Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.445exploits catalogados

34.432CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

21.497 exploits

Referência

CVE-2019-25487

CVE-2019-25487CRITICAL

SAPIDO RB-1732 V2.0.43 Remote Command Execution via formSysCmd

48RISCO

abrir ↗

Referência✓ VexDay Proof

Invision Power Board 2.1.4 - Register Users Denial of Service

CVE-2006-0888—dosmultiple

index.php in Invision Power Board (IPB) 2.0.1, with Code Confirmation disabled, allows remote attackers to cause an unsp

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component LMO 1.0b2 - Remote File Inclusion

CVE-2006-3970—webappsphp

PHP remote file inclusion vulnerability in lmo.php in the LMO Component (com_lmo) 1.0b2 and earlier for Joomla! allows r

23RISCO

abrir ↗

Referência

CVE-2017-11398

CVE-2017-11398—

A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 an

23RISCO

abrir ↗

Referência✓ VexDay Proof

UNAK-CMS 1.5 - 'dirroot' Remote File Inclusion

CVE-2006-4890—webappsphp

Multiple PHP remote file inclusion vulnerabilities in UNAK-CMS 1.5 and earlier allow remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

CWB PRO 1.5 - 'INCLUDE_PATH' Remote File Inclusion

CVE-2007-1809—webappsphp

Multiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder (CWB) PRO 1.5 allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

XnView 1.92.1 - 'FontName' Slideshow Buffer Overflow

CVE-2008-0069—localwindows

Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPStore Real Estate - Arbitrary File Upload

CVE-2008-6930—webappsphp

Unrestricted file upload vulnerability in PHPStore Real Estate allows remote authenticated users to execute arbitrary co

23RISCO

abrir ↗

Referência

CVE-2015-3313

CVE-2015-3313—

SQL injection vulnerability in WordPress Community Events plugin before 1.4.

23RISCO

abrir ↗

Referência

CVE-2015-3313

CVE-2015-3313—

SQL injection vulnerability in WordPress Community Events plugin before 1.4.

23RISCO

abrir ↗

Referência

CVE-2014-8393

CVE-2014-8393—

DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel

23RISCO

abrir ↗

Referência

CVE-2006-2152

CVE-2006-2152—

PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier, when regist

23RISCO

abrir ↗

Referência

CVE-2017-13262

CVE-2017-13262—

In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. Th

23RISCO

abrir ↗

Referência

CVE-2017-13262

CVE-2017-13262—

In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. Th

23RISCO

abrir ↗

Referência✓ VexDay Proof

SysInfo 1.21 - 'sysinfo.cgi' Remote Command Execution

CVE-2006-1831—webappscgi

Direct static code injection vulnerability in sysinfo.cgi in sysinfo 1.21 and possibly other versions before 2.25 allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Advanced Guestbook 2.4.0 - 'phpBB' File Inclusion

CVE-2006-2152—webappsphp

PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier, when regist

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple Web Content Management System - SQL Injection

CVE-2007-0093—webappsphp

SQL injection vulnerability in page.php in Simple Web Content Management System allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2018-8532

CVE-2018-8532—

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious

28RISCO

abrir ↗

Referência

CVE-2017-14087

CVE-2017-14087—

A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Ho

23RISCO

abrir ↗

Referência

CVE-2017-14087

CVE-2017-14087—

A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Ho

23RISCO

abrir ↗

Referência

CVE-2012-0276

CVE-2012-0276—

Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (applicat

23RISCO

abrir ↗

Referência

CVE-2012-0276

CVE-2012-0276—

Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (applicat

23RISCO

abrir ↗

Referência

CVE-2010-1930

CVE-2010-1930—

Off-by-one error in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allows remote attackers to cause a denial of service (dae

23RISCO

abrir ↗

Referência✓ VexDay Proof

OllyDBG 1.10 and ImpREC 1.7f - Export Name Buffer Overflow

CVE-2008-3148—localwindows

Stack-based buffer overflow in (1) OllyDBG 1.10 and (2) ImpREC 1.7f allows user-assisted attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nokia N95-8 browser - 'setAttributeNode' Method Crash

CVE-2009-0649—doshardware

The web browser in Symbian OS on the Nokia N95 cell phone allows remote attackers to cause a denial of service (crash) v

23RISCO

abrir ↗

Referência

CVE-2015-4038

CVE-2015-4038—

The WP Membership plugin 1.2.3 for WordPress allows remote authenticated users to gain administrator privileges via an i

23RISCO

abrir ↗

Referência

FTP Server 1.32 - Denial of Service

CVE-2019-9600—dosandroid

The Olive Tree FTP Server (aka com.theolivetree.ftpserver) application through 1.32 for Android allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2015-1362

CVE-2015-1362—

Buffer overflow in the Customize 35mm tab in Two Pilots Exif Pilot 4.7.2 allows remote attackers to execute arbitrary co

23RISCO

abrir ↗

Referência

CVE-2015-1362

CVE-2015-1362—

Buffer overflow in the Customize 35mm tab in Two Pilots Exif Pilot 4.7.2 allows remote attackers to execute arbitrary co

23RISCO

abrir ↗

Referência✓ VexDay Proof

ApowerManager 3.1.7 - Phone Manager Remote Denial of Service (PoC)

CVE-2019-9601—dosandroid

The ApowerManager application through 3.1.7 for Android allows remote attackers to cause a denial of service via many si

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.