Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.957exploits catalogados

32.195CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8.182Nuclei 4.217Metasploit 3.462✓ só verificadosrecentes populares risco

20.003 exploits

Referência

CVE-2021-36711

CVE-2021-36711—

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.

28RISCO

abrir ↗

Referência

CVE-2021-36711

CVE-2021-36711—

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.

28RISCO

abrir ↗

Referência

CVE-2011-4878

CVE-2011-4878—

Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2

28RISCO

abrir ↗

Referência

Online Fantasy Football League (OFFL) 0.2.6 - Remote File Inclusion

CVE-2007-4809—

Multiple PHP remote file inclusion vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 allow remote attackers

35RISCO

abrir ↗

Referência

vsftpd 2.0.5 - 'CWD' (Authenticated) Remote Memory Consumption

CVE-2007-5962—

Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 throug

28RISCO

abrir ↗

Referência

CVE-2008-4128

CVE-2008-4128MEDIUMsob ataque

Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the

68RISCO

abrir ↗

Referência

MySpace Uploader - 'MySpaceUploader.ocx 1.0.0.4' Remote Buffer Overflow

CVE-2008-0659—

Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used i

35RISCO

abrir ↗

Referência

CVE-2018-10956

CVE-2018-10956—

IPConfigure Orchid Core VMS 2.0.5 allows Directory Traversal.

50RISCO

abrir ↗

Referência

CVE-2018-10956

CVE-2018-10956—

IPConfigure Orchid Core VMS 2.0.5 allows Directory Traversal.

50RISCO

abrir ↗

Referência

Cisco Router - HTTP Administration Cross-Site Request Forgery / Command Execution (1)

CVE-2008-4128MEDIUMsob ataque

Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the

68RISCO

abrir ↗

Referência

CVE-2016-9722

CVE-2016-9722—

IBM QRadar 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be r

43RISCO

abrir ↗

Referência

xeCMS 1.0.0 RC2 - Insecure Cookie Handling

CVE-2008-6714—

admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by

28RISCO

abrir ↗

Referência

LoveCMS 1.6.2 Final - Remote Code Execution

CVE-2008-3509—

LoveCMS 1.6.2 does not require administrative authentication for (1) addblock.php, (2) blocks.php, and (3) themes.php in

23RISCO

abrir ↗

Referência

CVE-2014-9241

CVE-2014-9241—

Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allow remote attack

23RISCO

abrir ↗

Referência

CVE-2019-9053

CVE-2019-9053—

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve

35RISCO

abrir ↗

Referência

CVE-2014-5289

CVE-2014-5289—

Buffer overflow in Senkas Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a POST request

28RISCO

abrir ↗

Referência

CVE-2010-3894

CVE-2010-3894—

Stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function in /opt/IBM/es/lib/libffq.crypt

28RISCO

abrir ↗

Referência

WordPress MU < 1.3.2 - 'active_plugins' Code Execution

CVE-2008-5695—

wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests

28RISCO

abrir ↗

Referência

CVE-2022-1768

CVE-2022-1768CRITICAL

RSVPMaker <= 9.3.2 - Unauthenticated SQL Injection

68RISCO

abrir ↗

Referência

Solaris 9 PortBind - XDR-DECODE 'taddr2uaddr()' Remote Denial of Service

CVE-2008-4619—

The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service (daemon crash) via a crafted req

28RISCO

abrir ↗

Referência

CVE-2016-5677

CVE-2016-5677—

NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.

28RISCO

abrir ↗

Referência

Hannon Hill Cascade Server - (Authenticated) Command Execution

CVE-2009-1088—

Hannon Hill Cascade Server 5.7 and other versions allows remote authenticated users to execute arbitrary programs or Jav

28RISCO

abrir ↗

Referência

Citadel SMTP 7.10 - Remote Overflow

CVE-2008-0394—

Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCP

28RISCO

abrir ↗

Referência

CVE-2012-5862

CVE-2012-5862—

Sinapsi eSolar Hard-Coded Password

53RISCO

abrir ↗

Referência

CVE-2016-6483

CVE-2016-6483—

The media-file upload feature in vBulletin before 3.8.7 Patch Level 6, 3.8.8 before Patch Level 2, 3.8.9 before Patch Le

28RISCO

abrir ↗

Referência

CVE-2014-8673

CVE-2014-8673—

Multiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php in

28RISCO

abrir ↗

Referência

CVE-2014-8673

CVE-2014-8673—

Multiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php in

28RISCO

abrir ↗

Referência

CVE-2017-15118

CVE-2017-15118HIGH

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client

46RISCO

abrir ↗

Referência

CVE-2010-3595

CVE-2010-3595—

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 all

28RISCO

abrir ↗

Referência

Microsoft Word 2007 - Multiple Vulnerabilities

CVE-2007-1911—

Multiple unspecified vulnerabilities in Microsoft Word 2007 allow remote attackers to cause a denial of service (CPU con

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.