Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.894exploits catalogados

35.202CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 22.103GitHub PoC 14.055VulnCheck XDB 8.571Nuclei 4.250Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2009-4807

CVE-2009-4807—

Multiple SQL injection vulnerabilities in Graugon PHP Article Publisher 1.0 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2009-4809

CVE-2009-4809—

Directory traversal vulnerability in thumbnail.ghp in Easy File Sharing (EFS) Web Server 4.8 allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2009-4855

CVE-2009-4855—

SQL injection vulnerability in index.php in TYPO3 4.0 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2009-4860

CVE-2009-4860—

SQL injection vulnerability in demo.php in Typing Pal 1.0 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2009-4870

CVE-2009-4870—

Multiple SQL injection vulnerabilities in login.php in PHPCityPortal allow remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2009-4905

CVE-2009-4905—

Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to

23RISCO

abrir ↗

Referência

CVE-2009-4907

CVE-2009-4907—

Multiple cross-site request forgery (CSRF) vulnerabilities in oBlog allow remote attackers to hijack the authentication

23RISCO

abrir ↗

Referência

CVE-2009-4935

CVE-2009-4935—

SQL injection vulnerability in ogp_show.php in Online Guestbook Pro allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2015-6104

CVE-2015-6104—

The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window

35RISCO

abrir ↗

Referência

CVE-2015-6104

CVE-2015-6104—

The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window

35RISCO

abrir ↗

Referência

CVE-2015-6152

CVE-2015-6152—

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory co

35RISCO

abrir ↗

Referência

CVE-2015-6541

CVE-2015-6541—

Multiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in Zimbra Collaboration Server (ZCS) be

23RISCO

abrir ↗

Referência

CVE-2015-6568

CVE-2015-6568—

Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse/

28RISCO

abrir ↗

Referência

CVE-2015-6568

CVE-2015-6568—

Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse/

28RISCO

abrir ↗

Referência

CVE-2015-6639

CVE-2015-6639—

The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to

23RISCO

abrir ↗

Referência

CVE-2015-6809

CVE-2015-6809—

Multiple cross-site scripting (XSS) vulnerabilities in BEdita before 3.6.0 allow remote attackers to inject arbitrary we

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_slideshow - Remote File Inclusion

CVE-2007-5065—webappsphp

PHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show (com_slideshow) component for Jo

35RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke addon Nuke Mobile Entartainment 1.0 - Local File Inclusion

CVE-2007-5069—webappsphp

Directory traversal vulnerability in data/compatible.php in the Nuke Mobile Entertainment 1 addon for PHP-Nuke allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

IPSwitch IMail Server 8.0x - Remote Heap Overflow

CVE-2007-5094—remotewindows

Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ask.com/AskJeeves Toolbar Toolbar 4.0.2.53 - ActiveX Remote Buffer Overflow

CVE-2007-5107—remotewindows

Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Media

50RISCO

abrir ↗

Referência✓ VexDay Proof

EB Design Pty Ltd - 'EBCRYPT.dll 2.0' Multiple Remote Vulnerabilities

CVE-2007-5110—remotewindows

Absolute path traversal vulnerability in the EbCrypt.eb_c_PRNGenerator.1 ActiveX control in EBCRYPT.DLL 2.0.0.2087 and e

23RISCO

abrir ↗

Referência✓ VexDay Proof

EB Design Pty Ltd - 'EBCRYPT.dll 2.0' Multiple Remote Vulnerabilities

CVE-2007-5111—remotewindows

A certain ActiveX control in EBCRYPT.DLL 2.0 in EB Design ebCrypt allows remote attackers to cause a denial of service (

23RISCO

abrir ↗

Referência

CVE-2015-6827

CVE-2015-6827—

Cross-site request forgery (CSRF) vulnerability in Auto-Exchanger 5.1.0 allows remote attackers to hijack the authentica

23RISCO

abrir ↗

Referência

CVE-2015-6923

CVE-2015-6923—

The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary phy

23RISCO

abrir ↗

Referência

CVE-2015-6923

CVE-2015-6923—

The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary phy

23RISCO

abrir ↗

Referência

CVE-2015-6944

CVE-2015-6944—

Cross-site request forgery (CSRF) vulnerability in JSP/MySQL Administrador Web 1 allows remote attackers to hijack the a

23RISCO

abrir ↗

Referência

CVE-2010-0372

CVE-2010-0372—

SQL injection vulnerability in the Articlemanager (com_articlemanager) component for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2015-6967

CVE-2015-6967—

Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to

50RISCO

abrir ↗

Referência

CVE-2010-0373

CVE-2010-0373—

SQL injection vulnerability in the libros (com_libros) component for Joomla! allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2015-7078

CVE-2015-7078—

Use-after-free vulnerability in Hypervisor in Apple OS X before 10.11.2 allows local users to gain privileges via vector

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.