Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.533exploits catalogados

35.607CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8.663Nuclei 4.287Metasploit 3.474✓ só verificadosrecentes populares risco

22.405 exploits

Referência

CVE-2016-3301

CVE-2016-3301—

The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1;

35RISCO

abrir ↗

Referência

CVE-2015-5539

CVE-2015-5539—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu

35RISCO

abrir ↗

Referência

CVE-2020-10882

CVE-2020-10882HIGH

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Arch

68RISCO

abrir ↗

Referência

CVE-2018-6317

CVE-2018-6317—

The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated format strin

50RISCO

abrir ↗

Referência✓ VexDay Proof

my-gesuad 0.9.14 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2009-1812—webappsphp

Multiple SQL injection vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2023-24709

CVE-2023-24709HIGH

An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and l

53RISCO

abrir ↗

Referência

CVE-2013-2251

CVE-2013-2251CRITICALsob ataque

Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a

100RISCO

abrir ↗

Referência

CVE-2018-15710

CVE-2018-15710—

Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php.

50RISCO

abrir ↗

Referência

CVE-2018-15710

CVE-2018-15710—

Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php.

50RISCO

abrir ↗

Referência

CVE-2022-3552

CVE-2022-3552HIGH

Unrestricted Upload of File with Dangerous Type in boxbilling/boxbilling

53RISCO

abrir ↗

Referência

CVE-2021-3493

CVE-2021-3493HIGHsob ataque

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RISCO

abrir ↗

Referência

CVE-2021-3493

CVE-2021-3493HIGHsob ataque

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RISCO

abrir ↗

Referência

CVE-2021-3493

CVE-2021-3493HIGHsob ataque

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RISCO

abrir ↗

Referência

CVE-2020-11738

CVE-2020-11738HIGHsob ataque

The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traver

100RISCO

abrir ↗

Referência

CVE-2016-0169

CVE-2016-0169—

GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012

35RISCO

abrir ↗

Referência

CVE-2020-11738

CVE-2020-11738HIGHsob ataque

The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traver

100RISCO

abrir ↗

Referência

CVE-2017-0061

CVE-2017-0061—

The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and

35RISCO

abrir ↗

Referência

CVE-2013-3591

CVE-2013-3591—

vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability

50RISCO

abrir ↗

Referência

CVE-2013-2294

CVE-2013-2294—

Multiple cross-site scripting (XSS) vulnerabilities in ViewGit before 0.0.7 allow remote repository users to inject arbi

23RISCO

abrir ↗

Referência

CVE-2014-7235

CVE-2014-7235—

htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in FreePBX before 2.9.0.9,

35RISCO

abrir ↗

Referência

CVE-2014-7235

CVE-2014-7235—

htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in FreePBX before 2.9.0.9,

35RISCO

abrir ↗

Referência

CVE-2018-3811

CVE-2018-3811—

SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthentica

35RISCO

abrir ↗

Referência

CVE-2017-16651

CVE-2017-16651HIGHsob ataque

Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary file

98RISCO

abrir ↗

Referência

CVE-2014-1610

CVE-2014-1610—

MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is

50RISCO

abrir ↗

Referência

CVE-2022-4060

CVE-2022-4060CRITICAL

User Post Gallery <= 2.19 - Unauthenticated RCE

75RISCO

abrir ↗

Referência

CVE-2017-6526

CVE-2017-6526—

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to unauthenticated command execution throug

50RISCO

abrir ↗

Referência

CVE-2017-0088

CVE-2017-0088—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

35RISCO

abrir ↗

Referência

CVE-2016-10074

CVE-2016-10074—

The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass

35RISCO

abrir ↗

Referência

CVE-2019-0841

CVE-2019-0841HIGHsob ataqueransomware

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

98RISCO

abrir ↗

Referência

CVE-2019-0841

CVE-2019-0841HIGHsob ataqueransomware

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

98RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.