Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.313exploits catalogados

34.834CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentes populares risco

21.797 exploits

Referência

CVE-2015-3205

CVE-2015-3205—

libmimedir allows remote attackers to execute arbitrary code via a VCF file with two NULL bytes at the end of the file,

28RISCO

abrir ↗

Referência

CVE-2015-3205

CVE-2015-3205—

libmimedir allows remote attackers to execute arbitrary code via a VCF file with two NULL bytes at the end of the file,

28RISCO

abrir ↗

Referência

CVE-2018-12908

CVE-2018-12908—

Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensiti

28RISCO

abrir ↗

Referência

CVE-2022-4681

CVE-2022-4681CRITICAL

Hide My WP < 6.2.9 - Unauthenticated SQLi

48RISCO

abrir ↗

Referência

CVE-2009-3115

CVE-2009-3115—

SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a c

28RISCO

abrir ↗

Referência

CVE-2017-15806

CVE-2017-15806—

The send function in the ezcMailMtaTransport class in Zeta Components Mail before 1.8.2 does not properly restrict the s

28RISCO

abrir ↗

Referência

CVE-2017-20216

CVE-2017-20216CRITICAL

FLIR Thermal Camera PT-Series firmware version 8.0.0.64 Unauthenticated Remote Command Injection

53RISCO

abrir ↗

Referência

CVE-2009-2924

CVE-2009-2924—

Multiple SQL injection vulnerabilities in Videos Broadcast Yourself 2 allow remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

CCProxy 6.2 - 'ping' Remote Buffer Overflow

CVE-2004-2685—remotewindows

Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long addre

28RISCO

abrir ↗

Referência

CVE-2018-12293

CVE-2018-12293—

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKi

28RISCO

abrir ↗

Referência

CVE-2018-12293

CVE-2018-12293—

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKi

28RISCO

abrir ↗

Referência

CVE-2020-15956

CVE-2020-15956—

ActiveMediaServer.exe in ACTi NVR3 Standard Server 3.0.12.42 allows remote unauthenticated attackers to trigger a buffer

28RISCO

abrir ↗

Referência

CVE-2023-29809

CVE-2023-29809CRITICAL

SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbit

53RISCO

abrir ↗

Referência

CVE-2009-2927

CVE-2009-2927—

SQL injection vulnerability in DetailFile.php in DigitalSpinners DS CMS 1.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2021-31682

CVE-2021-31682—

The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for re

43RISCO

abrir ↗

Referência

CVE-2012-0698

CVE-2012-0698—

tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash) via a crafted type_of

28RISCO

abrir ↗

Referência

CVE-2012-0698

CVE-2012-0698—

tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash) via a crafted type_of

28RISCO

abrir ↗

Referência

CVE-2022-37109

CVE-2022-37109CRITICAL

patrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Access

60RISCO

abrir ↗

Referência

CVE-2012-1803

CVE-2012-1803—

RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Ad

50RISCO

abrir ↗

Referência

CVE-2018-4222

CVE-2018-4222—

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud

28RISCO

abrir ↗

Referência

CVE-2022-46552

CVE-2022-46552HIGH

D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution (RCE) vulnerability via the lan

46RISCO

abrir ↗

Referência✓ VexDay Proof

Macrovision FlexNet DownloadManager - Insecure Methods

CVE-2008-4587—remotewindows

Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100.

28RISCO

abrir ↗

Referência

CVE-2015-4616

CVE-2015-4616—

Directory traversal vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.2.5 for WordPress allo

28RISCO

abrir ↗

Referência

CVE-2016-0736

CVE-2016-0736—

In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured c

35RISCO

abrir ↗

Referência

CVE-2018-9118

CVE-2018-9118—

exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Direct

50RISCO

abrir ↗

Referência

CVE-2020-6857

CVE-2020-6857—

CarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption key. The key for local FT

23RISCO

abrir ↗

Referência

CVE-2009-4828

CVE-2009-4828—

Cross-site request forgery (CSRF) vulnerability in administration/admins.php in Ad Manager Pro (aka AdManagerPro) 3.0 al

23RISCO

abrir ↗

Referência

CVE-2014-2424

CVE-2014-2424—

Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote

50RISCO

abrir ↗

Referência

CVE-2017-11855

CVE-2017-11855—

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Window

35RISCO

abrir ↗

Referência

CVE-2013-0232

CVE-2013-0232—

includes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitra

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.