Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.062exploits catalogados

31.617CVEs com exploração pública

0testados em laboratório

Todos Exploit-DB 22.467Referência 19.791GitHub PoC 13.086VulnCheck XDB 8.069Nuclei 4.187Metasploit 3.462✓ só verificadosrecentes populares risco

19.791 exploits

Referência

CVE-2010-2075

CVE-2010-2075—

UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally

60RISCO

Referência

CVE-2013-5311

CVE-2013-5311—

Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL com

23RISCO

Referência

CVE-2016-5195

CVE-2016-5195HIGHsob ataque

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Referência

CVE-2016-5195

CVE-2016-5195HIGHsob ataque

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Referência

CVE-2016-5195

CVE-2016-5195HIGHsob ataque

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Referência

CVE-2016-5195

CVE-2016-5195HIGHsob ataque

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Referência

CVE-2016-5195

CVE-2016-5195HIGHsob ataque

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Referência

CVE-2016-5195

CVE-2016-5195HIGHsob ataque

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Referência

CVE-2016-5195

CVE-2016-5195HIGHsob ataque

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Referência

CVE-2016-5195

CVE-2016-5195HIGHsob ataque

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Referência

CVE-2016-5195

CVE-2016-5195HIGHsob ataque

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Referência

CVE-2016-5195

CVE-2016-5195HIGHsob ataque

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Referência

CVE-2017-11317

CVE-2017-11317CRITICALsob ataque

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload

100RISCO

Referência

Sun Board 1.00.00 alpha - Remote File Inclusion

CVE-2007-3370—

Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrar

45RISCO

Referência

CVE-2015-0779

CVE-2015-0779—

Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11

60RISCO

Referência

CVE-2010-3765

CVE-2010-3765CRITICALsob ataque

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, a

100RISCO

Referência

CVE-2010-3765

CVE-2010-3765CRITICALsob ataque

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, a

100RISCO

Referência

CVE-2010-3765

CVE-2010-3765CRITICALsob ataque

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, a

100RISCO

Referência

CVE-2020-7246

CVE-2020-7246—

A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code

60RISCO

Referência

CVE-2020-7246

CVE-2020-7246—

A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code

60RISCO

Referência

CVE-2020-7246

CVE-2020-7246—

A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code

60RISCO

Referência

CVE-2020-7246

CVE-2020-7246—

A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code

60RISCO

Referência

CVE-2017-5817

CVE-2017-5817—

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

60RISCO

Referência

CVE-2017-5817

CVE-2017-5817—

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

60RISCO

Referência

CVE-2018-17254

CVE-2018-17254—

The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter.

60RISCO

Referência

CVE-2019-7194

CVE-2019-7194CRITICALsob ataqueransomware

This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fi

100RISCO

Referência

CVE-2019-14470

CVE-2019-14470—

cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has X

60RISCO

Referência

WordPress Plugin UserPro 4.9.32 - Cross-Site Scripting

CVE-2019-14470—

cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has X

60RISCO

Referência

CVE-2020-7980

CVE-2020-7980—

Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to th

60RISCO

Referência

CVE-2018-16763

CVE-2018-16763—

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca

60RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.