Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.533exploits catalogados

35.607CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8.663Nuclei 4.287Metasploit 3.474✓ só verificadosrecentes populares risco

22.367 exploits

Referência

CVE-2012-4792

CVE-2012-4792HIGHsob ataque

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary cod

100RISCO

abrir ↗

Referência

CVE-2013-5486

CVE-2013-5486—

Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager

60RISCO

abrir ↗

Referência

CVE-2019-1003030

CVE-2019-1003030CRITICALsob ataque

A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/

100RISCO

abrir ↗

Referência

CVE-2023-32243

CVE-2023-32243CRITICAL

WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation

85RISCO

abrir ↗

Referência

CVE-2015-0016

CVE-2015-0016HIGHsob ataque

Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7

100RISCO

abrir ↗

Referência

CVE-2015-0016

CVE-2015-0016HIGHsob ataque

Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7

100RISCO

abrir ↗

Referência

CVE-2017-16921

CVE-2017-16921—

In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.2

28RISCO

abrir ↗

Referência

CVE-2019-1937

CVE-2019-1937CRITICAL

Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability

85RISCO

abrir ↗

Referência

CVE-2019-1937

CVE-2019-1937CRITICAL

Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability

85RISCO

abrir ↗

Referência

CVE-2019-1937

CVE-2019-1937CRITICAL

Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability

85RISCO

abrir ↗

Referência✓ VexDay Proof

Apple iTunes 8.1.1 - 'ITMS' Multiple Protocol Handler Buffer Overflow (Metasploit)

CVE-2009-0950—remoteosx

Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a deni

43RISCO

abrir ↗

Referência

CVE-2009-2591

CVE-2009-2591—

SQL injection vulnerability in the MyAnnonces module for E-Xoopport 3.1 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple iTunes 8.1.1.10 (Windows) - 'itms/itcp' Remote Buffer Overflow

CVE-2009-0950—remotewindows

Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a deni

43RISCO

abrir ↗

Referência

CVE-2019-10267

CVE-2019-10267—

An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to

60RISCO

abrir ↗

Referência

CVE-2019-10267

CVE-2019-10267—

An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to

60RISCO

abrir ↗

Referência

CVE-2017-1092

CVE-2017-1092—

IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system a

60RISCO

abrir ↗

Referência

CVE-2017-1092

CVE-2017-1092—

IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system a

60RISCO

abrir ↗

Referência

CVE-2016-6433

CVE-2016-6433—

The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users

60RISCO

abrir ↗

Referência

CVE-2022-2884

CVE-2022-2884CRITICAL

A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.3

70RISCO

abrir ↗

Referência

CVE-2016-1561

CVE-2016-1561—

ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorized_keys file for root, whic

60RISCO

abrir ↗

Referência

CVE-2020-11854

CVE-2020-11854CRITICAL

Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products.

85RISCO

abrir ↗

Referência

CVE-2018-14667

CVE-2018-14667CRITICALsob ataque

The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resou

100RISCO

abrir ↗

Referência

CVE-2012-4867

CVE-2012-4867—

Directory traversal vulnerability in modules/com_vtiger_workflow/sortfieldsjson.php in vtiger CRM 5.1.0 allows remote at

23RISCO

abrir ↗

Referência

CVE-2012-4867

CVE-2012-4867—

Directory traversal vulnerability in modules/com_vtiger_workflow/sortfieldsjson.php in vtiger CRM 5.1.0 allows remote at

23RISCO

abrir ↗

Referência

CVE-2015-6522

CVE-2015-6522—

SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arbi

60RISCO

abrir ↗

Referência

CVE-2009-2598

CVE-2009-2598—

Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow (1) remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

XGuestBook 2.0 - Authentication Bypass

CVE-2009-0810—webappsphp

SQL injection vulnerability in login.php in xGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2018-15811

CVE-2018-15811HIGHsob ataque

DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.

100RISCO

abrir ↗

Referência

CVE-2017-5715

CVE-2017-5715MEDIUM

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized discl

55RISCO

abrir ↗

Referência

CVE-2016-9244

CVE-2016-9244—

A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may

45RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.