Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.008exploits catalogados

34.638CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

8.460 exploits

VulnCheck XDB

infoleak

CVE-2014-0160HIGHsob ataque10 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

VulnCheck XDB

infoleak

CVE-2014-0160HIGHsob ataque09 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

VulnCheck XDB

infoleak

CVE-2014-0160HIGHsob ataque09 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

VulnCheck XDB

infoleak

CVE-2014-0160HIGHsob ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

VulnCheck XDB

infoleak

CVE-2014-0160HIGHsob ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

VulnCheck XDB

infoleak

CVE-2014-0160HIGHsob ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

VulnCheck XDB

infoleak

CVE-2014-0160HIGHsob ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

VulnCheck XDB

infoleak

CVE-2014-0160HIGHsob ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

VulnCheck XDB

infoleak

CVE-2014-0160HIGHsob ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

VulnCheck XDB

infoleak

CVE-2014-0160HIGHsob ataque07 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

VulnCheck XDB

remote-with-credentials

CVE-2012-3153—28 jan 2014

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and

60RISCO

VulnCheck XDB

local

CVE-2013-6282HIGHsob ataque21 dez 2013

The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not

98RISCO

VulnCheck XDB

client-side

CVE-2013-3893HIGHsob ataque15 out 2013

Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 throug

100RISCO

VulnCheck XDB

local

CVE-2013-2595—03 out 2013

The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm

23RISCO

VulnCheck XDB

initial-access

CVE-2022-22954CRITICALsob ataqueransomware01 out 2013

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RISCO

VulnCheck XDB

denial-of-service

CVE-2013-1300—09 set 2013

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, W

43RISCO

VulnCheck XDB

local

CVE-2013-2596HIGHsob ataque16 jul 2013

Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain

71RISCO

VulnCheck XDB

initial-access

CVE-2013-2597HIGHsob ataque11 jun 2013

Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6

71RISCO

VulnCheck XDB

local

CVE-2013-2094HIGHsob ataque05 jun 2013

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data t

83RISCO

VulnCheck XDB

local

CVE-2013-2094HIGHsob ataque20 mai 2013

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data t

83RISCO

VulnCheck XDB

remote-with-credentials

CVE-2013-2729HIGHsob ataque15 mai 2013

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attack

83RISCO

VulnCheck XDB

denial-of-service

CVE-2013-0156—11 jan 2013

active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, an

60RISCO

VulnCheck XDB

local

CVE-2012-0056—29 dez 2012

The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when

28RISCO

VulnCheck XDB

local

CVE-2021-1732HIGHsob ataqueransomware01 jan 0001

Windows Win32k Elevation of Privilege Vulnerability

100RISCO

VulnCheck XDB

local

CVE-2019-0211HIGHsob ataque01 jan 0001

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privilege

83RISCO

VulnCheck XDB

client-side

CVE-2018-8174HIGHsob ataqueransomware01 jan 0001

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows

93RISCO

VulnCheck XDB

initial-access

CVE-2022-20699CRITICALsob ataque01 jan 0001

Cisco Small Business RV Series Routers Vulnerabilities

100RISCO

VulnCheck XDB

initial-access

CVE-2019-11580CRITICALsob ataqueransomware01 jan 0001

Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attac

100RISCO

VulnCheck XDB

initial-access

CVE-2021-44228CRITICALsob ataqueransomware01 jan 0001

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

VulnCheck XDB

client-side

CVE-2018-0802HIGHsob ataque01 jan 0001

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow

93RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.