Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.957exploits catalogados

32.195CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8.182Nuclei 4.217Metasploit 3.462✓ só verificadosrecentes populares risco

20.003 exploits

Referência

CVE-2022-38181

CVE-2022-38181HIGHsob ataque

The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishan

76RISCO

abrir ↗

Referência

CVE-2018-11509

CVE-2018-11509—

ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does for the NAS itself for applicat

28RISCO

abrir ↗

Referência

CVE-2018-11509

CVE-2018-11509—

ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does for the NAS itself for applicat

28RISCO

abrir ↗

Referência

CVE-2014-6435

CVE-2014-6435—

cgi-bin/AZ_Retrain.cgi in Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices does not check for authentication,

28RISCO

abrir ↗

Referência

CVE-2018-19861

CVE-2018-19861—

Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP HEAD re

28RISCO

abrir ↗

Referência

CVE-2018-19861

CVE-2018-19861—

Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP HEAD re

28RISCO

abrir ↗

Referência

CVE-2018-19862

CVE-2018-19862—

Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP POST re

28RISCO

abrir ↗

Referência

CVE-2018-19862

CVE-2018-19862—

Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP POST re

28RISCO

abrir ↗

Referência

CVE-2019-6272

CVE-2019-6272—

Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attacker

28RISCO

abrir ↗

Referência

CVE-2019-15889

CVE-2019-15889MEDIUM

The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by t

53RISCO

abrir ↗

Referência

CVE-2019-15889

CVE-2019-15889MEDIUM

The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by t

53RISCO

abrir ↗

Referência

CVE-2019-15889

CVE-2019-15889MEDIUM

The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by t

53RISCO

abrir ↗

Referência

CVE-2015-5354

CVE-2015-5354—

Open redirect vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to redirect users to arbitrary web sites

43RISCO

abrir ↗

Referência

CVE-2015-5354

CVE-2015-5354—

Open redirect vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to redirect users to arbitrary web sites

43RISCO

abrir ↗

Referência

CVE-2014-8675

CVE-2014-8675—

Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which all

28RISCO

abrir ↗

Referência

CVE-2014-8675

CVE-2014-8675—

Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which all

28RISCO

abrir ↗

Referência

CVE-2016-2056

CVE-2016-2056—

xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via

50RISCO

abrir ↗

Referência

Album Photo Sans Nom 1.6 - Remote Source Disclosure

CVE-2006-5320—

Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary fi

23RISCO

abrir ↗

Referência

CVE-2020-8655

CVE-2020-8655HIGHsob ataque

An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability

98RISCO

abrir ↗

Referência

CVE-2019-19774

CVE-2019-19774—

An issue was discovered in Zoho ManageEngine EventLog Analyzer 10.0 SP1 before Build 12110. By running "select hostdetai

28RISCO

abrir ↗

Referência

CVE-2020-8655

CVE-2020-8655HIGHsob ataque

An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability

98RISCO

abrir ↗

Referência

CVE-2017-5630

CVE-2017-5630—

PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenam

28RISCO

abrir ↗

Referência

CVE-2010-3124

CVE-2010-3124—

Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possib

28RISCO

abrir ↗

Referência

CVE-2016-2056

CVE-2016-2056—

xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via

50RISCO

abrir ↗

Referência

CVE-2018-4192

CVE-2018-4192—

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud

28RISCO

abrir ↗

Referência

CVE-2016-7065

CVE-2016-7065—

The JMX servlet in Red Hat JBoss Enterprise Application Platform (EAP) 4 and 5 allows remote authenticated users to caus

28RISCO

abrir ↗

Referência

smbftpd 0.96 - SMBDirList-function Remote Format String

CVE-2007-5184—

Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute a

28RISCO

abrir ↗

Referência

CVE-2020-6627

CVE-2020-6627CRITICAL

The web-management application on Seagate Central NAS STCG2000300, STCG3000300, and STCG4000300 devices allows OS comman

53RISCO

abrir ↗

Referência

CVE-2017-1002003

CVE-2017-1002003—

Vulnerability in wordpress plugin wp2android-turn-wp-site-into-android-app v1.1.4, The plugin includes unlicensed vulner

28RISCO

abrir ↗

Referência

CVE-2020-23342

CVE-2020-23342—

A CSRF vulnerability exists in Anchor CMS 0.12.7 anchor/views/users/edit.php that can change the Delete admin users.

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.