Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.528exploits catalogados

35.606CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.453Referência 22.407GitHub PoC 14.244VulnCheck XDB 8.663Nuclei 4.287Metasploit 3.474✓ só verificadosrecentes populares risco

22.367 exploits

Referência

CVE-2015-6522

CVE-2015-6522—

SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arbi

60RISCO

abrir ↗

Referência

CVE-2009-2598

CVE-2009-2598—

Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow (1) remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

XGuestBook 2.0 - Authentication Bypass

CVE-2009-0810—webappsphp

SQL injection vulnerability in login.php in xGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2018-15811

CVE-2018-15811HIGHsob ataque

DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.

100RISCO

abrir ↗

Referência

CVE-2017-5715

CVE-2017-5715MEDIUM

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized discl

55RISCO

abrir ↗

Referência

CVE-2019-9193

CVE-2019-9193—

In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_serve

60RISCO

abrir ↗

Referência✓ VexDay Proof

BlogHelper - Remote Configuration File Disclosure

CVE-2009-0826—webappsphp

BlogHelper stores common_db.inc under the web root with insufficient access control, which allows remote attackers to do

23RISCO

abrir ↗

Referência✓ VexDay Proof

Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow

CVE-2007-3147—remotewindows

Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows

50RISCO

abrir ↗

Referência

CVE-2018-20526

CVE-2018-20526—

Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.

60RISCO

abrir ↗

Referência

CVE-2018-20526

CVE-2018-20526—

Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.

60RISCO

abrir ↗

Referência

CVE-2024-25004

CVE-2024-25004HIGH

KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the username, occurs due to insuf

41RISCO

abrir ↗

Referência

CVE-2012-4891

CVE-2012-4891—

Cross-site scripting (XSS) vulnerability in fw/index2.do in ManageEngine Firewall Analyzer 7.2 allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2024-25004

CVE-2024-25004HIGH

KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the username, occurs due to insuf

41RISCO

abrir ↗

Referência

CVE-2015-8249

CVE-2015-8249—

The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and e

60RISCO

abrir ↗

Referência

CVE-2015-8249

CVE-2015-8249—

The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and e

60RISCO

abrir ↗

Referência

CVE-2020-5741

CVE-2020-5741HIGHsob ataque

Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arb

100RISCO

abrir ↗

Referência

CVE-2021-4045

CVE-2021-4045CRITICAL

TP-LINK Tapo C200 remote code execution vulnerability

70RISCO

abrir ↗

Referência✓ VexDay Proof

Check Point Firewall-1 - PKI Web Service HTTP Header Remote Overflow

CVE-2009-1227—doshardware

NOTE: this issue has been disputed by the vendor. Buffer overflow in the PKI Web Service in Check Point Firewall-1 PKI

23RISCO

abrir ↗

Referência✓ VexDay Proof

Arcadwy Arcade Script - 'Username' Static Cross-Site Scripting

CVE-2009-1228—webappsphp

Cross-site scripting (XSS) vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject

23RISCO

abrir ↗

Referência★ 62

A PoC exploit for CVE-2024-25600 - WordPress Bricks Builder Remote Code Execution (RCE)

CVE-2024-25600CRITICAL

WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

85RISCO

abrir ↗

Referência

CVE-2017-8046

CVE-2017-8046—

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions pri

60RISCO

abrir ↗

Referência

CVE-2017-6326

CVE-2017-6326—

The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an i

60RISCO

abrir ↗

Referência✓ VexDay Proof

isiAJAX 1 - 'praises.php?id' SQL Injection

CVE-2009-0881—webappsphp

SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mozilla Firefox 3.0.x - XML Parser Memory Corruption / Denial of Service (PoC)

CVE-2009-1232—doswindows

Mozilla Firefox 3.0.8 and earlier 3.0.x versions allows remote attackers to cause a denial of service (memory corruption

23RISCO

abrir ↗

Referência✓ VexDay Proof

Opera 9.64 - 7400 nested elements XML Parsing Remote Crash

CVE-2009-1234—dosmultiple

Opera 9.64 allows remote attackers to cause a denial of service (application crash) via an XML document containing a lon

23RISCO

abrir ↗

Referência

CVE-2012-5333

CVE-2012-5333—

SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX xnu 1228.x - 'hfs-fcntl' Kernel Privilege Escalation

CVE-2009-1235—localosx

XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user space

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX xnu 1228.3.13 - 'zip-notify' Remote Kernel Overflow (PoC)

CVE-2009-1236—dososx

Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and e

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX xnu 1228.3.13 - 'macfsstat' Local Kernel Memory Leak/Denial of Service

CVE-2009-1237—dososx

Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a den

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX xnu 1228.3.13 - 'Profil' Kernel Memory Leak/Denial of Service (PoC)

CVE-2009-1237—dososx

Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a den

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.