Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

19.978 exploits

Referência

CVE-2021-46419

CVE-2021-46419—

An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system fil

60RISCO

abrir ↗

Referência

CVE-2010-4409

CVE-2010-4409—

Integer overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3 and earlier allows cont

28RISCO

abrir ↗

Referência

Microsoft Internet Explorer 6.0.2900 SP2 - CSS Attribute Denial of Service

CVE-2006-7031MEDIUM

Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a

38RISCO

abrir ↗

Referência

XnView 1.90.3 - '.xpm' Local Buffer Overflow

CVE-2007-2194—

Stack-based buffer overflow in XnView 1.90.3 allows user-assisted remote attackers to execute arbitrary code via a craft

28RISCO

abrir ↗

Referência

CVE-2016-6855

CVE-2016-6855—

Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib befor

28RISCO

abrir ↗

Referência

CVE-2016-6855

CVE-2016-6855—

Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib befor

28RISCO

abrir ↗

Referência

CVE-2010-1980

CVE-2010-1980—

Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr (com_joomlaflickr) component 1.0.3 for Joomla

43RISCO

abrir ↗

Referência

CVE-2010-1980

CVE-2010-1980—

Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr (com_joomlaflickr) component 1.0.3 for Joomla

43RISCO

abrir ↗

Referência

CVE-2010-4597

CVE-2010-4597—

Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraX

28RISCO

abrir ↗

Referência

CVE-2020-29597

CVE-2020-29597—

IncomCMS 2.0 has a modules/uploader/showcase/script.php insecure file upload vulnerability. This vulnerability allows un

60RISCO

abrir ↗

Referência

CVE-2010-1983

CVE-2010-1983—

Directory traversal vulnerability in the redTWITTER (com_redtwitter) component 1.0.x including 1.0b11 for Joomla! allows

43RISCO

abrir ↗

Referência

CVE-2010-1983

CVE-2010-1983—

Directory traversal vulnerability in the redTWITTER (com_redtwitter) component 1.0.x including 1.0b11 for Joomla! allows

43RISCO

abrir ↗

Referência

CVE-2015-2153

CVE-2015-2153—

The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers t

28RISCO

abrir ↗

Referência

CVE-2015-2153

CVE-2015-2153—

The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers t

28RISCO

abrir ↗

Referência

CMSimple 3.1 - Local File Inclusion / Arbitrary File Upload

CVE-2008-2650—

Directory traversal vulnerability in cmsimple/cms.php in CMSimple 3.1, when register_globals is enabled, allows remote a

43RISCO

abrir ↗

Referência

AROX School-ERP Pro - Unauthenticated Remote Command Execution (Metasploit)

CVE-2019-13294—

AROX School-ERP Pro has a command execution vulnerability. import_stud.php and upload_fille.php do not have session cont

28RISCO

abrir ↗

Referência

rdesktop 1.5.0 - 'process_redirect_pdu()' BSS Overflow (PoC)

CVE-2008-1802—

Buffer overflow in the process_redirect_pdu (rdp.c) function in rdesktop 1.5.0 allows remote attackers to execute arbitr

28RISCO

abrir ↗

Referência

CVE-2010-1714

CVE-2010-1714—

Directory traversal vulnerability in the Arcade Games (com_arcadegames) component 1.0 for Joomla! allows remote attacker

43RISCO

abrir ↗

Referência

CVE-2010-1714

CVE-2010-1714—

Directory traversal vulnerability in the Arcade Games (com_arcadegames) component 1.0 for Joomla! allows remote attacker

43RISCO

abrir ↗

Referência

PHP 5.2.3 - 'PHP_gd2.dll' imagepsloadfont Local Buffer Overflow (PoC)

CVE-2007-4033—

Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent at

28RISCO

abrir ↗

Referência

CVE-2019-0566

CVE-2019-0566—

An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevatio

28RISCO

abrir ↗

Referência

CVE-2022-25089

CVE-2022-25089—

Printix Secure Cloud Print Management through 1.3.1106.0 incorrectly uses Privileged APIs to modify values in HKEY_LOCAL

28RISCO

abrir ↗

Referência

Printix Client 1.3.1106.0 - Remote Code Execution (RCE)

CVE-2022-25089—

Printix Secure Cloud Print Management through 1.3.1106.0 incorrectly uses Privileged APIs to modify values in HKEY_LOCAL

28RISCO

abrir ↗

Referência

Microsoft Windows Media Player - '.AIFF' Divide By Zero Exception Denial of Service (PoC)

CVE-2007-6236—

Microsoft Windows Media Player (WMP) allows remote attackers to cause a denial of service (application crash) via a cert

28RISCO

abrir ↗

Referência

Microsoft Visual FoxPro 6.0 - 'FPOLE.OCX' Arbitrary Command Execution

CVE-2007-5322—

Insecure method vulnerability in the FPOLE.OCX 6.0.8450.0 ActiveX control in Microsoft Visual FoxPro 6.0 allows remote a

28RISCO

abrir ↗

Referência

CVE-2018-19877

CVE-2018-19877—

43RISCO

abrir ↗

Referência

CVE-2014-8801

CVE-2014-8801—

Directory traversal vulnerability in services/getfile.php in the Paid Memberships Pro plugin before 1.7.15 for WordPress

28RISCO

abrir ↗

Referência

CVE-2014-8801

CVE-2014-8801—

Directory traversal vulnerability in services/getfile.php in the Paid Memberships Pro plugin before 1.7.15 for WordPress

28RISCO

abrir ↗

Referência

CVE-2018-20469

CVE-2018-20469—

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A parameter in the web reports module is vulnerable to

28RISCO

abrir ↗

Referência

CVE-2010-2259

CVE-2010-2259—

Directory traversal vulnerability in the BF Survey (com_bfsurvey) component for Joomla! allows remote attackers to inclu

43RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.