Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.836exploits catalogados

32.133CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8.156Nuclei 4.201Metasploit 3.462✓ só verificadosrecentes populares risco

19.967 exploits

Referência

CVE-2019-1150

CVE-2019-1150HIGH

Microsoft Graphics Remote Code Execution Vulnerability

46RISCO

abrir ↗

Referência

CVE-2019-1150

CVE-2019-1150HIGH

Microsoft Graphics Remote Code Execution Vulnerability

46RISCO

abrir ↗

Referência

CVE-2019-7274

CVE-2019-7274—

Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.

28RISCO

abrir ↗

Referência

CVE-2018-12327

CVE-2018-12327—

Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or es

28RISCO

abrir ↗

Referência

CVE-2024-6366

CVE-2024-6366CRITICAL

User Profile Builder < 3.11.8 - Unauthenticated Media Upload

68RISCO

abrir ↗

Referência

CVE-2024-12847

CVE-2024-12847CRITICAL

NETGEAR DGN setup.cgi OS Command Injection

68RISCO

abrir ↗

Referência

CVE-2024-12847

CVE-2024-12847CRITICAL

NETGEAR DGN setup.cgi OS Command Injection

68RISCO

abrir ↗

Referência

CVE-2018-14058

CVE-2018-14058—

Pimcore before 5.3.0 allows SQL Injection via the REST web service API.

43RISCO

abrir ↗

Referência

CVE-2018-14058

CVE-2018-14058—

Pimcore before 5.3.0 allows SQL Injection via the REST web service API.

43RISCO

abrir ↗

Referência

CVE-2011-4642

CVE-2011-4642—

mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python

43RISCO

abrir ↗

Referência

Pindorama 0.1 - 'client.php' Remote File Inclusion

CVE-2007-5387—

PHP remote file inclusion vulnerability in active/components/xmlrpc/client.php in Pindorama 0.1 allows remote attackers

28RISCO

abrir ↗

Referência

CVE-2013-3238

CVE-2013-3238—

phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a

43RISCO

abrir ↗

Referência

CVE-2009-3753

CVE-2009-3753—

Unrestricted file upload vulnerability in Opial 1.0 allows remote attackers to execute arbitrary code by uploading a fil

23RISCO

abrir ↗

Referência

Apple iTunes 8.1.1 - 'ITMS' Multiple Protocol Handler Buffer Overflow (Metasploit)

CVE-2009-0950—

Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a deni

43RISCO

abrir ↗

Referência

Apple iTunes 8.1.1.10 (Windows) - 'itms/itcp' Remote Buffer Overflow

CVE-2009-0950—

Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a deni

43RISCO

abrir ↗

Referência

CVE-2013-5015

CVE-2013-5015—

SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.74

43RISCO

abrir ↗

Referência

CVE-2013-5015

CVE-2013-5015—

SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.74

43RISCO

abrir ↗

Referência

CVE-2018-9032

CVE-2018-9032—

An authentication bypass vulnerability on D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router (Hardware Versi

28RISCO

abrir ↗

Referência

Trionic Cite CMS 1.2rev9 - Remote File Inclusion

CVE-2007-5271—

Multiple PHP remote file inclusion vulnerabilities in Trionic Cite CMS 1.2 rev9 and earlier allow remote attackers to ex

28RISCO

abrir ↗

Referência

awzMB 4.2 Beta 1 - Multiple Remote File Inclusions

CVE-2007-5592—

Multiple PHP remote file inclusion vulnerabilities in awzMB 4.2 beta 1 and earlier allow remote attackers to execute arb

28RISCO

abrir ↗

Referência

Joomla! Component joom12pic 1.0 - Remote File Inclusion

CVE-2007-4954—

PHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (com_joom12pic) 1.0 component for Joomla

28RISCO

abrir ↗

Referência

CVE-2018-1189

CVE-2018-1189—

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and vers

28RISCO

abrir ↗

Referência

CVE-2010-2620

CVE-2010-2620—

Open&Compact FTP Server (Open-FTPD) 1.2 and earlier allows remote attackers to bypass authentication by sending (1) LIST

43RISCO

abrir ↗

Referência

CVE-2011-5164

CVE-2011-5164—

Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute ar

43RISCO

abrir ↗

Referência

CVE-2015-0008

CVE-2015-0008—

The UNC implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Wind

28RISCO

abrir ↗

Referência

CVE-2019-6225

CVE-2019-6225—

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.

28RISCO

abrir ↗

Referência

CVE-2013-0946

CVE-2013-0946—

Buffer overflow in the Library Control Program (LCP) in EMC AlphaStor 4.0 before build 910 allows remote attackers to ex

28RISCO

abrir ↗

Referência

CVE-2010-4107

CVE-2010-4107—

The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printer

28RISCO

abrir ↗

Referência

CVE-2014-6363

CVE-2014-6363—

vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allo

28RISCO

abrir ↗

Referência

CVE-2013-6720

CVE-2013-6720—

Directory traversal vulnerability in download.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.