Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

22.266 exploits

Referência

CVE-2009-4665

CVE-2009-4665—

Directory traversal vulnerability in CuteSoft_Client/CuteEditor/Load.ashx in CuteSoft Components Cute Editor for ASP.NET

23RISCO

abrir ↗

Referência

CVE-2017-2476

CVE-2017-2476—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef

23RISCO

abrir ↗

Referência

CVE-2018-4089

CVE-2018-4089—

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safa

23RISCO

abrir ↗

Referência✓ VexDay Proof

DivX Player 6.7.0 - '.srt' File Buffer Overflow (PoC)

CVE-2008-1912—doswindows

Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause

28RISCO

abrir ↗

Referência

CVE-2015-0569

CVE-2015-0569—

Heap-based buffer overflow in the private wireless extensions IOCTL implementation in wlan_hdd_wext.c in the WLAN (aka W

23RISCO

abrir ↗

Referência

CVE-2019-2413

CVE-2019-2413—

Vulnerability in the Oracle Reports Developer component of Oracle Fusion Middleware (subcomponent: Valid Session). The s

23RISCO

abrir ↗

Referência

CSZ CMS 1.2.9 - 'Multiple' Blind SQLi(Authenticated)

CVE-2021-43701—webappsphp

CSZ CMS 1.2.9 has a Time and Boolean-based Blind SQL Injection vulnerability in the endpoint /admin/export/getcsv/articl

23RISCO

abrir ↗

Referência

CVE-2018-7466

CVE-2018-7466—

install/installNewDB.php in TestLink through 1.9.16 allows remote attackers to conduct injection attacks by leveraging c

23RISCO

abrir ↗

Referência

CVE-2018-7466

CVE-2018-7466—

install/installNewDB.php in TestLink through 1.9.16 allows remote attackers to conduct injection attacks by leveraging c

23RISCO

abrir ↗

Referência

CVE-2020-27423

CVE-2020-27423—

Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial o

23RISCO

abrir ↗

Referência

CVE-2019-8391

CVE-2019-8391—

qdPM 9.1 suffers from Cross-site Scripting (XSS) via configuration?type=[XSS] parameter.

23RISCO

abrir ↗

Referência

CVE-2014-9208

CVE-2014-9208—

Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attacker

23RISCO

abrir ↗

Referência

CVE-2012-0025

CVE-2012-0025—

Double free vulnerability in the Free_All_Memory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the Fla

23RISCO

abrir ↗

Referência

CVE-2010-0758

CVE-2010-0758—

SQL injection vulnerability in news_desc.php in Softbiz Jobs allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2016-4273

CVE-2016-4273—

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637

28RISCO

abrir ↗

Referência✓ VexDay Proof

MapLab MS4W 2.2.1 - Remote File Inclusion

CVE-2007-1843—webappsphp

PHP remote file inclusion vulnerability in gmapfactory/params.php in MapLab 2.2.1, when register_globals is enabled, all

23RISCO

abrir ↗

Referência

CVE-2013-1463

CVE-2013-1463—

Cross-site scripting (XSS) vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4

23RISCO

abrir ↗

Referência

CVE-2019-8927

CVE-2019-8927—

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zon

23RISCO

abrir ↗

Referência

CVE-2019-8927

CVE-2019-8927—

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zon

23RISCO

abrir ↗

Referência✓ VexDay Proof

MySpace Content Zone 3.x - Arbitrary File Upload

CVE-2007-6668—webappsphp

admin/uploadgames.php in MySpace Content Zone (MCZ) 3.x does not require administrative privileges, which allows remote

23RISCO

abrir ↗

Referência

CVE-2013-2682

CVE-2013-2682—

Cisco Linksys E4200 1.0.05 Build 7 devices contain a Clickjacking Vulnerability which allows remote attackers to obtain

23RISCO

abrir ↗

Referência

CVE-2009-3500

CVE-2009-3500—

Multiple SQL injection vulnerabilities in BPowerHouse BPGames 1.0 allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

BlogWorx 1.0 - 'id' SQL Injection

CVE-2008-1915—webappsphp

SQL injection vulnerability in view.asp in DevWorx BlogWorx 1.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

CodeAvalanche FreeWallpaper - Remote Database Disclosure

CVE-2008-5897—webappsasp

CodeAvalanche FreeWallpaper stores sensitive information under the web root with insufficient access control, which allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

ReVou Twitter Clone - Admin Password Change

CVE-2008-6752—webappsphp

adminlogin/password.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging does not verify the original passw

23RISCO

abrir ↗

Referência✓ VexDay Proof

mxCamArchive 2.2 - Bypass Configuration Download

CVE-2008-6955—webappsphp

mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote a

23RISCO

abrir ↗

Referência

CVE-2010-0759

CVE-2010-0759—

Directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Desi

43RISCO

abrir ↗

Referência

CVE-2014-125118

CVE-2014-125118CRITICAL

eScan 5.5-2 Web Management Console Command Injection

63RISCO

abrir ↗

Referência

CVE-2009-2344

CVE-2009-2344—

The web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor before 4.8.2 allow remote authentica

23RISCO

abrir ↗

Referência

CVE-2019-10963

CVE-2019-10963—

Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.