Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.526exploits catalogados

34.478CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.534GitHub PoC 13.654VulnCheck XDB 8.213Nuclei 4.218Metasploit 3.464✓ só verificadosrecentes populares risco

21.534 exploits

Referência✓ VexDay Proof

Linksys WRT54G Firmware 1.00.9 - Security Bypass (1)

CVE-2008-1247—remotehardware

The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts,

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP PORTAL - Remote Database Disclosure

CVE-2008-5562—webappsasp

ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Total Video Player 1.31 - 'DefaultSkin.ini' Local Stack Overflow

CVE-2009-0261—localwindows

Stack-based buffer overflow in EffectMatrix Total Video Player 1.31 allows user-assisted attackers to execute arbitrary

43RISCO

abrir ↗

Referência✓ VexDay Proof

FipsCMS Light 2.1 - 'db.mdb' Remote Database Disclosure

CVE-2009-2022—webappsasp

fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote

23RISCO

abrir ↗

Referência

CVE-2016-8021

CVE-2016-8021—

Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3

23RISCO

abrir ↗

Referência

CVE-2021-42165

CVE-2021-42165—

MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing c

28RISCO

abrir ↗

Referência

CVE-2019-1144

CVE-2019-1144HIGH

Microsoft Graphics Remote Code Execution Vulnerability

46RISCO

abrir ↗

Referência

CVE-2019-1145

CVE-2019-1145HIGH

Microsoft Graphics Remote Code Execution Vulnerability

46RISCO

abrir ↗

Referência

CVE-2021-20031

CVE-2021-20031—

A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management

43RISCO

abrir ↗

Referência

CVE-2018-6911

CVE-2018-6911—

The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS

28RISCO

abrir ↗

Referência

Mitrastar GPT-2541GNAC-N1 - Privilege escalation

CVE-2021-42165—remotehardware

MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing c

28RISCO

abrir ↗

Referência

CVE-2017-18256

CVE-2017-18256—

Brave Browser before 0.13.0 allows remote attackers to cause a denial of service (resource consumption) via a long alert

23RISCO

abrir ↗

Referência

CVE-2012-0904

CVE-2012-0904—

VLC media player 1.1.11 allows remote attackers to cause a denial of service (crash) via a long string in an amr file.

23RISCO

abrir ↗

Referência

CVE-2017-8477

CVE-2017-8477—

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2,

23RISCO

abrir ↗

Referência

CVE-2023-4114

CVE-2023-4114MEDIUM

PHP Jabbers Night Club Booking Software index.php cross site scripting

48RISCO

abrir ↗

Referência

CVE-2017-13876

CVE-2017-13876—

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS b

23RISCO

abrir ↗

Referência

CVE-2022-50794

CVE-2022-50794CRITICAL

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Command Injection via Username

48RISCO

abrir ↗

Referência✓ VexDay Proof

Agora 1.4 RC1 - 'MysqlfinderAdmin.php' Remote File Inclusion

CVE-2006-7194—webappsphp

PHP remote file inclusion vulnerability in modules/Mysqlfinder/MysqlfinderAdmin.php in Agora 1.4 RC1, when register_glob

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows Explorer - '.AVI' File Denial of Service

CVE-2007-0562—doswindows

Windows Explorer (explorer.exe) 6.0.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause

28RISCO

abrir ↗

Referência✓ VexDay Proof

Maian Recipe 1.0 - 'path_to_folder' Remote File Inclusion

CVE-2007-0848—webappsphp

PHP remote file inclusion vulnerability in classes/class_mail.inc.php in Maian Recipe 1.0 allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual InterDev 6.0 SP6 - '.sln' Local Buffer Overflow (PoC)

CVE-2008-1709—doswindows

Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a St

28RISCO

abrir ↗

Referência✓ VexDay Proof

WebXell Editor 0.1.3 - Arbitrary File Upload

CVE-2008-3178—webappsphp

Unrestricted file upload vulnerability in upload_pictures.php in WebXell Editor 0.1.3 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vinagre < 2.24.2 - 'show_error()' Remote Format String (PoC)

CVE-2008-5660—doswindows

Format string vulnerability in the vinagre_utils_show_error function (src/vinagre-utils.c) in Vinagre 0.5.x before 0.5.2

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpEmployment - 'PHP Upload' Arbitrary File Upload

CVE-2008-6920—webappsphp

Unrestricted file upload vulnerability in auth.php in phpEmployment 1.8 allows remote attackers to execute arbitrary cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin Photoracer 1.0 - 'id' SQL Injection

CVE-2009-2122—webappsphp

SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote atta

23RISCO

abrir ↗

Referência

CVE-2017-13713

CVE-2017-13713—

T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user

23RISCO

abrir ↗

Referência

CVE-2017-13713

CVE-2017-13713—

T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user

23RISCO

abrir ↗

Referência

CVE-2017-13867

CVE-2017-13867—

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS b

23RISCO

abrir ↗

Referência

CVE-2010-1199

CVE-2010-1199—

Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,

28RISCO

abrir ↗

Referência

CVE-2017-2482

CVE-2017-2482—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.