitHub PoC 13.204VulnCheck XDB 8.127Nuclei 4.191Metasploit 3.462✓ só verificadosrecentes populares risco

19.896 exploits

Referência

Litespeed Web Server 3.2.3 - Source Code Disclosure

CVE-2007-5654—

LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00

35RISCO

abrir ↗

Referência

CVE-2019-12593

CVE-2019-12593—

IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index

50RISCO

abrir ↗

Referência

Microsoft Windows Server 2016 - Win32k Elevation of Privilege

CVE-2023-29336HIGHsob ataque

Win32k Elevation of Privilege Vulnerability

83RISCO

abrir ↗

Referência

CVE-2011-4825

CVE-2011-4825—

Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinym

50RISCO

abrir ↗

Referência

CVE-2023-34124

CVE-2023-34124CRITICAL

The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authenticatio

75RISCO

abrir ↗

Referência

CVE-2007-6258

CVE-2007-6258—

Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers t

35RISCO

abrir ↗

Referência

Apache Tomcat Connector jk2-2.0.2 mod_jk2 - Remote Overflow

CVE-2007-6258—

Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers t

35RISCO

abrir ↗

Referência

CVE-2015-2461

CVE-2015-2461—

ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,

35RISCO

abrir ↗

Referência

CVE-2014-8676

CVE-2014-8676—

Directory traversal vulnerability in the file_get_contents function in SOPlanning 1.32 and earlier allows remote attacke

50RISCO

abrir ↗

Referência

CVE-2014-8676

CVE-2014-8676—

Directory traversal vulnerability in the file_get_contents function in SOPlanning 1.32 and earlier allows remote attacke

50RISCO

abrir ↗

Referência

CVE-2022-30781

CVE-2022-30781—

Gitea before 1.16.7 does not escape git fetch remote.

60RISCO

abrir ↗

Referência

CVE-2022-30781

CVE-2022-30781—

Gitea before 1.16.7 does not escape git fetch remote.

60RISCO

abrir ↗

Referência

eXchange POP3 5.0.050203 - RPCT TO Remote Buffer Overflow

CVE-2006-0537—

Buffer overflow in the POP3 server in Kinesphere Corporation eXchange before 5.0.060125 allows remote attackers to execu

35RISCO

abrir ↗

Referência

CVE-2017-7442

CVE-2017-7442—

Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory tra

50RISCO

abrir ↗

Referência

CVE-2018-7583

CVE-2018-7583—

Proxy.exe in DualDesk 20 allows Remote Denial Of Service (daemon crash) via a long string to TCP port 5500.

35RISCO

abrir ↗

Referência

Chilkat Crypt - ActiveX Arbitrary File Creation/Execution

CVE-2008-5002—

Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilka

50RISCO

abrir ↗

Referência

CVE-2021-25297

CVE-2021-25297HIGHsob ataque

Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi

98RISCO

abrir ↗

Referência

CVE-2023-1730

CVE-2023-1730CRITICAL

SupportCandy < 3.1.5 - Unauthenticated SQLi

75RISCO

abrir ↗

Referência

CVE-2018-1000094

CVE-2018-1000094—

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows a

50RISCO

abrir ↗

Referência

CVE-2012-5223

CVE-2012-5223—

The proc_deutf function in includes/functions_vbseocp_abstract.php in vBSEO 3.5.0, 3.5.1, 3.5.2, 3.6.0, and earlier allo

50RISCO

abrir ↗

Referência

CVE-2021-25156

CVE-2021-25156—

A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in ve

35RISCO

abrir ↗

Referência

Microsoft Internet Explorer 6 / Ademco co. ltd. ATNBaseLoader100 Module - Remote Buffer Overflow

CVE-2007-2938—

Buffer overflow in the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) 5.4.0.6,

35RISCO

abrir ↗

Referência

CVE-2022-29548

CVE-2022-29548MEDIUM

A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0,

60RISCO

abrir ↗

Referência

CVE-2013-1412

CVE-2013-1412—

DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/pr

50RISCO

abrir ↗

Referência

CVE-2013-1412

CVE-2013-1412—

DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/pr

50RISCO

abrir ↗

Referência

CVE-2012-4924

CVE-2012-4924—

Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 all

50RISCO

abrir ↗

Referência

CVE-2011-0517

CVE-2011-0517—

Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows

50RISCO

abrir ↗

Referência

CVE-2018-14493

CVE-2018-14493—

Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inj

35RISCO

abrir ↗

Referência

CVE-2015-3118

CVE-2015-3118—

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows

35RISCO

abrir ↗

Referência

CVE-2018-10088

CVE-2018-10088—

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.