Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.449exploits catalogados

35.552CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.367GitHub PoC 14.225VulnCheck XDB 8.649Nuclei 4.283Metasploit 3.474✓ só verificadosrecentes populares risco

22.367 exploits

Referência

CVE-2018-6328

CVE-2018-6328—

It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, w

50RISCO

abrir ↗

Referência

CVE-2019-0211

CVE-2019-0211HIGHsob ataque

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privilege

83RISCO

abrir ↗

Referência

CVE-2019-0211

CVE-2019-0211HIGHsob ataque

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privilege

83RISCO

abrir ↗

Referência

CVE-2019-0211

CVE-2019-0211HIGHsob ataque

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privilege

83RISCO

abrir ↗

Referência

CVE-2019-0211

CVE-2019-0211HIGHsob ataque

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privilege

83RISCO

abrir ↗

Referência

CVE-2014-5519

CVE-2014-5519—

The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a dev

50RISCO

abrir ↗

Referência

CVE-2014-5519

CVE-2014-5519—

The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a dev

50RISCO

abrir ↗

Referência

CVE-2021-27877

CVE-2021-27877HIGHsob ataqueransomware

An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authenticat

98RISCO

abrir ↗

Referência✓ VexDay Proof

ABC Advertise 1.0 - Admin Password Disclosure

CVE-2009-1550—webappsphp

Zakkis Technology ABC Advertise 1.0 does not properly restrict access to admin.inc.php, which allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2016-7203

CVE-2016-7203—

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a de

35RISCO

abrir ↗

Referência

CVE-2015-6973

CVE-2015-6973—

Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to

35RISCO

abrir ↗

Referência

CVE-2015-6973

CVE-2015-6973—

Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to

35RISCO

abrir ↗

Referência

CVE-2016-7237

CVE-2016-7237—

Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, W

35RISCO

abrir ↗

Referência

CVE-2022-23221

CVE-2022-23221CRITICAL

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IG

60RISCO

abrir ↗

Referência

CVE-2016-10175

CVE-2016-10175—

The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. Thi

50RISCO

abrir ↗

Referência

CVE-2009-3193

CVE-2009-3193—

SQL injection vulnerability in the DigiFolio (com_digifolio) component 1.52 for Joomla! allows remote attackers to execu

23RISCO

abrir ↗

Referência

CVE-2010-4142

CVE-2010-4142—

Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a

50RISCO

abrir ↗

Referência✓ VexDay Proof

RM Downloader 3.0.0.9 - '.RAM' Local Buffer Overflow

CVE-2009-1646—localwindows

Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a

23RISCO

abrir ↗

Referência

CVE-2008-5053

CVE-2008-5053—

PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader (com_rssreader) 1.0 component fo

35RISCO

abrir ↗

Referência

CVE-2011-5165

CVE-2011-5165—

Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem

50RISCO

abrir ↗

Referência✓ VexDay Proof

Shutter 0.1.1 - Multiple SQL Injections

CVE-2009-1650—webappsphp

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

BlazeVideo HDTV Player 2.1 - '.PLF' Local Buffer Overflow

CVE-2006-6199—localwindows

Stack-based buffer overflow in BlazeVideo BlazeDVD Standard and Professional 5.0, and possibly earlier, allows remote at

50RISCO

abrir ↗

Referência

CVE-2024-20353

CVE-2024-20353HIGHsob ataque

A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Fir

93RISCO

abrir ↗

Referência✓ VexDay Proof

The Recipe Script 5 - Authentication Bypass / Database Backup

CVE-2009-1662—webappsphp

Multiple SQL injection vulnerabilities in admin/login.php in Wright Way Services Recipe Script 5 allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2015-7768

CVE-2015-7768—

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD comma

50RISCO

abrir ↗

Referência

CVE-2016-0151

CVE-2016-0151HIGHsob ataqueransomware

The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,

83RISCO

abrir ↗

Referência

CVE-2018-7422

CVE-2018-7422—

A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to re

50RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows XP/2003 - IGMP v3 Denial of Service (MS06-007) (1)

CVE-2006-0021—doswindows

Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang)

35RISCO

abrir ↗

Referência

CVE-2011-5003

CVE-2011-5003—

Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier a

50RISCO

abrir ↗

Referência

CVE-2011-5165

CVE-2011-5165—

Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.