Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.957exploits catalogados

32.195CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8.182Nuclei 4.217Metasploit 3.462✓ só verificadosrecentes populares risco

20.003 exploits

Referência

Zune Software - ActiveX Arbitrary File Overwrite

CVE-2008-1933—

Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to over

28RISCO

abrir ↗

Referência

CVE-2018-4237

CVE-2018-4237—

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS b

43RISCO

abrir ↗

Referência

CVE-2018-4404

CVE-2018-4404HIGH

In iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was addressed with improve

61RISCO

abrir ↗

Referência

CVE-2013-4659

CVE-2013-4659—

Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. T

28RISCO

abrir ↗

Referência

CVE-2010-2028

CVE-2010-2028—

Buffer overflow in k23productions TFTPUtil GUI (aka TFTPGUI) 1.4.5 allows remote attackers to cause a denial of service

28RISCO

abrir ↗

Referência

CVE-2010-2028

CVE-2010-2028—

Buffer overflow in k23productions TFTPUtil GUI (aka TFTPGUI) 1.4.5 allows remote attackers to cause a denial of service

28RISCO

abrir ↗

Referência

CVE-2013-6127

CVE-2013-6127—

The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53

28RISCO

abrir ↗

Referência

CVE-2017-11152

CVE-2017-11152—

Directory traversal vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 all

28RISCO

abrir ↗

Referência

Invision Power Board 2.0.3 - 'login.php' SQL Injection

CVE-2005-1598—

SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary

28RISCO

abrir ↗

Referência

CVE-2016-1879

CVE-2016-1879—

The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, w

28RISCO

abrir ↗

Referência

CVE-2016-1879

CVE-2016-1879—

The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, w

28RISCO

abrir ↗

Referência

CVE-2019-1149

CVE-2019-1149HIGH

Microsoft Graphics Remote Code Execution Vulnerability

46RISCO

abrir ↗

Referência

CVE-2019-3810

CVE-2019-3810MEDIUM

A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported vers

38RISCO

abrir ↗

Referência

CVE-2010-3148

CVE-2010-3148—

Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse

28RISCO

abrir ↗

Referência

CVE-2010-3144

CVE-2010-3144—

Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Ser

28RISCO

abrir ↗

Referência

CVE-2017-7478

CVE-2017-7478—

OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control

28RISCO

abrir ↗

Referência

CVE-2015-7874

CVE-2015-7874—

Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary

28RISCO

abrir ↗

Referência

CVE-2012-4330

CVE-2012-4330—

The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long

28RISCO

abrir ↗

Referência

UltraISO 9.3.3.2685 - CCD/IMG Universal Buffer Overflow

CVE-2009-1257—

Heap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a denial of service (crash

28RISCO

abrir ↗

Referência

exV2 < 2.0.4.3 - 'extract()' Remote Command Execution

CVE-2006-7079—

Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite

28RISCO

abrir ↗

Referência

CVE-2019-6545

CVE-2019-6545—

AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition)

28RISCO

abrir ↗

Referência

CVE-2024-8945

CVE-2024-8945MEDIUM

CodeCanyon RISE Ultimate Project Manager save sql injection

38RISCO

abrir ↗

Referência

CVE-2018-12463

CVE-2018-12463HIGH

MFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilities

46RISCO

abrir ↗

Referência

MDaemon POP3 Server < 9.06 - 'USER' Remote Buffer Overflow (PoC)

CVE-2006-4364—

Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attacker

35RISCO

abrir ↗

Referência

Omni-NFS Server 5.2 - 'nfsd.exe' Remote Stack Overflow (Metasploit)

CVE-2006-5780—

Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code v

50RISCO

abrir ↗

Referência

CVE-2010-3149

CVE-2010-3149—

Untrusted search path vulnerability in Adobe Device Central CS5 3.0.0(376), 3.0.1.0 (3027), and probably other versions

28RISCO

abrir ↗

Referência

32bit FTP - 'PASV' Reply Client Remote Overflow (Metasploit)

CVE-2009-1675—

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a

43RISCO

abrir ↗

Referência

CVE-2010-4300

CVE-2010-4300—

Heap-based buffer overflow in the dissect_ldss_transfer function (epan/dissectors/packet-ldss.c) in the LDSS dissector i

28RISCO

abrir ↗

Referência

CVE-2019-6973

CVE-2019-6973—

Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server

28RISCO

abrir ↗

Referência

CVE-2019-6973

CVE-2019-6973—

Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.