Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.957exploits catalogados

32.195CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8.182Nuclei 4.217Metasploit 3.462✓ só verificadosrecentes populares risco

20.023 exploits

Referência

eZip Wizard 3.0 - Local Stack Buffer Overflow (PoC) (SEH)

CVE-2009-1057—

MicroSmarts Enterprise ZipItFast! 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file that tri

23RISCO

abrir ↗

Referência

CVE-2015-2315

CVE-2015-2315—

Cross-site scripting (XSS) vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2014-5381

CVE-2014-5381—

Grand MA 300 allows a brute-force attack on the PIN.

23RISCO

abrir ↗

Referência

CVE-2022-47876

CVE-2022-47876CRITICAL

The integrator in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to create Jobs to execute arbitrary code v

48RISCO

abrir ↗

Referência

CVE-2017-0175

CVE-2017-0175—

The Windows kernel in Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows authenticated attackers to obtain sen

23RISCO

abrir ↗

Referência

RGameScript Pro - 'page.php?id' Remote File Inclusion

CVE-2007-3980—

PHP remote file inclusion vulnerability in page.php in RCMS Pro RGameScript Pro allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

SH-News 3.1 - 'scriptpath' Remote File Inclusion

CVE-2006-5282—

Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2010-3136

CVE-2010-3136—

Untrusted search path vulnerability in Skype 4.2.0.169 and earlier allows local users, and possibly remote attackers, to

23RISCO

abrir ↗

Referência

BS.Player 2.27 Build 959 - '.srt' File Buffer Overflow (PoC)

CVE-2008-6583—

Buffer overflow in BS.player 2.27 build 959 allows remote attackers to cause a denial of service (crash) and possibly ex

23RISCO

abrir ↗

Referência

CVE-2015-2527

CVE-2015-2527—

The process-initialization implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1,

23RISCO

abrir ↗

Referência

CVE-2018-5715

CVE-2018-5715—

phprint.php in SugarCRM 3.5.1 has XSS via a parameter name in the query string (aka a $key variable).

38RISCO

abrir ↗

Referência

CVE-2014-100029

CVE-2014-100029—

Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library (GDL) 4.2 allow remote atta

23RISCO

abrir ↗

Referência

EasyMail MessagePrinter Object - 'emprint.dll 6.0.1.0' Remote Buffer Overflow

CVE-2007-5070—

Heap-based buffer overflow in the EasyMailMessagePrinter ActiveX control in emprint.DLL 6.0.1.0 in the Quiksoft EasyMail

23RISCO

abrir ↗

Referência

CVE-2017-2365

CVE-2017-2365—

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS

23RISCO

abrir ↗

Referência

EZContents CMS 2.0.3 - Multiple Local File Inclusions

CVE-2008-7054—

Multiple directory traversal vulnerabilities in ezContents 2.0.3 allow remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-3468

CVE-2010-3468—

Directory traversal vulnerability in fileManager.cfc in Mura CMS 5.1 before 5.1.498 and 5.2 before 5.2.2809, and Sava CM

23RISCO

abrir ↗

Referência

CVE-2017-7018

CVE-2017-7018—

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iClo

23RISCO

abrir ↗

Referência

OpenX 2.6.3 - 'MAX_type' Local File Inclusion

CVE-2009-0291—

Directory traversal vulnerability in fc.php in OpenX 2.6.3 allows remote attackers to include and execute arbitrary file

23RISCO

abrir ↗

Referência

Supasite 1.23b - Multiple Remote File Inclusions

CVE-2007-2185—

Multiple PHP remote file inclusion vulnerabilities in Supasite 1.23b allow remote attackers to execute arbitrary PHP cod

23RISCO

abrir ↗

Referência

Kaqoo Auction - 'install_root' Multiple Remote File Inclusions

CVE-2007-1790—

Multiple PHP remote file inclusion vulnerabilities in Kaqoo Auction Software Free Edition allow remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2019-16679

CVE-2019-16679—

Gila CMS before 1.11.1 allows admin/fm/?f=../ directory traversal, leading to Local File Inclusion.

23RISCO

abrir ↗

Referência

CVE-2015-7897

CVE-2015-7897—

The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6 Edge befo

23RISCO

abrir ↗

Referência

CVE-2015-7897

CVE-2015-7897—

The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6 Edge befo

23RISCO

abrir ↗

Referência

CVE-2018-4240

CVE-2018-4240—

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS b

23RISCO

abrir ↗

Referência

P-Book 1.17 - 'pb_lang' Remote File Inclusion

CVE-2006-5667—

Multiple PHP remote file inclusion vulnerabilities in P-Book 1.17 and earlier allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2015-4593

CVE-2015-4593—

eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserServ

23RISCO

abrir ↗

Referência

CVE-2015-4593

CVE-2015-4593—

eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserServ

23RISCO

abrir ↗

Referência

Exponent CMS 0.96.3 - 'view' Remote Command Execution

CVE-2006-4963—

Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitr

23RISCO

abrir ↗

Referência

AssoCIateD CMS 1.1.3 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-2841—

Multiple PHP remote file inclusion vulnerabilities in AssoCIateD (aka ACID) CMS 1.1.3 allow remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2009-2403

CVE-2009-2403—

Heap-based buffer overflow in SCMPX 1.5.1 allows remote attackers to cause a denial of service (application crash) or ex

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.