Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.957exploits catalogados

32.195CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8.182Nuclei 4.217Metasploit 3.462✓ só verificadosrecentes populares risco

20.003 exploits

Referência

CVE-2021-27876

CVE-2021-27876HIGHsob ataqueransomware

An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires suc

91RISCO

abrir ↗

Referência

CVE-2015-4153

CVE-2015-4153—

Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attack

28RISCO

abrir ↗

Referência

CVE-2015-4153

CVE-2015-4153—

Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attack

28RISCO

abrir ↗

Referência

CVE-2015-7805

CVE-2015-7805—

Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex val

28RISCO

abrir ↗

Referência

CVE-2015-7805

CVE-2015-7805—

Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex val

28RISCO

abrir ↗

Referência

Liferay CE Portal < 7.1.2 ga3 - Remote Command Execution (Metasploit)

CVE-2019-11444—

An issue was discovered in Liferay Portal CE 7.1.2 GA3. An attacker can use Liferay's Groovy script console to execute O

28RISCO

abrir ↗

Referência

CVE-2019-8923

CVE-2019-8923—

XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discont

23RISCO

abrir ↗

Referência

Seagull 0.6.3 - 'files' Remote File Disclosure

CVE-2008-0465—

Directory traversal vulnerability in optimizer.php in Seagull 0.6.3 allows remote attackers to read arbitrary files via

23RISCO

abrir ↗

Referência

CVE-2014-100002

CVE-2014-100002—

Directory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows remote attackers to read arb

50RISCO

abrir ↗

Referência

Flowise 1.6.5 - Authentication Bypass

CVE-2024-31621HIGH

An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted sc

68RISCO

abrir ↗

Referência

Lycos FileUploader Control - ActiveX Remote Buffer Overflow

CVE-2008-0443—

Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUpl

28RISCO

abrir ↗

Referência

CVE-2014-6043

CVE-2014-6043—

ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database

28RISCO

abrir ↗

Referência

CVE-2014-6043

CVE-2014-6043—

ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database

28RISCO

abrir ↗

Referência

CVE-2011-4620

CVE-2011-4620—

Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products,

28RISCO

abrir ↗

Referência

WebspotBlogging 3.0.1 - 'path' Remote File Inclusion

CVE-2006-2860—

PHP remote file inclusion vulnerability in Webspotblogging 3.0.1 allows remote attackers to execute arbitrary PHP code v

28RISCO

abrir ↗

Referência

CVE-2015-2826

CVE-2015-2826—

WordPress Simple Ads Manager plugin 2.5.94 and 2.5.96 allows remote attackers to obtain sensitive information.

28RISCO

abrir ↗

Referência

CVE-2015-2826

CVE-2015-2826—

WordPress Simple Ads Manager plugin 2.5.94 and 2.5.96 allows remote attackers to obtain sensitive information.

28RISCO

abrir ↗

Referência

CVE-2021-44664

CVE-2021-44664—

An Authenticated Remote Code Exection (RCE) vulnerability exists in Xerte through 3.9 in website_code/php/import/fileupl

28RISCO

abrir ↗

Referência

TPTEST 3.1.7 - Stack Buffer Overflow (PoC)

CVE-2009-0650—

Stack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 and earlier, and possibly 5.02, allows remo

28RISCO

abrir ↗

Referência

Simplog 0.9.2 - 's' Remote Command Execution

CVE-2006-0147—

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple

28RISCO

abrir ↗

Referência

CVE-2015-0057

CVE-2015-0057—

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

28RISCO

abrir ↗

Referência

CVE-2017-11840

CVE-2017-11840—

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, versio

35RISCO

abrir ↗

Referência

CVE-2017-8657

CVE-2017-8657—

Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary

35RISCO

abrir ↗

Referência

CVE-2023-4596

CVE-2023-4596CRITICAL

Forminator <= 1.24.6 - Unauthenticated Arbitrary File Upload

68RISCO

abrir ↗

Referência

CVE-2014-8498

CVE-2014-8498—

SQL injection vulnerability in BulkEditSearchResult.cc in ManageEngine Password Manager Pro (PMP) and Password Manager P

28RISCO

abrir ↗

Referência

CVE-2014-8498

CVE-2014-8498—

SQL injection vulnerability in BulkEditSearchResult.cc in ManageEngine Password Manager Pro (PMP) and Password Manager P

28RISCO

abrir ↗

Referência

CVE-2017-17976

CVE-2017-17976—

In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution.

28RISCO

abrir ↗

Referência

CVE-2017-17976

CVE-2017-17976—

In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution.

28RISCO

abrir ↗

Referência

Microsoft Windows Media Encoder (XP SP2) - 'wmex.dll' ActiveX Buffer Overflow (MS08-053)

CVE-2008-3008—

Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9

50RISCO

abrir ↗

Referência

WordPress Plugin Enigma 2 Bridge - 'boarddir' Remote File Inclusion

CVE-2006-6863CRITICAL

PHP remote file inclusion vulnerability in the Enigma2 plugin (Enigma2.php) in Enigma WordPress Bridge allows remote att

53RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.