Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.760exploits catalogados

32.083CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.934GitHub PoC 13.235VulnCheck XDB 8.150Nuclei 4.193Metasploit 3.462✓ só verificadosrecentes populares risco

19.934 exploits

Referência

CVE-2016-1104

CVE-2016-1104—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RISCO

abrir ↗

Referência

CVE-2016-6816

CVE-2016-6816—

The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.

35RISCO

abrir ↗

Referência

CVE-2023-2068

CVE-2023-2068—

File Manager Advanced Shortcode <= 2.3.2 - Unauthenticated Remote Code Execution through shortcode

50RISCO

abrir ↗

Referência

CVE-2023-2068

CVE-2023-2068—

File Manager Advanced Shortcode <= 2.3.2 - Unauthenticated Remote Code Execution through shortcode

50RISCO

abrir ↗

Referência

CVE-2016-3087

CVE-2016-3087—

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, a

60RISCO

abrir ↗

Referência

CVE-2019-17240

CVE-2019-17240LOW

bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many

40RISCO

abrir ↗

Referência

CVE-2019-17240

CVE-2019-17240LOW

bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many

40RISCO

abrir ↗

Referência

CVE-2013-3660

CVE-2013-3660HIGHsob ataque

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windo

98RISCO

abrir ↗

Referência

CVE-2023-4521

CVE-2023-4521CRITICAL

Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE

75RISCO

abrir ↗

Referência

CVE-2018-7286

CVE-2018-7286—

An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asteris

35RISCO

abrir ↗

Referência

CVE-2018-2791

CVE-2018-2791—

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported

50RISCO

abrir ↗

Referência

CVE-2020-14425

CVE-2020-14425—

Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can exe

35RISCO

abrir ↗

Referência

Foxit Reader 9.7.1 - Remote Command Execution (Javascript API)

CVE-2020-14425—

Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can exe

35RISCO

abrir ↗

Referência

CVE-2015-2067

CVE-2015-2067—

Directory traversal vulnerability in web/ajax_pluginconf.php in the MAGMI (aka Magento Mass Importer) plugin for Magento

50RISCO

abrir ↗

Referência

CVE-2015-2067

CVE-2015-2067—

Directory traversal vulnerability in web/ajax_pluginconf.php in the MAGMI (aka Magento Mass Importer) plugin for Magento

50RISCO

abrir ↗

Referência

WebED 0.8999a - Multiple Remote File Inclusions

CVE-2007-4815—

Multiple PHP remote file inclusion vulnerabilities in WebED in Markus Iser ED Engine 0.8999 alpha allow remote attackers

35RISCO

abrir ↗

Referência

PeopleAggregator 1.2pre6-release-53 - Multiple Remote File Inclusions

CVE-2007-5631—

Multiple PHP remote file inclusion vulnerabilities in PeopleAggregator 1.2pre6, when register_globals is enabled, allow

35RISCO

abrir ↗

Referência

CVE-2018-12054

CVE-2018-12054—

Arbitrary File Read exists in PHP Scripts Mall Schools Alert Management Script via the f parameter in img.php, aka absol

50RISCO

abrir ↗

Referência

CVE-2017-17968

CVE-2017-17968—

A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remot

50RISCO

abrir ↗

Referência

CVE-2022-28171

CVE-2022-28171HIGH

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to t

53RISCO

abrir ↗

Referência

CVE-2022-28171

CVE-2022-28171HIGH

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to t

53RISCO

abrir ↗

Referência

CVE-2018-8716

CVE-2018-8716—

WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers.

35RISCO

abrir ↗

Referência

CVE-2018-8716

CVE-2018-8716—

WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers.

35RISCO

abrir ↗

Referência

CVE-2011-3478

CVE-2011-3478—

The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.

35RISCO

abrir ↗

Referência

CVE-2013-4800

CVE-2013-4800—

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown ve

50RISCO

abrir ↗

Referência

CVE-2018-16133

CVE-2018-16133—

Cybrotech CyBroHttpServer 1.0.3 allows Directory Traversal via a ../ in the URI.

50RISCO

abrir ↗

Referência

CVE-2017-12943

CVE-2017-12943—

D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?RE

35RISCO

abrir ↗

Referência

Winamp 5.55 - MAKI script Universal Integer Overflow

CVE-2009-1831—

The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute

50RISCO

abrir ↗

Referência

Winamp 5.55 - MAKI Script Universal Overwrite (SEH)

CVE-2009-1831—

The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute

50RISCO

abrir ↗

Referência

CVE-2018-5262

CVE-2018-5262—

A stack-based buffer overflow in Flexense DiskBoss 8.8.16 and earlier allows unauthenticated remote attackers to execute

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.