Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.589exploits catalogados

34.508CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8.216Nuclei 4.223Metasploit 3.464✓ só verificadosrecentes populares risco

21.554 exploits

Referência

CVE-2009-3484

CVE-2009-3484—

Stack-based buffer overflow in Core FTP 2.1 build 1612 allows user-assisted remote attackers to execute arbitrary code v

23RISCO

abrir ↗

Referência

CVE-2014-8356

CVE-2014-8356—

The web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote authenticated users to bypass intended a

23RISCO

abrir ↗

Referência

CVE-2014-8356

CVE-2014-8356—

The web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote authenticated users to bypass intended a

23RISCO

abrir ↗

Referência

CVE-2012-4864

CVE-2012-4864—

Oreans WinLicense 2.1.8.0 allows remote attackers to cause a denial of service (memory corruption and crash) and possibl

23RISCO

abrir ↗

Referência

CVE-2012-4864

CVE-2012-4864—

Oreans WinLicense 2.1.8.0 allows remote attackers to cause a denial of service (memory corruption and crash) and possibl

23RISCO

abrir ↗

Referência

CVE-2015-7250

CVE-2015-7250—

Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE

28RISCO

abrir ↗

Referência

CVE-2012-1933

CVE-2012-1933—

Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when register_global

23RISCO

abrir ↗

Referência

CVE-2018-8729

CVE-2018-8729—

Multiple cross-site scripting (XSS) vulnerabilities in the Activity Log plugin before 2.4.1 for WordPress allow remote a

23RISCO

abrir ↗

Referência

CVE-2013-4094

CVE-2013-4094—

The Key Management feature in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quake 3 Engine Client (Windows x86) - CS_ITEms Remote Overflow

CVE-2006-3401—doswindows_x86

Stack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows remote attackers to cause

23RISCO

abrir ↗

Referência✓ VexDay Proof

Activist Mobilization Platform (AMP) 3.2 - Remote File Inclusion

CVE-2007-1571—webappsphp

PHP remote file inclusion vulnerability in includes/base.php in Radical Designs Activist Mobilization Platform (AMP) 3.2

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! / Mambo Component New Article 1.1 - Remote File Inclusion

CVE-2007-2089—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo and

23RISCO

abrir ↗

Referência✓ VexDay Proof

Scribe 0.2 - PHP Remote Code Execution

CVE-2007-5822—webappsphp

Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inje

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX xnu 1228.3.13 - IPv6-ipcomp Remote kernel Denial of Service (PoC)

CVE-2008-0177—dosmultiple

The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check th

28RISCO

abrir ↗

Referência✓ VexDay Proof

RealVNC Windows Client 4.1.2 - Remote Denial of Service Crash (PoC)

CVE-2008-3493—doswindows

vncviewer.exe in RealVNC Windows Client 4.1.2.0 allows remote VNC servers to cause a denial of service (application cras

23RISCO

abrir ↗

Referência

CVE-2021-25094

CVE-2021-25094—

Tatsu < 3.3.12 - Unauthenticated RCE

60RISCO

abrir ↗

Referência

CVE-2015-2679

CVE-2015-2679—

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2015-2679

CVE-2015-2679—

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2010-3906

CVE-2010-3906—

Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Referência

CVE-2010-4401

CVE-2010-4401—

languages.inc.php in DynPG CMS 4.2.0 allows remote attackers to obtain sensitive information via a direct request, which

23RISCO

abrir ↗

Referência

CVE-2009-4775

CVE-2009-4775—

Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of

23RISCO

abrir ↗

Referência

CVE-2009-4775

CVE-2009-4775—

Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of

23RISCO

abrir ↗

Referência

CVE-2017-15035

CVE-2017-15035—

EmTec PyroBatchFTP before 3.18 allows remote servers to cause a denial of service (application crash).

23RISCO

abrir ↗

Referência

CVE-2016-1415

CVE-2016-1415—

Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to cause a denial of servi

23RISCO

abrir ↗

Referência

CVE-2009-4216

CVE-2009-4216—

Directory traversal vulnerability in funzioni/lib/menulast.php in klinza professional cms 5.0.1 and earlier allows remot

23RISCO

abrir ↗

Referência

CVE-2014-3139

CVE-2014-3139—

recoveryconsole/bpl/snmpd.php in Unitrends Enterprise Backup 7.3.0 allows remote attackers to bypass authentication by s

23RISCO

abrir ↗

Referência✓ VexDay Proof

Python 2.4.2 - 'realpath()' Local Stack Overflow

CVE-2006-1542—locallinux

Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ultra Crypto Component - 'CryptoX.dll 2.0 SaveToFile()' Insecure Method

CVE-2007-4902—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Co

23RISCO

abrir ↗

Referência✓ VexDay Proof

idmos-phoenix CMS - 'aural.php' Remote File Inclusion

CVE-2007-5294—webappsphp

PHP remote file inclusion vulnerability in core/aural.php in IDMOS 1.0-beta (aka Phoenix) allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

freeSSHd 1.2.1 - (Authenticated) Remote Stack Overflow (PoC)

CVE-2008-2573—doswindows

Stack-based buffer overflow in SFTP in freeSSHd 1.2.1 allows remote authenticated users to execute arbitrary code via a

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.