Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

19.978 exploits

Referência

CVE-2010-2050

CVE-2010-2050—

Directory traversal vulnerability in the Moron Solutions MS Comment (com_mscomment) component 0.8.0b for Joomla! allows

43RISCO

abrir ↗

Referência

CVE-2014-3805

CVE-2014-3805—

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a

28RISCO

abrir ↗

Referência

CVE-2013-2748

CVE-2013-2748—

Belkin Wemo Switch before WeMo_US_2.00.2176.PVT could allow remote attackers to upload arbitrary files onto the system.

28RISCO

abrir ↗

Referência

CVE-2022-30286

CVE-2022-30286—

pyscriptjs (aka PyScript Demonstrator) in PyScript through 2022-05-04 allows a remote user to read Python source code.

28RISCO

abrir ↗

Referência

PyScript - Read Remote Python Source Code

CVE-2022-30286—

pyscriptjs (aka PyScript Demonstrator) in PyScript through 2022-05-04 allows a remote user to read Python source code.

28RISCO

abrir ↗

Referência

CVE-2017-8871

CVE-2017-8871—

The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial o

28RISCO

abrir ↗

Referência

CVE-2010-1952

CVE-2010-1952—

Directory traversal vulnerability in the BeeHeard (com_beeheard) and BeeHeard Lite (com_beeheardlite) component 1.0 for

43RISCO

abrir ↗

Referência

CVE-2018-7264

CVE-2018-7264—

The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is prone to multiple out

28RISCO

abrir ↗

Referência

CVE-2009-3308

CVE-2009-3308—

SQL injection vulnerability in show-cat.php in FanUpdate 2.2.1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2016-6175

CVE-2016-6175—

Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via

28RISCO

abrir ↗

Referência

CVE-2013-2679

CVE-2013-2679—

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Linksys E4200 router with firmware 1.0.05 build 7 allow rem

28RISCO

abrir ↗

Referência

CVE-2019-8385

CVE-2019-8385—

An issue was discovered in Thomson Reuters Desktop Extensions 1.9.0.358. An unauthenticated directory traversal and loca

28RISCO

abrir ↗

Referência

CVE-2009-2762

CVE-2009-2762—

wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the

28RISCO

abrir ↗

Referência

CVE-2019-16701

CVE-2019-16701—

pfSense through 2.3.4 through 2.4.4-p3 allows Remote Code Injection via a methodCall XML document with a pfsense.exec_ph

28RISCO

abrir ↗

Referência

CVE-2018-16060

CVE-2018-16060—

Mitsubishi Electric Europe B.V. SmartRTU devices allow remote attackers to obtain sensitive information (directory listi

28RISCO

abrir ↗

Referência

Quinsonnas Mail Checker 1.55 - 'footer.php' Remote File Inclusion

CVE-2008-1046—

PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execute

28RISCO

abrir ↗

Referência

CVE-2016-6598

CVE-2016-6598—

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on

28RISCO

abrir ↗

Referência

PHPProfiles 4.5.2 Beta - 'body_comm.inc.php' Remote File Inclusion

CVE-2008-1051—

PHP remote file inclusion vulnerability in include/body_comm.inc.php in phpProfiles 4.5.2 BETA allows remote attackers t

28RISCO

abrir ↗

Referência

CVE-2018-18777

CVE-2018-18777—

Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter subp

43RISCO

abrir ↗

Referência

CVE-2018-18777

CVE-2018-18777—

Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter subp

43RISCO

abrir ↗

Referência

CVE-2018-5972

CVE-2018-5972—

SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listin

28RISCO

abrir ↗

Referência

CVE-2020-14947

CVE-2020-14947—

OCS Inventory NG 2.7 allows Remote Command Execution via shell metacharacters to require/commandLine/CommandLine.php bec

28RISCO

abrir ↗

Referência

CVE-2016-4071

CVE-2016-4071—

Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20,

28RISCO

abrir ↗

Referência

CVE-2019-0574

CVE-2019-0574—

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,

28RISCO

abrir ↗

Referência

CVE-2016-4275

CVE-2016-4275—

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635

28RISCO

abrir ↗

Referência

CVE-2016-4372

CVE-2016-4372—

HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01,

28RISCO

abrir ↗

Referência

CVE-2020-8597

CVE-2020-8597CRITICAL

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.

53RISCO

abrir ↗

Referência

CVE-2020-8597

CVE-2020-8597CRITICAL

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.

53RISCO

abrir ↗

Referência

CVE-2023-22809

CVE-2023-22809HIGH

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen

68RISCO

abrir ↗

Referência

CVE-2019-18634

CVE-2019-18634—

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.