Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

19.978 exploits

Referência

CVE-2022-3921

CVE-2022-3921CRITICAL

Listingo < 3.2.7 - Unauthenticated Arbitrary File Upload

53RISCO

abrir ↗

Referência

CVE-2019-12991

CVE-2019-12991HIGHsob ataque

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of

93RISCO

abrir ↗

Referência

CVE-2012-5054

CVE-2012-5054HIGHsob ataque

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remo

76RISCO

abrir ↗

Referência

CVE-2014-8272

CVE-2014-8272—

The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57

28RISCO

abrir ↗

Referência

CVE-2016-4338

CVE-2016-4338—

The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x bef

28RISCO

abrir ↗

Referência

CVE-2016-4338

CVE-2016-4338—

The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x bef

28RISCO

abrir ↗

Referência

CVE-2010-3143

CVE-2010-3143—

Untrusted search path vulnerability in Microsoft Windows Contacts allows local users, and possibly remote attackers, to

28RISCO

abrir ↗

Referência

CVE-2010-3227

CVE-2010-3227—

Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microso

28RISCO

abrir ↗

Referência

CVE-2005-2842

CVE-2005-2842—

Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary c

28RISCO

abrir ↗

Referência

CVE-2016-0015

CVE-2016-0015—

DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi

35RISCO

abrir ↗

Referência

CVE-2020-3956

CVE-2020-3956—

VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4

28RISCO

abrir ↗

Referência

CVE-2019-14348

CVE-2019-14348—

The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information via

28RISCO

abrir ↗

Referência

CVE-2016-3223

CVE-2016-3223—

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold an

28RISCO

abrir ↗

Referência

CVE-2016-3223

CVE-2016-3223—

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold an

28RISCO

abrir ↗

Referência

CVE-2021-46387

CVE-2021-46387—

ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS). Insecure URI handling leads t

43RISCO

abrir ↗

Referência

CVE-2019-19368

CVE-2019-19368—

A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker ca

43RISCO

abrir ↗

Referência

CVE-2021-44595

CVE-2021-44595—

Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send m

28RISCO

abrir ↗

Referência

CVE-2014-2908

CVE-2014-2908—

Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x

43RISCO

abrir ↗

Referência

CVE-2019-9955

CVE-2019-9955—

On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, U

43RISCO

abrir ↗

Referência

CVE-2019-9955

CVE-2019-9955—

On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, U

43RISCO

abrir ↗

Referência

CVE-2011-0406

CVE-2011-0406—

Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary co

28RISCO

abrir ↗

Referência

CVE-2019-6110

CVE-2019-6110MEDIUM

In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-T

38RISCO

abrir ↗

Referência

CVE-2020-9283

CVE-2020-9283—

golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the

28RISCO

abrir ↗

Referência

CVE-2016-2209

CVE-2016-2209—

Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec

28RISCO

abrir ↗

Referência

CVE-2019-1003029

CVE-2019-1003029CRITICALsob ataque

A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/

100RISCO

abrir ↗

Referência

CVE-2011-1866

CVE-2011-1866—

Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remot

28RISCO

abrir ↗

Referência★ 1

Exploit for EasyNAS version 1.1.0. The vulnerability exploited is a command injection flaw, which requires authentication.

CVE-2023-0830MEDIUM

EasyNAS backup.pl system os command injection

38RISCO

abrir ↗

Referência

CVE-2016-5639

CVE-2016-5639—

Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13

28RISCO

abrir ↗

Referência

CVE-2012-5612

CVE-2012-5612—

Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly ot

28RISCO

abrir ↗

Referência

CVE-2015-4664

CVE-2015-4664—

An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers t

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.