Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.008exploits catalogados

34.638CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.662 exploits

Referência

CVE-2016-3861

CVE-2016-3861—

LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016

23RISCO

abrir ↗

Referência

CVE-2020-25762

CVE-2020-25762—

An issue was discovered in SourceCodester Seat Reservation System 1.0. The file admin_class.php does not perform input v

28RISCO

abrir ↗

Referência

CVE-2017-8476

CVE-2017-8476—

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,

23RISCO

abrir ↗

Referência

CVE-2014-1903

CVE-2014-1903—

admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12

50RISCO

abrir ↗

Referência

CVE-2020-25762

CVE-2020-25762—

An issue was discovered in SourceCodester Seat Reservation System 1.0. The file admin_class.php does not perform input v

28RISCO

abrir ↗

Referência

CVE-2024-21338

CVE-2024-21338HIGHsob ataqueransomware

Windows Kernel Elevation of Privilege Vulnerability

83RISCO

abrir ↗

Referência

CVE-2019-8929

CVE-2019-8929—

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zon

28RISCO

abrir ↗

Referência

CVE-2019-8929

CVE-2019-8929—

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zon

28RISCO

abrir ↗

Referência

CVE-2010-1979

CVE-2010-1979—

Directory traversal vulnerability in the Affiliate Datafeeds (com_datafeeds) component build 880 for Joomla! allows remo

43RISCO

abrir ↗

Referência

CVE-2017-1002001

CVE-2017-1002001—

Vulnerability in wordpress plugin mobile-app-builder-by-wappress v1.05, The plugin includes unlicensed vulnerable CMS so

28RISCO

abrir ↗

Referência

CVE-2014-1903

CVE-2014-1903—

admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12

50RISCO

abrir ↗

Referência

CVE-2016-8655

CVE-2016-8655—

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau

43RISCO

abrir ↗

Referência

CVE-2016-8655

CVE-2016-8655—

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau

43RISCO

abrir ↗

Referência

CVE-2016-8655

CVE-2016-8655—

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau

43RISCO

abrir ↗

Referência

CVE-2018-0946

CVE-2018-0946—

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

35RISCO

abrir ↗

Referência

CVE-2015-4632

CVE-2015-4632—

Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08

50RISCO

abrir ↗

Referência

CVE-2015-4632

CVE-2015-4632—

Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08

50RISCO

abrir ↗

Referência

CVE-2016-3288

CVE-2016-3288—

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page, aka "Internet E

35RISCO

abrir ↗

Referência

CVE-2014-5468

CVE-2014-5468—

A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cf

50RISCO

abrir ↗

Referência

CVE-2014-5468

CVE-2014-5468—

A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cf

50RISCO

abrir ↗

Referência

CVE-2015-2097

CVE-2015-2097—

Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary c

28RISCO

abrir ↗

Referência

CVE-2015-2097

CVE-2015-2097—

Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary c

28RISCO

abrir ↗

Referência

CVE-2015-2097

CVE-2015-2097—

Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary c

28RISCO

abrir ↗

Referência

CVE-2020-15261

CVE-2020-15261HIGH

Unquoted service path vulnerability on Veyon

46RISCO

abrir ↗

Referência

CVE-2013-4625

CVE-2013-4625—

Cross-site scripting (XSS) vulnerability in files/installer.cleanup.php in the Duplicator plugin before 0.4.5 for WordPr

43RISCO

abrir ↗

Referência

CVE-2016-8020

CVE-2016-8020—

Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earl

28RISCO

abrir ↗

Referência✓ VexDay Proof

BitDefender - Module pdf.xmd Infinite Loop Denial of Service (PoC)

CVE-2008-5409—doswindows

Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGu

28RISCO

abrir ↗

Referência

CVE-2009-4805

CVE-2009-4805—

Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magic_quotes_gpc is disabled, allow remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2009-4807

CVE-2009-4807—

Multiple SQL injection vulnerabilities in Graugon PHP Article Publisher 1.0 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2011-1761

CVE-2011-1761—

Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions in src/load_abc.cpp in l

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.