Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.533exploits catalogados

35.607CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8.663Nuclei 4.287Metasploit 3.474✓ só verificadosrecentes populares risco

22.367 exploits

Referência

CVE-2017-11281

CVE-2017-11281—

Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploita

35RISCO

abrir ↗

Referência

CVE-2017-11281

CVE-2017-11281—

Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploita

35RISCO

abrir ↗

Referência

CVE-2015-2995

CVE-2015-2995—

The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote at

50RISCO

abrir ↗

Referência

CVE-2010-1342

CVE-2010-1342—

Multiple PHP remote file inclusion vulnerabilities in Direct News 4.10.2, when register_globals is enabled, allow remote

23RISCO

abrir ↗

Referência

CVE-2017-5375

CVE-2017-5375—

JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. T

35RISCO

abrir ↗

Referência

CVE-2020-29607

CVE-2020-29607—

A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access

35RISCO

abrir ↗

Referência

CVE-2013-1306

CVE-2013-1306—

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a cr

35RISCO

abrir ↗

Referência

CVE-2015-3124

CVE-2015-3124—

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows

35RISCO

abrir ↗

Referência

CVE-2020-14871

CVE-2020-14871CRITICALsob ataque

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported ve

100RISCO

abrir ↗

Referência

CVE-2016-0801

CVE-2016-0801—

The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01

35RISCO

abrir ↗

Referência

CVE-2020-14871

CVE-2020-14871CRITICALsob ataque

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported ve

100RISCO

abrir ↗

Referência

CVE-2020-8195

CVE-2020-8195MEDIUMsob ataque

Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.1

75RISCO

abrir ↗

Referência

CVE-2019-15813

CVE-2019-15813—

Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arb

35RISCO

abrir ↗

Referência

CVE-2009-4469

CVE-2009-4469—

Multiple cross-site scripting (XSS) vulnerabilities in pagenumber.inc.php in phpPowerCards 2.0 allow remote attackers to

23RISCO

abrir ↗

Referência

Sentrifugo 3.2 - File Upload Restriction Bypass

CVE-2019-15813—webappsphp

Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arb

35RISCO

abrir ↗

Referência

CVE-2016-4229

CVE-2016-4229—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows

35RISCO

abrir ↗

Referência

CVE-2016-4229

CVE-2016-4229—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows

35RISCO

abrir ↗

Referência

CVE-2018-15534

CVE-2018-15534—

Geutebrueck re_porter 16 before 7.8.974.20 has a possibility of unauthenticated access to sensitive information includin

35RISCO

abrir ↗

Referência

CVE-2018-15534

CVE-2018-15534—

Geutebrueck re_porter 16 before 7.8.974.20 has a possibility of unauthenticated access to sensitive information includin

35RISCO

abrir ↗

Referência

CVE-2012-1153

CVE-2012-1153—

Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote

50RISCO

abrir ↗

Referência

CVE-2013-6935

CVE-2013-6935—

Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a

50RISCO

abrir ↗

Referência

CVE-2015-2458

CVE-2015-2458—

ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,

35RISCO

abrir ↗

Referência

CVE-2015-2459

CVE-2015-2459—

ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,

35RISCO

abrir ↗

Referência

CVE-2024-6039

CVE-2024-6039MEDIUM

Feng Office Workspaces sql injection

33RISCO

abrir ↗

Referência

CVE-2023-36874

CVE-2023-36874HIGHsob ataque

Windows Error Reporting Service Elevation of Privilege Vulnerability

98RISCO

abrir ↗

Referência

CVE-2019-9792

CVE-2019-9792—

The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during

28RISCO

abrir ↗

Referência

CVE-2018-9995

CVE-2018-9995—

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISCO

abrir ↗

Referência

CVE-2012-3137

CVE-2012-3137—

The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 all

35RISCO

abrir ↗

Referência

CVE-2019-9041

CVE-2019-9041—

An issue was discovered in ZZZCMS zzzphp V1.6.1. In the inc/zzz_template.php file, the parserIfLabel() function's filter

50RISCO

abrir ↗

Referência

CVE-2014-1683

CVE-2014-1683—

The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.