Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.957exploits catalogados

32.195CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8.182Nuclei 4.217Metasploit 3.462✓ só verificadosrecentes populares risco

20.003 exploits

Referência

CVE-2019-8387

CVE-2019-8387—

MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component.

35RISCO

abrir ↗

Referência

CVE-2011-2543

CVE-2011-2543—

Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote

28RISCO

abrir ↗

Referência

CVE-2018-5724

CVE-2018-5724—

MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as demonstrated by restore

28RISCO

abrir ↗

Referência

CVE-2018-5724

CVE-2018-5724—

MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as demonstrated by restore

28RISCO

abrir ↗

Referência

CVE-2012-3574

CVE-2012-3574—

Unrestricted file upload vulnerability in includes/doajaxfileupload.php in the MM Forms Community plugin 2.2.5 and 2.2.6

28RISCO

abrir ↗

Referência

CVE-2019-6273

CVE-2019-6273—

download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files.

28RISCO

abrir ↗

Referência

CVE-2019-6273

CVE-2019-6273—

download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files.

28RISCO

abrir ↗

Referência

CVE-2014-7279

CVE-2014-7279—

The Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote attackers to obtain "equ

28RISCO

abrir ↗

Referência

CVE-2010-3154

CVE-2010-3154—

Untrusted search path vulnerability in Adobe Extension Manager CS5 5.0.298 allows local users, and possibly remote attac

28RISCO

abrir ↗

Referência

phpMyWebmin 1.0 - 'window.php' Remote File Inclusion

CVE-2006-5124—

Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute ar

23RISCO

abrir ↗

Referência

DivX Player 6.7.0 - '.srt' File Buffer Overflow (PoC)

CVE-2008-1912—

Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause

28RISCO

abrir ↗

Referência

DivX Player 6.7 - '.srt' File Subtitle Parsing Buffer Overflow

CVE-2008-1912—

Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause

28RISCO

abrir ↗

Referência

CVE-2019-12744

CVE-2019-12744—

SeedDMS before 5.1.11 allows Remote Command Execution (RCE) because of unvalidated file upload of PHP scripts, a differe

28RISCO

abrir ↗

Referência

CVE-2019-12744

CVE-2019-12744—

SeedDMS before 5.1.11 allows Remote Command Execution (RCE) because of unvalidated file upload of PHP scripts, a differe

28RISCO

abrir ↗

Referência

CVE-2019-14750

CVE-2019-14750—

An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It w

43RISCO

abrir ↗

Referência

osTicket 1.12 - Persistent Cross-Site Scripting

CVE-2019-14750—

An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It w

43RISCO

abrir ↗

Referência

CVE-2019-9768

CVE-2019-9768—

Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timesta

28RISCO

abrir ↗

Referência

CVE-2019-9768

CVE-2019-9768—

Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timesta

28RISCO

abrir ↗

Referência

VUPlayer 2.49 - '.asx' HREF Local Buffer Overflow (PoC)

CVE-2009-0174—

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in th

28RISCO

abrir ↗

Referência

VUPlayer 2.49 - '.asx' 'HREF' Universal Buffer Overflow

CVE-2009-0174—

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in th

28RISCO

abrir ↗

Referência

VUPlayer 2.49 - '.asx' HREF Local Buffer Overflow (1)

CVE-2009-0174—

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in th

28RISCO

abrir ↗

Referência

VUPlayer 2.49 - '.asx' HREF Local Buffer Overflow (2)

CVE-2009-0174—

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in th

28RISCO

abrir ↗

Referência

CVE-2010-2122

CVE-2010-2122—

Directory traversal vulnerability in the SimpleDownload (com_simpledownload) component before 0.9.6 for Joomla! allows r

43RISCO

abrir ↗

Referência

CVE-2010-2122

CVE-2010-2122—

Directory traversal vulnerability in the SimpleDownload (com_simpledownload) component before 0.9.6 for Joomla! allows r

43RISCO

abrir ↗

Referência

MailBee WebMail Pro 4.1 - Remote File Disclosure

CVE-2008-0333—

Directory traversal vulnerability in download_view_attachment.aspx in AfterLogic MailBee WebMail Pro 4.1 for ASP.NET all

28RISCO

abrir ↗

Referência

CVE-2014-3976

CVE-2014-3976—

Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allow

28RISCO

abrir ↗

Referência

CVE-2014-3976

CVE-2014-3976—

Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allow

28RISCO

abrir ↗

Referência

CVE-2023-26068

CVE-2023-26068CRITICAL

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).

68RISCO

abrir ↗

Referência

CVE-2020-1380

CVE-2020-1380HIGHsob ataque

Scripting Engine Memory Corruption Vulnerability

76RISCO

abrir ↗

Referência

CVE-2019-9189

CVE-2019-9189—

Prima Systems FlexAir, Versions 2.4.9api3 and prior. The application allows the upload of arbitrary Python scripts when

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.