Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.008exploits catalogados

34.638CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.662 exploits

Referência

CVE-2016-7188

CVE-2016-7188—

The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and 1607 mishandles librar

23RISCO

abrir ↗

Referência

CVE-2016-0093

CVE-2016-0093—

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, W

23RISCO

abrir ↗

Referência

CVE-2016-0094

CVE-2016-0094—

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, W

23RISCO

abrir ↗

Referência

CVE-2017-17062

CVE-2017-17062—

The backend component in Open-Xchange OX App Suite before 7.6.3-rev35, 7.8.x before 7.8.2-rev38, 7.8.3 before 7.8.3-rev4

23RISCO

abrir ↗

Referência

CVE-2017-17062

CVE-2017-17062—

The backend component in Open-Xchange OX App Suite before 7.6.3-rev35, 7.8.x before 7.8.2-rev38, 7.8.3 before 7.8.3-rev4

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows - DHCP Client Broadcast (MS06-036)

CVE-2006-2372—remotewindows

Buffer overflow in the DHCP Client service for Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Server 2003 up to

45RISCO

abrir ↗

Referência

CVE-2023-33863

CVE-2023-33863CRITICAL

SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-

48RISCO

abrir ↗

Referência

CVE-2023-3847

CVE-2023-3847LOW

mooSocial mooDating URL users cross site scripting

43RISCO

abrir ↗

Referência

CVE-2019-15999

CVE-2019-15999MEDIUM

Cisco Data Center Network Manager JBoss EAP Unauthorized Access Vulnerability

33RISCO

abrir ↗

Referência

CVE-2016-0728

CVE-2016-0728—

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref

23RISCO

abrir ↗

Referência

CVE-2023-36348

CVE-2023-36348—

POS Codekop v2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the filename p

23RISCO

abrir ↗

Referência

CVE-2010-2137

CVE-2010-2137—

PHP remote file inclusion vulnerability in _center.php in ProMan 0.1.1 and earlier allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2019-6214

CVE-2019-6214—

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.1

23RISCO

abrir ↗

Referência✓ VexDay Proof

openPHPNuke 2.3.3 - Remote File Inclusion

CVE-2006-2137—webappsphp

PHP remote file inclusion vulnerability in master.php in OpenPHPNuke and 2.3.3 earlier allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

DynamicPAD 1.02.18 - 'HomeDir' Remote File Inclusion

CVE-2007-2527—webappsphp

Multiple PHP remote file inclusion vulnerabilities in DynamicPAD before 1.03.31 allow remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Synactis All_IN_THE_BOX ActiveX 3.0 - Null Byte File Overwrite

CVE-2009-0465—remotewindows

The SaveDoc method in the All_In_The_Box.AllBox ActiveX control in ALL_IN_THE_BOX.OCX in Synactis ALL In-The-Box ActiveX

23RISCO

abrir ↗

Referência

CVE-2010-2141

CVE-2010-2141—

SQL injection vulnerability in index.php in NITRO Web Gallery allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2010-2141

CVE-2010-2141—

SQL injection vulnerability in index.php in NITRO Web Gallery allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2016-3411

CVE-2016-3411—

Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência

CVE-2010-2143

CVE-2010-2143—

Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to read arbitrary files and

23RISCO

abrir ↗

Referência

CVE-2018-12603

CVE-2018-12603—

Cross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote attackers to hijack the authen

23RISCO

abrir ↗

Referência

CVE-2018-12603

CVE-2018-12603—

Cross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote attackers to hijack the authen

23RISCO

abrir ↗

Referência

CVE-2017-17619

CVE-2017-17619—

Laundry Booking Script 1.0 has SQL Injection via the /list city parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17619

CVE-2017-17619—

Laundry Booking Script 1.0 has SQL Injection via the /list city parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17619

CVE-2017-17619—

Laundry Booking Script 1.0 has SQL Injection via the /list city parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17621

CVE-2017-17621—

Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.

23RISCO

abrir ↗

Referência

CVE-2013-6232

CVE-2013-6232—

Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2013-7375

CVE-2013-7375—

SQL injection vulnerability in includes/classes/Authenticate.class.php in PHP-Fusion 7.02.01 through 7.02.05 allows remo

23RISCO

abrir ↗

Referência

CVE-2013-7375

CVE-2013-7375—

SQL injection vulnerability in includes/classes/Authenticate.class.php in PHP-Fusion 7.02.01 through 7.02.05 allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyWebmin 1.0 - 'window.php' Remote File Inclusion

CVE-2006-5125—webappsphp

Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remo

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.