Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.836exploits catalogados

32.133CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8.156Nuclei 4.201Metasploit 3.462✓ só verificadosrecentes populares risco

19.967 exploits

Referência

CVE-2017-3078

CVE-2017-3078—

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Text

35RISCO

abrir ↗

Referência

Comodo AntiVirus 2.0 - 'ExecuteStr()' Remote Command Execution

CVE-2008-0470—

A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteS

35RISCO

abrir ↗

Referência

CVE-2016-0974

CVE-2016-0974—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and

35RISCO

abrir ↗

Referência

CVE-2011-0500

CVE-2011-0500—

Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions;

50RISCO

abrir ↗

Referência

CVE-2009-2650

CVE-2009-2650—

Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a d

50RISCO

abrir ↗

Referência

CVE-2010-1797

CVE-2010-1797—

Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpr

35RISCO

abrir ↗

Referência

CVE-2021-29440

CVE-2021-29440HIGH

Twig allowing dangerous PHP functions by default

53RISCO

abrir ↗

Referência

CVE-2011-3976

CVE-2011-3976—

Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long file

50RISCO

abrir ↗

Referência

CVE-2021-25158

CVE-2021-25158—

A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s

35RISCO

abrir ↗

Referência

CVE-2016-2098

CVE-2016-2098—

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to e

60RISCO

abrir ↗

Referência

CVE-2012-6081

CVE-2012-6081—

Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action

50RISCO

abrir ↗

Referência

CVE-2016-2385

CVE-2016-2385—

Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER a

35RISCO

abrir ↗

Referência

CVE-2016-2385

CVE-2016-2385—

Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER a

35RISCO

abrir ↗

Referência

CVE-2014-4141

CVE-2014-4141—

Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service

35RISCO

abrir ↗

Referência

CVE-2020-35749

CVE-2020-35749—

Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2

50RISCO

abrir ↗

Referência

CVE-2020-35749

CVE-2020-35749—

Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2

50RISCO

abrir ↗

Referência

Microsoft Visual Basic Enterprise 6 SP6 - '.dsr' File Handling Buffer Overflow

CVE-2008-0392—

Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to e

35RISCO

abrir ↗

Referência

WorkSimple 1.2.1 - Remote File Inclusion / Sensitive Data Disclosure

CVE-2008-5764—

PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows re

35RISCO

abrir ↗

Referência

CVE-2015-0065

CVE-2015-0065—

Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio

35RISCO

abrir ↗

Referência

CVE-2015-2523

CVE-2015-2523—

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel for Mac 2011 and 2016, Office Compati

35RISCO

abrir ↗

Referência

CVE-2017-16524

CVE-2017-16524—

Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_u

50RISCO

abrir ↗

Referência

CVE-2018-19616

CVE-2018-19616—

An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000. An unauthenticated user can add/edit/rem

35RISCO

abrir ↗

Referência

CVE-2018-19616

CVE-2018-19616—

An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000. An unauthenticated user can add/edit/rem

35RISCO

abrir ↗

Referência

CVE-2014-1785

CVE-2014-1785—

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co

35RISCO

abrir ↗

Referência

CVE-2014-1785

CVE-2014-1785—

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co

35RISCO

abrir ↗

Referência

CVE-2015-4870

CVE-2015-4870—

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated

35RISCO

abrir ↗

Referência

CVE-2015-4870

CVE-2015-4870—

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated

35RISCO

abrir ↗

Referência

CVE-2018-6849

CVE-2018-6849—

In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client informati

50RISCO

abrir ↗

Referência

CVE-2019-8942

CVE-2019-8942—

WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry ca

60RISCO

abrir ↗

Referência

CVE-2019-8942

CVE-2019-8942—

WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry ca

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.