Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.526exploits catalogados

36.593CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.152GitHub PoC 15.158VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentes populares risco

23.051 exploits

Referência

CVE-2018-1000049

CVE-2018-1000049—

Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner

60RISCO

abrir ↗

Referência

CVE-2018-1000049

CVE-2018-1000049—

Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner

60RISCO

abrir ↗

Referência

CVE-2018-1000049

CVE-2018-1000049—

Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner

60RISCO

abrir ↗

Referência

CVE-2018-1000049

CVE-2018-1000049—

Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner

60RISCO

abrir ↗

Referência

CVE-2017-0290

CVE-2017-0290—

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serve

45RISCO

abrir ↗

Referência✓ VexDay Proof

MDPro Module My_eGallery - 'pid' SQL Injection

CVE-2009-0728—webappsphp

SQL injection vulnerability in the My_eGallery module for MAXdev MDPro (MD-Pro) and Postnuke allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2019-6282

CVE-2019-6282—

ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the cgi-bin/webproc?getpag

23RISCO

abrir ↗

Referência

CVE-2009-2573

CVE-2009-2573—

Multiple SQL injection vulnerabilities in MiniTwitter 0.2 beta, when magic_quotes_gpc is disabled, allow remote authenti

23RISCO

abrir ↗

Referência

CVE-2016-0854

CVE-2016-0854—

Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess

60RISCO

abrir ↗

Referência

CVE-2019-6340

CVE-2019-6340HIGHsob ataque

Drupal core - Highly critical - Remote Code Execution

100RISCO

abrir ↗

Referência

CVE-2018-15877

CVE-2018-15877—

The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell meta

60RISCO

abrir ↗

Referência

CVE-2018-15877

CVE-2018-15877—

The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell meta

60RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Safari - RSS 'feed://' Buffer Overflow via libxml2 (PoC)

CVE-2008-3529—doswindows

Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-de

28RISCO

abrir ↗

Referência

CVE-2016-3718

CVE-2016-3718MEDIUMsob ataque

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct

85RISCO

abrir ↗

Referência✓ VexDay Proof

Mynews 0.10 - Authentication Bypass

CVE-2009-0739—webappsphp

SQL injection vulnerability in login.php in MyNews 0.10 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência

CVE-2018-15133

CVE-2018-15133HIGHsob ataque

In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unseri

100RISCO

abrir ↗

Referência✓ VexDay Proof

Discuz! 6.0.1 - 'searchid' SQL Injection

CVE-2008-3554—webappsphp

SQL injection vulnerability in index.php in Discuz! 6.0.1 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2023-38408

CVE-2023-38408CRITICAL

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remot

70RISCO

abrir ↗

Referência✓ VexDay Proof

Wsn (Multiple Products) - Local File Inclusion / Code Execution

CVE-2008-3555—webappsphp

Directory traversal vulnerability in index.php in (1) WSN Forum 4.1.43 and earlier, (2) Gallery 4.1.30 and earlier, (3)

23RISCO

abrir ↗

Referência

CVE-2012-4772

CVE-2012-4772—

SQL injection vulnerability in register/ in Subrion CMS before 2.2.3 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cisco WebEx Meeting Manager UCF - 'atucfobj.dll' ActiveX Remote Buffer Overflow

CVE-2008-3558—remotewindows

Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before

50RISCO

abrir ↗

Referência

CVE-2019-15978

CVE-2019-15978HIGH

Cisco Data Center Network Manager Command Injection Vulnerabilities

53RISCO

abrir ↗

Referência

CVE-2018-9160

CVE-2018-9160—

SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.

60RISCO

abrir ↗

Referência

CVE-2018-14728

CVE-2018-14728—

upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.

60RISCO

abrir ↗

Referência

CVE-2018-12710

CVE-2018-12710—

An issue was discovered on D-Link DIR-601 2.02NA devices. Being local to the network and having only "User" account (whi

45RISCO

abrir ↗

Referência

CVE-2012-4773

CVE-2012-4773—

Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack

23RISCO

abrir ↗

Referência

CVE-2021-22145

CVE-2021-22145—

A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the abil

60RISCO

abrir ↗

Referência

CVE-2014-3791

CVE-2014-3791—

Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 6.8 allows remote attackers to execute arbitrary code

60RISCO

abrir ↗

Referência

CVE-2019-6441

CVE-2019-6441—

An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM33

35RISCO

abrir ↗

Referência✓ VexDay Proof

Kipper 2.01 - Cross-Site Scripting / Local File Inclusion / File Disclosure

CVE-2009-0763—webappsphp

Cross-site scripting (XSS) vulnerability in default.php in Kipper 2.01 allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.