Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.902exploits catalogados

34.597CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentes populares risco

21.624 exploits

Referência

CVE-2016-7612

CVE-2016-7612—

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchO

23RISCO

abrir ↗

Referência

CVE-2023-32560

CVE-2023-32560HIGH

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disrup

78RISCO

abrir ↗

Referência

CVE-2023-32560

CVE-2023-32560HIGH

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disrup

78RISCO

abrir ↗

Referência

CVE-2020-7209

CVE-2020-7209—

LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.

60RISCO

abrir ↗

Referência

CVE-2020-7209

CVE-2020-7209—

LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.

60RISCO

abrir ↗

Referência

CVE-2010-1955

CVE-2010-1955—

Directory traversal vulnerability in the Deluxe Blog Factory (com_blogfactory) component 1.1.2 for Joomla! allows remote

43RISCO

abrir ↗

Referência

CVE-2010-1956

CVE-2010-1956—

Directory traversal vulnerability in the Gadget Factory (com_gadgetfactory) component 1.0.0 and 1.5.0 for Joomla! allows

43RISCO

abrir ↗

Referência

CVE-2010-1956

CVE-2010-1956—

Directory traversal vulnerability in the Gadget Factory (com_gadgetfactory) component 1.0.0 and 1.5.0 for Joomla! allows

43RISCO

abrir ↗

Referência

CVE-2010-1957

CVE-2010-1957—

Directory traversal vulnerability in the Love Factory (com_lovefactory) component 1.3.4 for Joomla! allows remote attack

43RISCO

abrir ↗

Referência

CVE-2010-1957

CVE-2010-1957—

Directory traversal vulnerability in the Love Factory (com_lovefactory) component 1.3.4 for Joomla! allows remote attack

43RISCO

abrir ↗

Referência✓ VexDay Proof

Knowledge Base Mod 2.0.2 - 'phpBB' Remote File Inclusion

CVE-2006-2134—webappsphp

PHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for PHPbb 2.0.2 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

Limbo CMS 1.0.4.2 - 'sql.php' Remote File Inclusion

CVE-2006-2142—webappsphp

PHP remote file inclusion vulnerability in classes/adodbt/sql.php in Limbo CMS 1.04 and earlier allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2019-11539

CVE-2019-11539HIGHsob ataqueransomware

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1R

100RISCO

abrir ↗

Referência

CVE-2019-11539

CVE-2019-11539HIGHsob ataqueransomware

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1R

100RISCO

abrir ↗

Referência

CVE-2019-11539

CVE-2019-11539HIGHsob ataqueransomware

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1R

100RISCO

abrir ↗

Referência

CVE-2019-5736

CVE-2019-5736—

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISCO

abrir ↗

Referência

CVE-2019-5736

CVE-2019-5736—

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISCO

abrir ↗

Referência

CVE-2019-5736

CVE-2019-5736—

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISCO

abrir ↗

Referência

CVE-2019-5736

CVE-2019-5736—

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISCO

abrir ↗

Referência

CVE-2024-0737

CVE-2024-0737MEDIUM

Xlightftpd Xlight FTP Server Login denial of service

33RISCO

abrir ↗

Referência

CVE-2019-17558

CVE-2019-17558HIGHsob ataque

Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A V

100RISCO

abrir ↗

Referência

CVE-2021-39144

CVE-2021-39144HIGHsob ataque

XStream is vulnerable to a Remote Command Execution attack

100RISCO

abrir ↗

Referência

CVE-2019-5418

CVE-2019-5418HIGHsob ataque

There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where spe

100RISCO

abrir ↗

Referência

CVE-2010-1980

CVE-2010-1980—

Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr (com_joomlaflickr) component 1.0.3 for Joomla

43RISCO

abrir ↗

Referência

CVE-2010-1980

CVE-2010-1980—

Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr (com_joomlaflickr) component 1.0.3 for Joomla

43RISCO

abrir ↗

Referência

CVE-2019-1003000

CVE-2019-1003000—

A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/

60RISCO

abrir ↗

Referência

CVE-2019-1003000

CVE-2019-1003000—

A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/

60RISCO

abrir ↗

Referência

CVE-2019-1003000

CVE-2019-1003000—

A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/

60RISCO

abrir ↗

Referência

CVE-2018-12613

CVE-2018-12613—

An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute

60RISCO

abrir ↗

Referência

CVE-2018-12613

CVE-2018-12613—

An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.