Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

19.978 exploits

Referência

CVE-2018-14485

CVE-2018-14485—

BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.

28RISCO

abrir ↗

Referência

CVE-2019-7262

CVE-2019-7262—

Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).

28RISCO

abrir ↗

Referência

CVE-2011-0501

CVE-2011-0501—

Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions all

28RISCO

abrir ↗

Referência

Total Video Player 1.03 - '.m3u' File Local Buffer Overflow

CVE-2007-0949—

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers t

28RISCO

abrir ↗

Referência

Total Video Player 1.20 - '.m3u' File Local Stack Buffer Overflow

CVE-2007-0949—

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers t

28RISCO

abrir ↗

Referência

CVE-2011-4362

CVE-2011-4362—

Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lighttp

28RISCO

abrir ↗

Referência

CVE-2015-4666

CVE-2015-4666—

Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attack

43RISCO

abrir ↗

Referência

CVE-2015-4666

CVE-2015-4666—

Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attack

43RISCO

abrir ↗

Referência

CVE-2020-11749

CVE-2020-11749—

Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator

28RISCO

abrir ↗

Referência

PandoraFMS 7.0 NG 746 - Persistent Cross-Site Scripting

CVE-2020-11749—

Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator

28RISCO

abrir ↗

Referência

CVE-2017-6206

CVE-2017-6206—

D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devi

28RISCO

abrir ↗

Referência

CVE-2019-18396

CVE-2019-18396—

An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Comm

28RISCO

abrir ↗

Referência

CVE-2013-2571

CVE-2013-2571—

Iris 3.8 before build 1548, as used in Xpient point of sale (POS) systems, allows remote attackers to execute arbitrary

28RISCO

abrir ↗

Referência

CVE-2013-2571

CVE-2013-2571—

Iris 3.8 before build 1548, as used in Xpient point of sale (POS) systems, allows remote attackers to execute arbitrary

28RISCO

abrir ↗

Referência

CVE-2020-5330

CVE-2020-5330HIGH

Dell EMC Networking X-Series firmware versions 3.0.1.2 and older, Dell EMC Networking PC5500 firmware versions 4.1.0.22

46RISCO

abrir ↗

Referência

CVE-2017-1000251

CVE-2017-1000251—

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and includ

28RISCO

abrir ↗

Referência

CVE-2017-6971

CVE-2017-6971—

AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary comma

28RISCO

abrir ↗

Referência

ImageStation - 'SonyISUpload.cab 1.0.0.38' ActiveX Buffer Overflow (PoC)

CVE-2008-0748—

Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyIS

28RISCO

abrir ↗

Referência

ImageStation - 'SonyISUpload.cab' 1.0.0.38 ActiveX Buffer Overflow

CVE-2008-0748—

Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyIS

28RISCO

abrir ↗

Referência

CVE-2010-1953

CVE-2010-1953—

Directory traversal vulnerability in the iNetLanka Multiple Map (com_multimap) component 1.0 for Joomla! allows remote a

43RISCO

abrir ↗

Referência

CVE-2010-1471

CVE-2010-1471—

Directory traversal vulnerability in the AddressBook (com_addressbook) component 1.5.0 for Joomla! allows remote attacke

43RISCO

abrir ↗

Referência

CVE-2010-1471

CVE-2010-1471—

Directory traversal vulnerability in the AddressBook (com_addressbook) component 1.5.0 for Joomla! allows remote attacke

43RISCO

abrir ↗

Referência

CVE-2010-4335

CVE-2010-4335—

The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows re

50RISCO

abrir ↗

Referência

CVE-2010-1954

CVE-2010-1954—

Directory traversal vulnerability in the iNetLanka Multiple root (com_multiroot) component 1.0 and 1.1 for Joomla! allow

43RISCO

abrir ↗

Referência

CVE-2013-1603

CVE-2013-1603—

An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DC

28RISCO

abrir ↗

Referência

CVE-2017-7981

CVE-2017-7981—

Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin. This occurs in the Project W

28RISCO

abrir ↗

Referência

CVE-2018-1041

CVE-2018-1041—

A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions 3.3.10, reads from an e

28RISCO

abrir ↗

Referência

CVE-2021-24276

CVE-2021-24276—

Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS)

43RISCO

abrir ↗

Referência

CVE-2010-4335

CVE-2010-4335—

The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows re

50RISCO

abrir ↗

Referência

CVE-2010-1929

CVE-2010-1929—

Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.