Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.836exploits catalogados

32.133CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8.156Nuclei 4.201Metasploit 3.462✓ só verificadosrecentes populares risco

19.967 exploits

Referência

CVE-2016-4226

CVE-2016-4226—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows

35RISCO

Referência

CVE-2016-6255

CVE-2016-6255—

Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a P

28RISCO

Referência

CVE-2020-3161

CVE-2020-3161CRITICALsob ataque

Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability

100RISCO

Referência

CVE-2015-3337

CVE-2015-3337—

Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, a

50RISCO

Referência

CVE-2015-3337

CVE-2015-3337—

Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, a

50RISCO

Referência

CVE-2017-6187

CVE-2017-6187—

Buffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers to execute arbitrary c

50RISCO

Referência

CVE-2018-14716

CVE-2018-14716—

A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because reques

35RISCO

Referência

eZip Wizard 3.0 - Local Stack Buffer Overflow (PoC) (SEH)

CVE-2009-1028—

Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .z

50RISCO

Referência

CVE-2015-8411

CVE-2015-8411—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISCO

Referência

CVE-2015-8413

CVE-2015-8413—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISCO

Referência

CVE-2015-8410

CVE-2015-8410—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISCO

Referência

CVE-2015-8412

CVE-2015-8412—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISCO

Referência

CVE-2015-8048

CVE-2015-8048—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISCO

Referência

CVE-2010-4321

CVE-2010-4321—

Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52 allows remote attackers to

50RISCO

Referência

DVD X Player 4.1 Professional - '.PLF' File Buffer Overflow

CVE-2007-3068—

Stack-based buffer overflow in DVD X Player 4.1 Professional allows remote attackers to execute arbitrary code via a PLF

50RISCO

Referência

CVE-2009-5109

CVE-2009-5109—

Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long e

50RISCO

Referência

CVE-2009-5109

CVE-2009-5109—

Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long e

50RISCO

Referência

CVE-2009-5109

CVE-2009-5109—

Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long e

50RISCO

Referência

CVE-2009-5109

CVE-2009-5109—

Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long e

50RISCO

Referência

CVE-2016-4231

CVE-2016-4231—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows

35RISCO

Referência

CVE-2016-4227

CVE-2016-4227—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows

35RISCO

Referência

CVE-2018-19458

CVE-2018-19458—

In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI UR

50RISCO

Referência

CVE-2017-3241

CVE-2017-3241—

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versi

35RISCO

Referência

Trend Micro OfficeScan - ObjRemoveCtrl ActiveX Control Buffer Overflow

CVE-2008-3364—

Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeS

35RISCO

Referência

Now SMS/Mms Gateway 5.5 - Remote Buffer Overflow

CVE-2008-0871—

Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute ar

50RISCO

Referência

CVE-2017-2992

CVE-2017-2992—

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 h

35RISCO

Referência

CVE-2013-3143

CVE-2013-3143—

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (mem

35RISCO

Referência

Tatsu 3.3.11 - Unauthenticated RCE

CVE-2021-25094—

Tatsu < 3.3.12 - Unauthenticated RCE

60RISCO

Referência

CVE-2013-3143

CVE-2013-3143—

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (mem

35RISCO

Referência

CVE-2019-0235

CVE-2019-0235—

Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks.

35RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.