Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.058exploits catalogados

35.300CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.175GitHub PoC 14.096VulnCheck XDB 8.607Nuclei 4.255Metasploit 3.474✓ só verificadosrecentes populares risco

22.175 exploits

Referência

CVE-2018-19458

CVE-2018-19458—

In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI UR

50RISCO

abrir ↗

Referência

CVE-2009-4140

CVE-2009-4140—

Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer

60RISCO

abrir ↗

Referência

CVE-2017-3241

CVE-2017-3241—

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versi

35RISCO

abrir ↗

Referência

CVE-2020-14882

CVE-2020-14882CRITICALsob ataque

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RISCO

abrir ↗

Referência

CVE-2020-14882

CVE-2020-14882CRITICALsob ataque

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RISCO

abrir ↗

Referência

CVE-2009-4140

CVE-2009-4140—

Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer

60RISCO

abrir ↗

Referência

CVE-2017-2992

CVE-2017-2992—

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 h

35RISCO

abrir ↗

Referência

CVE-2013-3143

CVE-2013-3143—

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (mem

35RISCO

abrir ↗

Referência✓ VexDay Proof

Flatnuke 3 - Remote Command Execution / Privilege Escalation

CVE-2007-5773—webappsphp

Cross-site request forgery (CSRF) vulnerability in index.php in the File Manager module in Flatnuke 3 allows remote atta

23RISCO

abrir ↗

Referência

CVE-2013-3143

CVE-2013-3143—

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (mem

35RISCO

abrir ↗

Referência

CVE-2019-0235

CVE-2019-0235—

Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks.

35RISCO

abrir ↗

Referência

CVE-2023-3079

CVE-2023-3079HIGHsob ataque

Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corr

83RISCO

abrir ↗

Referência

CVE-2023-3079

CVE-2023-3079HIGHsob ataque

Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corr

83RISCO

abrir ↗

Referência

CVE-2015-5471

CVE-2015-5471—

Absolute path traversal vulnerability in include/user/download.php in the Swim Team plugin 1.44.10777 for WordPress allo

50RISCO

abrir ↗

Referência✓ VexDay Proof

Trend Micro OfficeScan - ObjRemoveCtrl ActiveX Control Buffer Overflow

CVE-2008-3364—remotewindows

Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeS

35RISCO

abrir ↗

Referência

CVE-2015-2525

CVE-2015-2525—

Task Scheduler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1

35RISCO

abrir ↗

Referência

CVE-2008-2286

CVE-2008-2286—

SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allow

50RISCO

abrir ↗

Referência

CVE-2015-3134

CVE-2015-3134—

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481

28RISCO

abrir ↗

Referência✓ VexDay Proof

FaceBook PhotoUploader 5.0.14.0 - Remote Buffer Overflow

CVE-2008-5711—remotewindows

Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to

50RISCO

abrir ↗

Referência

CVE-2016-4229

CVE-2016-4229—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows

35RISCO

abrir ↗

Referência

CVE-2016-4229

CVE-2016-4229—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows

35RISCO

abrir ↗

Referência

CVE-2018-15534

CVE-2018-15534—

Geutebrueck re_porter 16 before 7.8.974.20 has a possibility of unauthenticated access to sensitive information includin

35RISCO

abrir ↗

Referência

CVE-2018-15534

CVE-2018-15534—

Geutebrueck re_porter 16 before 7.8.974.20 has a possibility of unauthenticated access to sensitive information includin

35RISCO

abrir ↗

Referência

CVE-2012-1153

CVE-2012-1153—

Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote

50RISCO

abrir ↗

Referência

CVE-2013-6935

CVE-2013-6935—

Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a

50RISCO

abrir ↗

Referência

CVE-2015-2458

CVE-2015-2458—

ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,

35RISCO

abrir ↗

Referência

CVE-2015-2459

CVE-2015-2459—

ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,

35RISCO

abrir ↗

Referência

CVE-2023-36874

CVE-2023-36874HIGHsob ataque

Windows Error Reporting Service Elevation of Privilege Vulnerability

98RISCO

abrir ↗

Referência

CVE-2019-9792

CVE-2019-9792—

The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during

28RISCO

abrir ↗

Referência

CVE-2017-6026

CVE-2017-6026—

A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware ver

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.