Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.008exploits catalogados

34.638CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.662 exploits

Referência✓ VexDay Proof

PPStream - 'PowerPlayer.dll 2.0.1.3829' ActiveX Remote Overflow

CVE-2007-4748—remotewindows

Buffer overflow in the PowerPlayer.dll ActiveX control in PPStream 2.0.1.3829 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

EB Design Pty Ltd - 'EBCRYPT.dll 2.0' Multiple Remote Vulnerabilities

CVE-2007-5110—remotewindows

Absolute path traversal vulnerability in the EbCrypt.eb_c_PRNGenerator.1 ActiveX control in EBCRYPT.DLL 2.0.0.2087 and e

23RISCO

abrir ↗

Referência✓ VexDay Proof

Check Point Firewall-1 - PKI Web Service HTTP Header Remote Overflow

CVE-2009-1227—doshardware

NOTE: this issue has been disputed by the vendor. Buffer overflow in the PKI Web Service in Check Point Firewall-1 PKI

23RISCO

abrir ↗

Referência

CVE-2017-6359

CVE-2017-6359—

QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and execute arbitrary commands vi

28RISCO

abrir ↗

Referência

CVE-2010-4055

CVE-2010-4055—

Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a denia

23RISCO

abrir ↗

Referência

CVE-2010-4057

CVE-2010-4057—

solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon recei

23RISCO

abrir ↗

Referência

CVE-2014-9350

CVE-2014-9350—

TP-Link TL-WR740N 4 with firmware 3.17.0 Build 140520, 3.16.6 Build 130529, and 3.16.4 Build 130205 allows remote attack

23RISCO

abrir ↗

Referência

CVE-2014-9350

CVE-2014-9350—

TP-Link TL-WR740N 4 with firmware 3.17.0 Build 140520, 3.16.6 Build 130529, and 3.16.4 Build 130205 allows remote attack

23RISCO

abrir ↗

Referência

CVE-2012-0292

CVE-2012-0292—

The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.

23RISCO

abrir ↗

Referência

CVE-2014-3418

CVE-2014-3418—

config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via she

23RISCO

abrir ↗

Referência

CVE-2015-5533

CVE-2015-5533—

SQL injection vulnerability in counter-options.php in the Count Per Day plugin before 3.4.1 for WordPress allows remote

23RISCO

abrir ↗

Referência

CVE-2015-5533

CVE-2015-5533—

SQL injection vulnerability in counter-options.php in the Count Per Day plugin before 3.4.1 for WordPress allows remote

23RISCO

abrir ↗

Referência

CVE-2021-21276

CVE-2021-21276CRITICAL

Privilege escalation in Polr

48RISCO

abrir ↗

Referência

CVE-2016-15048

CVE-2016-15048CRITICAL

AMTT HiBOS Command Injection RCE via server_ping.php

48RISCO

abrir ↗

Referência

CVE-2022-24707

CVE-2022-24707HIGH

SQL injection in anuko timetracker

41RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Core 2.1.2 - 'xmlrpc' SQL Injection

CVE-2007-1897—webappsphp

SQL injection vulnerability in xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated

23RISCO

abrir ↗

Referência✓ VexDay Proof

WengoPhone 2.x - SIP Phone Remote Denial of Service

CVE-2007-4366—doswindows

WengoPhone 2.1 allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a Co

23RISCO

abrir ↗

Referência

CVE-2010-0607

CVE-2010-0607—

Cross-site scripting (XSS) vulnerability in Forms/status_statistics_1 in the Sterlite SAM300 AX Router allows remote att

23RISCO

abrir ↗

Referência

CVE-2023-36346

CVE-2023-36346—

POS Codekop v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the nm_member parame

38RISCO

abrir ↗

Referência

CVE-2010-0610

CVE-2010-0610—

Multiple SQL injection vulnerabilities in the Photoblog (com_photoblog) component for Joomla! allow remote attackers to

23RISCO

abrir ↗

Referência

CVE-2010-0610

CVE-2010-0610—

Multiple SQL injection vulnerabilities in the Photoblog (com_photoblog) component for Joomla! allow remote attackers to

23RISCO

abrir ↗

Referência

CVE-2010-0611

CVE-2010-0611—

Multiple SQL injection vulnerabilities in adminlogin.php in Baal Systems 3.8 and earlier allow remote attackers to execu

23RISCO

abrir ↗

Referência

CVE-2016-1001

CVE-2016-1001—

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows an

28RISCO

abrir ↗

Referência

CVE-2014-2994

CVE-2014-2994—

Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to exec

28RISCO

abrir ↗

Referência

CVE-2010-0611

CVE-2010-0611—

Multiple SQL injection vulnerabilities in adminlogin.php in Baal Systems 3.8 and earlier allow remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

gCards 1.45 - Multiple Vulnerabilities

CVE-2006-1346—webappsphp

Directory traversal vulnerability in inc/setLang.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pi3Web 2.0.3 - 'ISAPI' Remote Denial of Service

CVE-2008-6938—doswindows

Pi3Web 2.0.3 before PL2, when installed on Windows as a desktop application and without using the Pi3Web/Conf/Intenet.pi

43RISCO

abrir ↗

Referência✓ VexDay Proof

Mini-stream Ripper 3.0.1.1 - '.m3u' Universal Stack Overflow

CVE-2009-1325—localwindows

Stack-based buffer overflow in Mini-stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long U

23RISCO

abrir ↗

Referência

CVE-2010-0631

CVE-2010-0631—

Multiple SQL injection vulnerabilities in index.php in Eicra Car Rental-Script, when the plugin_id parameter is 4, allow

23RISCO

abrir ↗

Referência

CVE-2010-0632

CVE-2010-0632—

SQL injection vulnerability in the Parkview Consultants SimpleFAQ (com_simplefaq) component for Joomla! allows remote at

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.