Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.957exploits catalogados

32.195CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8.182Nuclei 4.217Metasploit 3.462✓ só verificadosrecentes populares risco

20.003 exploits

Referência

CVE-2013-1605

CVE-2013-1605—

Buffer overflow in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to execute arbitra

28RISCO

abrir ↗

Referência

CVE-2005-2616

CVE-2005-2616—

Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote attackers to execute arbitrary code via the path

28RISCO

abrir ↗

Referência

CVE-2014-9148

CVE-2014-9148—

Fiyo CMS 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the (1) "Install and Update"

28RISCO

abrir ↗

Referência

CVE-2018-12453

CVE-2018-12453—

Type confusion in the xgroupCommand function in t_stream.c in redis-server in Redis before 5.0 allows remote attackers t

28RISCO

abrir ↗

Referência

CVE-2016-5725

CVE-2016-5725—

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allow

28RISCO

abrir ↗

Referência

CVE-2014-9148

CVE-2014-9148—

Fiyo CMS 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the (1) "Install and Update"

28RISCO

abrir ↗

Referência

CVE-2019-6274

CVE-2019-6274—

Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote atta

28RISCO

abrir ↗

Referência

CVE-2019-6274

CVE-2019-6274—

Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote atta

28RISCO

abrir ↗

Referência

CVE-2022-22831

CVE-2022-22831—

An issue was discovered in Servisnet Tessa 0.0.2. An attacker can add a new sysadmin user via a manipulation of the Auth

28RISCO

abrir ↗

Referência

Servisnet Tessa - Add sysAdmin User (Unauthenticated) (Metasploit)

CVE-2022-22831—

An issue was discovered in Servisnet Tessa 0.0.2. An attacker can add a new sysadmin user via a manipulation of the Auth

28RISCO

abrir ↗

Referência

CVE-2014-9147

CVE-2014-9147—

Fiyo CMS 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to the database backup fil

28RISCO

abrir ↗

Referência

CVE-2014-9147

CVE-2014-9147—

Fiyo CMS 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to the database backup fil

28RISCO

abrir ↗

Referência

CVE-2010-1878

CVE-2010-1878—

Directory traversal vulnerability in the OrgChart (com_orgchart) component 1.0.0 for Joomla! allows remote attackers to

43RISCO

abrir ↗

Referência

CVE-2010-1878

CVE-2010-1878—

Directory traversal vulnerability in the OrgChart (com_orgchart) component 1.0.0 for Joomla! allows remote attackers to

43RISCO

abrir ↗

Referência

CVE-2010-1199

CVE-2010-1199—

Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,

28RISCO

abrir ↗

Referência

CVE-2020-24365

CVE-2020-24365—

An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic n

28RISCO

abrir ↗

Referência

CVE-2010-1056

CVE-2010-1056—

Directory traversal vulnerability in the RokDownloads (com_rokdownloads) component before 1.0.1 for Joomla! allows remot

43RISCO

abrir ↗

Referência

CVE-2010-1056

CVE-2010-1056—

Directory traversal vulnerability in the RokDownloads (com_rokdownloads) component before 1.0.1 for Joomla! allows remot

43RISCO

abrir ↗

Referência

TylerTech Eagle 2018.3.11 - Remote Code Execution

CVE-2019-16112—

TylerTech Eagle 2018.3.11 deserializes untrusted user input, resulting in remote code execution via a crafted Java objec

28RISCO

abrir ↗

Referência

CVE-2018-11492

CVE-2018-11492—

ASUS HG100 devices allow denial of service via an IPv4 packet flood.

28RISCO

abrir ↗

Referência

CVE-2018-11492

CVE-2018-11492—

ASUS HG100 devices allow denial of service via an IPv4 packet flood.

28RISCO

abrir ↗

Referência

CVE-2017-8472

CVE-2017-8472—

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 allow an authenticated attacker to

23RISCO

abrir ↗

Referência

CVE-2016-5725

CVE-2016-5725—

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allow

28RISCO

abrir ↗

Referência

CVE-2010-5286

CVE-2010-5286—

Directory traversal vulnerability in Jstore (com_jstore) component for Joomla! allows remote attackers to read arbitrary

43RISCO

abrir ↗

Referência

CVE-2022-2651

CVE-2022-2651CRITICAL

Authentication Bypass by Primary Weakness in bookwyrm-social/bookwyrm

53RISCO

abrir ↗

Referência

CVE-2016-3716

CVE-2016-3716—

The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via

28RISCO

abrir ↗

Referência

Online Media Technologies 'AVSMJPEGFILE.DLL 1.1' - Remote Buffer Overflow (PoC)

CVE-2007-6327—

Buffer overflow in a certain ActiveX control in Online Media Technologies AVSMJPEGFILE.DLL 1.1.1.102 allows remote attac

28RISCO

abrir ↗

Referência

Black Ice Software Annotation Plugin - 'BiAnno.ocx' Remote Buffer Overflow

CVE-2008-2745—

Stack-based buffer overflow in BiAnno ActiveX Control (BiAnno.ocx) in Black Ice Software Annotation Plugin 10.95 allows

28RISCO

abrir ↗

Referência

Black Ice Software Annotation Plugin - 'BiAnno.ocx' Remote Buffer Overflow (2)

CVE-2008-2745—

Stack-based buffer overflow in BiAnno ActiveX Control (BiAnno.ocx) in Black Ice Software Annotation Plugin 10.95 allows

28RISCO

abrir ↗

Referência

CVE-2016-2210

CVE-2016-2210—

Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.