Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

72.018exploits catalogados

32.219CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.023GitHub PoC 13.334VulnCheck XDB 8.195Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

20.023 exploits

Referência

CVE-2011-4342

CVE-2011-4342—

PHP remote file inclusion vulnerability in wp_xml_export.php in the BackWPup plugin before 1.7.2 for WordPress allows re

28RISCO

abrir ↗

Referência

CVE-2017-15878

CVE-2017-15878—

A cross-site scripting (XSS) vulnerability exists in fields/types/markdown/MarkdownType.js in KeystoneJS before 4.0.0-be

23RISCO

abrir ↗

Referência

CVE-2017-15878

CVE-2017-15878—

A cross-site scripting (XSS) vulnerability exists in fields/types/markdown/MarkdownType.js in KeystoneJS before 4.0.0-be

23RISCO

abrir ↗

Referência

Yaws < 1.80 - Multiple Headers Remote Denial of Service Vulnerabilities

CVE-2009-0751—

Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with

28RISCO

abrir ↗

Referência

CVE-2018-6220

CVE-2018-6220—

An arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject arbi

28RISCO

abrir ↗

Referência

Helix Server 11.0.1 (Windows 2000 SP4) - Remote Heap Overflow

CVE-2006-6026—

Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11.

28RISCO

abrir ↗

Referência

CVE-2013-5576

CVE-2013-5576—

administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before

50RISCO

abrir ↗

Referência

VUPlayer 2.49 - '.pls' Universal Buffer Overflow

CVE-2009-0182—

Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in

50RISCO

abrir ↗

Referência

CVE-2011-2657

CVE-2011-2657—

Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in Laun

50RISCO

abrir ↗

Referência

CVE-2018-9118

CVE-2018-9118—

exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Direct

50RISCO

abrir ↗

Referência

Apple QuickTime - 'rtsp URL Handler' Remote Stack Buffer Overflow

CVE-2007-0015—

Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a long rtsp:// URI.

50RISCO

abrir ↗

Referência

CVE-2014-2424

CVE-2014-2424—

Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote

50RISCO

abrir ↗

Referência

CVE-2014-2424

CVE-2014-2424—

Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote

50RISCO

abrir ↗

Referência

CVE-2017-11855

CVE-2017-11855—

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Window

35RISCO

abrir ↗

Referência

CVE-2013-0232

CVE-2013-0232—

includes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitra

50RISCO

abrir ↗

Referência

Libxine 1.14 - MPEG Stream Buffer Overflow (PoC)

CVE-2008-1110—

Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the xineplug_dmx_asf.so plugin in xine-lib before 1.1.1

28RISCO

abrir ↗

Referência

CVE-2010-2931

CVE-2010-2931—

Stack-based buffer overflow in SigPlus Pro 3.74 ActiveX control allows remote attackers to execute arbitrary code via a

23RISCO

abrir ↗

Referência

CVE-2014-9013

CVE-2014-9013—

The ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin 2.4.0 for WordPress allows remote auth

35RISCO

abrir ↗

Referência

acute control panel 1.0.0 - SQL Injection / Remote File Inclusion

CVE-2009-1247—

SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL c

28RISCO

abrir ↗

Referência

Java SE Runtime Environment JRE 6 Update 13 - Multiple Vulnerabilities

CVE-2009-1671—

Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Env

28RISCO

abrir ↗

Referência

CVE-2020-27932

CVE-2020-27932HIGHsob ataque

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS

76RISCO

abrir ↗

Referência

CVE-2012-3814

CVE-2012-3814—

Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote

28RISCO

abrir ↗

Referência

QnECMS 2.5.6 - 'adminfolderpath' Remote File Inclusion

CVE-2006-5627—

Multiple PHP remote file inclusion vulnerabilities in QnECMS 2.5.6 and earlier allow remote attackers to execute arbitra

28RISCO

abrir ↗

Referência

SolidState 0.4 - Multiple Remote File Inclusions

CVE-2006-5020—

Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbit

28RISCO

abrir ↗

Referência

CVE-2010-4701

CVE-2010-4701—

Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover

35RISCO

abrir ↗

Referência

CVE-2011-3981

CVE-2011-3981—

PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attac

28RISCO

abrir ↗

Referência

CVE-2019-16692

CVE-2019-16692—

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is us

28RISCO

abrir ↗

Referência

CVE-2012-1008

CVE-2012-1008—

OfficeSIP Server 3.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted To header in a SI

28RISCO

abrir ↗

Referência

CVE-2020-35737

CVE-2020-35737—

In Correspondence Management System (corms) in Newgen eGov 12.0, an attacker can modify other users' profile information

28RISCO

abrir ↗

Referência

Newgen Correspondence Management System (corms) eGov 12.0 - IDOR

CVE-2020-35737—

In Correspondence Management System (corms) in Newgen eGov 12.0, an attacker can modify other users' profile information

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.