Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.526exploits catalogados

34.478CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.534GitHub PoC 13.654VulnCheck XDB 8.213Nuclei 4.218Metasploit 3.464✓ só verificadosrecentes populares risco

21.534 exploits

Referência

CVE-2010-0707

CVE-2010-0707—

Cross-site request forgery (CSRF) vulnerability in add_user.php in Employee Timeclock Software 0.99 allows remote attack

23RISCO

abrir ↗

Referência

CVE-2010-0711

CVE-2010-0711—

Cross-site request forgery (CSRF) vulnerability in default.asp in ASPCode CMS 1.5.8, 2.0.0 Build 103, and possibly other

23RISCO

abrir ↗

Referência

CVE-2010-0721

CVE-2010-0721—

SQL injection vulnerability in news.php in Auktionshaus Gelb 3.0 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2010-0721

CVE-2010-0721—

SQL injection vulnerability in news.php in Auktionshaus Gelb 3.0 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2010-0722

CVE-2010-0722—

SQL injection vulnerability in news.php in Php Auktion Pro allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component MooFAQ (com_moofaq) - Local File Inclusion

CVE-2009-2015—webappsphp

Directory traversal vulnerability in includes/file_includer.php in the Ideal MooFAQ (com_moofaq) component 1.0 for Jooml

38RISCO

abrir ↗

Referência

CVE-2018-13110

CVE-2018-13110—

All ADB broadband gateways / routers based on the Epicentro platform are affected by a privilege escalation vulnerabilit

23RISCO

abrir ↗

Referência

CVE-2018-13110

CVE-2018-13110—

All ADB broadband gateways / routers based on the Epicentro platform are affected by a privilege escalation vulnerabilit

23RISCO

abrir ↗

Referência

CVE-2017-9122

CVE-2017-9122—

The quicktime_read_moov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (i

23RISCO

abrir ↗

Referência

CVE-2021-22555

CVE-2021-22555HIGHsob ataque

Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

100RISCO

abrir ↗

Referência

CVE-2018-15917

CVE-2018-15917—

Persistent cross-site scripting (XSS) issues in Jorani 0.6.5 allow remote attackers to inject arbitrary web script or HT

38RISCO

abrir ↗

Referência

CVE-2021-22555

CVE-2021-22555HIGHsob ataque

Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

100RISCO

abrir ↗

Referência

CVE-2011-5166

CVE-2011-5166—

Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string

23RISCO

abrir ↗

Referência

CVE-2011-5166

CVE-2011-5166—

Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string

23RISCO

abrir ↗

Referência

CVE-2011-5166

CVE-2011-5166—

Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string

23RISCO

abrir ↗

Referência

CSZ CMS 1.2.9 - 'Multiple' Blind SQLi(Authenticated)

CVE-2021-43701—webappsphp

CSZ CMS 1.2.9 has a Time and Boolean-based Blind SQL Injection vulnerability in the endpoint /admin/export/getcsv/articl

23RISCO

abrir ↗

Referência

CVE-2009-4665

CVE-2009-4665—

Directory traversal vulnerability in CuteSoft_Client/CuteEditor/Load.ashx in CuteSoft Components Cute Editor for ASP.NET

23RISCO

abrir ↗

Referência

CVE-2017-2476

CVE-2017-2476—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef

23RISCO

abrir ↗

Referência

CVE-2018-4089

CVE-2018-4089—

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safa

23RISCO

abrir ↗

Referência

CVE-2015-0569

CVE-2015-0569—

Heap-based buffer overflow in the private wireless extensions IOCTL implementation in wlan_hdd_wext.c in the WLAN (aka W

23RISCO

abrir ↗

Referência

CVE-2019-2413

CVE-2019-2413—

Vulnerability in the Oracle Reports Developer component of Oracle Fusion Middleware (subcomponent: Valid Session). The s

23RISCO

abrir ↗

Referência

CVE-2018-4386

CVE-2018-4386—

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iO

23RISCO

abrir ↗

Referência

CVE-2009-3318

CVE-2009-3318—

Directory traversal vulnerability in the Roland Breedveld Album (com_album) component 1.14 for Joomla! allows remote att

38RISCO

abrir ↗

Referência

CVE-2019-12137

CVE-2019-12137—

Typora 0.9.9.24.6 on macOS allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substr

23RISCO

abrir ↗

Referência

CVE-2016-6503

CVE-2016-6503—

The CORBA IDL dissectors in Wireshark 2.x before 2.0.5 on 64-bit Windows platforms do not properly interact with Visual

23RISCO

abrir ↗

Referência

CVE-2017-5227

CVE-2017-5227—

QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by

23RISCO

abrir ↗

Referência

CVE-2016-3717

CVE-2016-3717—

The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files vi

28RISCO

abrir ↗

Referência

CVE-2009-3272

CVE-2009-3272—

Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other versions before 4.1.2,

23RISCO

abrir ↗

Referência

CVE-2018-6221

CVE-2018-6221—

An unvalidated software update vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a man-in-the-middle

23RISCO

abrir ↗

Referência

CVE-2018-12589

CVE-2018-12589—

Polaris Office 2017 8.1 allows attackers to execute arbitrary code via a Trojan horse puiframeworkproresenu.dll file in

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.