Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.526exploits catalogados

34.478CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.534GitHub PoC 13.654VulnCheck XDB 8.213Nuclei 4.218Metasploit 3.464✓ só verificadosrecentes populares risco

21.534 exploits

Referência

CVE-2018-16083

CVE-2018-16083—

An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote

23RISCO

abrir ↗

Referência

CVE-2012-1198

CVE-2012-1198—

base_ag_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allows remote attackers to execute arbitrary code by

23RISCO

abrir ↗

Referência

CVE-2017-13797

CVE-2017-13797—

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud

23RISCO

abrir ↗

Referência

CVE-2016-1769

CVE-2016-1769—

QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (m

23RISCO

abrir ↗

Referência

CVE-2016-1767

CVE-2016-1767—

QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (m

23RISCO

abrir ↗

Referência

CVE-2017-14507

CVE-2017-14507—

Multiple SQL injection vulnerabilities in the Content Timeline plugin 4.4.2 for WordPress allow remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2015-4614

CVE-2015-4614—

Multiple SQL injection vulnerabilities in includes/Function.php in the Easy2Map plugin before 1.2.5 for WordPress allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

Snircd 1.3.4 - 'send_user_mode' Denial of Service

CVE-2008-1501—dosmultiple

The send_user_mode function in s_user.c in (1) Undernet ircu 2.10.12.12 and earlier, (2) snircd 1.3.4 and earlier, and u

23RISCO

abrir ↗

Referência

CVE-2009-4581

CVE-2009-4581—

Directory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when magic_quotes_gpc is dis

23RISCO

abrir ↗

Referência

CVE-2009-4581

CVE-2009-4581—

Directory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when magic_quotes_gpc is dis

23RISCO

abrir ↗

Referência✓ VexDay Proof

WinFTP Server 2.3.0 - 'LIST' (Authenticated) Remote Buffer Overflow

CVE-2009-0351—remotewindows

Stack-based buffer overflow in WFTPSRV.exe in WinFTP 2.3.0 allows remote authenticated users to execute arbitrary code v

23RISCO

abrir ↗

Referência

CVE-2015-5287

CVE-2015-5287—

The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain perm

38RISCO

abrir ↗

Referência

CVE-2021-26855

CVE-2021-26855CRITICALsob ataqueransomware

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2021-26855

CVE-2021-26855CRITICALsob ataqueransomware

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2018-8550

CVE-2018-8550—

An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerabili

23RISCO

abrir ↗

Referência

CVE-2010-1092

CVE-2010-1092—

Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to

23RISCO

abrir ↗

Referência

CVE-2017-18001

CVE-2017-18001—

Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the de

28RISCO

abrir ↗

Referência

CVE-2024-6928

CVE-2024-6928CRITICAL

Opti Marketing <= 2.0.9 - Unauthenticated SQLi

63RISCO

abrir ↗

Referência

CVE-2024-6924

CVE-2024-6924CRITICAL

TrueBooker < 1.0.3 - Multiple Unauthenticated SQLi

63RISCO

abrir ↗

Referência

CVE-2024-6926

CVE-2024-6926CRITICAL

Viral Signup <= 2.1 - Unauthenticated SQLi

63RISCO

abrir ↗

Referência

CVE-2023-7095

CVE-2023-7095CRITICAL

Totolink A7100RU HTTP POST Request main buffer overflow

53RISCO

abrir ↗

Referência

CVE-2017-7783

CVE-2017-7783—

If a long user name is used in a username/password combination in a site URL (such as " http://UserName:Password@example

28RISCO

abrir ↗

Referência

CVE-2017-16353

CVE-2017-16353—

GraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function

28RISCO

abrir ↗

Referência

CVE-2017-8870

CVE-2017-8870—

Buffer overflow in AudioCoder 0.8.46 allows remote attackers to execute arbitrary code via a crafted .m3u file.

43RISCO

abrir ↗

Referência✓ VexDay Proof

Blog:CMS 4.1.3 - 'NP_UserSharing.php' Remote File Inclusion

CVE-2006-6552—webappsphp

PHP remote file inclusion vulnerability in admin/plugins/NP_UserSharing.php in BLOG:CMS 4.1.3 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jupiter CMS 1.1.5 - '/index.php' Local/Remote File Inclusion

CVE-2007-0986—webappsphp

PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5, when PHP 5.0.0 or later is used, allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

AMX Corp. VNC ActiveX Control - 'AmxVnc.dll 1.0.13.0' Remote Buffer Overflow

CVE-2007-3536—remotewindows

Multiple buffer overflows in the AMX NetLinx VNC (AmxVnc) ActiveX control in AmxVnc.dll 1.0.13.0 allow remote attackers

28RISCO

abrir ↗

Referência✓ VexDay Proof

PHPress 0.2.0 - 'adisplay.php?lang' Local File Inclusion

CVE-2007-4524—webappsphp

PHP remote file inclusion vulnerability in adisplay.php in PhPress 0.2.0 allows remote attackers to execute arbitrary PH

23RISCO

abrir ↗

Referência

CVE-2011-4813

CVE-2011-4813—

Directory traversal vulnerability in clientarea.php in WHMCompleteSolution (WHMCS) 3.x.x allows remote attackers to read

23RISCO

abrir ↗

Referência

CVE-2009-3182

CVE-2009-3182—

Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft Gazelle CMS 1.0 allows rem

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.