Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.760exploits catalogados

32.083CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.934GitHub PoC 13.235VulnCheck XDB 8.150Nuclei 4.193Metasploit 3.462✓ só verificadosrecentes populares risco

19.934 exploits

Referência

CVE-2022-31814

CVE-2022-31814CRITICAL

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metachar

85RISCO

abrir ↗

Referência

CVE-2021-24750

CVE-2021-24750—

WP Visitor Statistics (Real Time Traffic) < 4.8 - Subscriber+ SQL Injection

50RISCO

abrir ↗

Referência

Streamline PHP Media Server 1.0-beta4 - Remote File Inclusion

CVE-2007-5015—

Multiple PHP remote file inclusion vulnerabilities in Streamline PHP Media Server 1.0-beta4 allow remote attackers to ex

35RISCO

abrir ↗

Referência

CVE-2011-2089

CVE-2011-2089—

Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0

50RISCO

abrir ↗

Referência

CVE-2011-2089

CVE-2011-2089—

Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0

50RISCO

abrir ↗

Referência

CVE-2018-14009

CVE-2018-14009—

Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.

35RISCO

abrir ↗

Referência

CVE-2016-10034

CVE-2016-10034—

The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.

35RISCO

abrir ↗

Referência

CVE-2015-3798

CVE-2015-3798—

The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute

28RISCO

abrir ↗

Referência

CVE-2022-45721

CVE-2022-45721CRITICAL

IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the picName parameter in the formDelWewifi

48RISCO

abrir ↗

Referência

CVE-2016-10034

CVE-2016-10034—

The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.

35RISCO

abrir ↗

Referência

CVE-2016-20016

CVE-2016-20016CRITICAL

MVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE, contain a web shell that is accessible via a /

85RISCO

abrir ↗

Referência

CVE-2021-27928

CVE-2021-27928—

A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, a

35RISCO

abrir ↗

Referência

NuclearBB Alpha 2 - 'ROOT_PATH' Remote File Inclusion

CVE-2007-4906—

PHP remote file inclusion vulnerability in tasks/send_queued_emails.php in NuclearBB Alpha 2, when register_globals is e

35RISCO

abrir ↗

Referência

WebDesktop 0.1 - Remote File Inclusion

CVE-2007-5388—

Multiple PHP remote file inclusion vulnerabilities in WebDesktop 0.1 allow remote attackers to execute arbitrary PHP cod

35RISCO

abrir ↗

Referência

CVE-2019-1003001

CVE-2019-1003001—

A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.61 and earlier in src/main/java/org/jenkinsci/plugins

60RISCO

abrir ↗

Referência

CVE-2019-1003001

CVE-2019-1003001—

A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.61 and earlier in src/main/java/org/jenkinsci/plugins

60RISCO

abrir ↗

Referência

CVE-2018-15379

CVE-2018-15379—

Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability

60RISCO

abrir ↗

Referência

CVE-2013-7091

CVE-2013-7091—

Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zim

60RISCO

abrir ↗

Referência

CVE-2021-28476

CVE-2021-28476CRITICAL

Windows Hyper-V Remote Code Execution Vulnerability

60RISCO

abrir ↗

Referência

CVE-2015-6152

CVE-2015-6152—

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory co

35RISCO

abrir ↗

Referência

CVE-2012-0393

CVE-2012-0393—

The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which

35RISCO

abrir ↗

Referência

CVE-2013-0090

CVE-2013-0090HIGH

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary co

53RISCO

abrir ↗

Referência

CVE-2013-0090

CVE-2013-0090HIGH

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary co

53RISCO

abrir ↗

Referência

CVE-2018-8474

CVE-2018-8474—

A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted messa

35RISCO

abrir ↗

Referência

CVE-2018-7658

CVE-2018-7658—

NTSServerSvc.exe in the server in Softros Network Time System 2.3.4 allows remote attackers to cause a denial of service

35RISCO

abrir ↗

Referência

CVE-2018-7658

CVE-2018-7658—

NTSServerSvc.exe in the server in Softros Network Time System 2.3.4 allows remote attackers to cause a denial of service

35RISCO

abrir ↗

Referência

CVE-2015-2843

CVE-2015-2843—

Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute

50RISCO

abrir ↗

Referência

CVE-2015-2843

CVE-2015-2843—

Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute

50RISCO

abrir ↗

Referência

CVE-2015-2843

CVE-2015-2843—

Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute

50RISCO

abrir ↗

Referência

CVE-2009-3857

CVE-2009-3857—

Buffer overflow in Softonic International SciTE 1.72 allows user-assisted remote attackers to cause a denial of service

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.