Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

22.492 exploits

Referência

CVE-2017-0037

CVE-2017-0037HIGHsob ataque

Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilde

93RISCO

abrir ↗

Referência

CVE-2019-14322

CVE-2019-14322—

In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.

50RISCO

abrir ↗

Referência

CVE-2006-1236

CVE-2006-1236—

Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrar

28RISCO

abrir ↗

Referência

CVE-2013-3639

CVE-2013-3639—

Multiple cross-site scripting (XSS) vulnerabilities in Xaraya 2.4.0-b1 and earlier allow remote attackers to inject arbi

23RISCO

abrir ↗

Referência

CVE-2009-4714

CVE-2009-4714—

Cross-site scripting (XSS) vulnerability in the quiz module for XOOPS Celepar allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPDJ 0.5 - 'djpage.php' Remote File Inclusion

CVE-2007-5574—webappsphp

PHP remote file inclusion vulnerability in djpage.php in PHPDJ 0.5 allows remote attackers to execute arbitrary PHP code

28RISCO

abrir ↗

Referência✓ VexDay Proof

Softbiz Auctions Script - 'product_desc.php' SQL Injection

CVE-2007-5999—webappsphp

SQL injection vulnerability in product_desc.php in Softbiz Auctions Script allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2015-2166

CVE-2015-2166—

Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5

43RISCO

abrir ↗

Referência

CVE-2019-19576

CVE-2019-19576—

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! an

28RISCO

abrir ↗

Referência

CVE-2018-17057

CVE-2018-17057—

An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar://

28RISCO

abrir ↗

Referência

CVE-2018-17057

CVE-2018-17057—

An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar://

28RISCO

abrir ↗

Referência

CVE-2015-6024

CVE-2015-6024—

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remot

28RISCO

abrir ↗

Referência

CVE-2015-6024

CVE-2015-6024—

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remot

28RISCO

abrir ↗

Referência

CVE-2024-24724

CVE-2024-24724CRITICAL

Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Re

53RISCO

abrir ↗

Referência

CVE-2010-3749

CVE-2010-3749—

The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows

28RISCO

abrir ↗

Referência

CVE-2020-28976

CVE-2020-28976—

The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an unauthenticated attacker can make

43RISCO

abrir ↗

Referência

CVE-2017-3548

CVE-2017-3548—

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integratio

35RISCO

abrir ↗

Referência✓ VexDay Proof

Vigile CMS 1.4 - Multiple Vulnerabilities

CVE-2007-6086—webappsphp

Directory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2009-4753

CVE-2009-4753—

Multiple buffer overflows in the FTP server on the Addonics NAS Adapter NASU2FW41 with loader 1.17 allow remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vigile CMS 1.4 - Multiple Vulnerabilities

CVE-2007-6087—webappsphp

Cross-site request forgery (CSRF) vulnerability in index.php in VigileCMS 1.4 allows remote attackers to change the admi

23RISCO

abrir ↗

Referência

CVE-2015-3073

CVE-2015-3073—

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass inten

28RISCO

abrir ↗

Referência

CVE-2013-2097

CVE-2013-2097—

ZPanel through 10.1.0 has Remote Command Execution

43RISCO

abrir ↗

Referência

CVE-2016-4138

CVE-2016-4138—

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsof

28RISCO

abrir ↗

Referência✓ VexDay Proof

Mp3 ToolBox 1.0 Beta 5 - 'skin_file' Remote File Inclusion

CVE-2007-6139—webappsphp

PHP remote file inclusion vulnerability in index.php in Mp3 ToolBox 1.0 beta 5 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2024-49138

CVE-2024-49138HIGHsob ataque

Windows Common Log File System Driver Elevation of Privilege Vulnerability

76RISCO

abrir ↗

Referência

CVE-2009-4781

CVE-2009-4781—

TUKEVA Password Reminder before 1.0.0.4 uses a hard-coded password for rem.accdb, which allows local users to discover c

23RISCO

abrir ↗

Referência

CVE-2009-4782

CVE-2009-4782—

Multiple cross-site scripting (XSS) vulnerabilities in Theeta CMS, possibly 0.01, allow remote attackers to inject arbit

23RISCO

abrir ↗

Referência

CVE-2016-2851

CVE-2016-2851—

Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of serv

28RISCO

abrir ↗

Referência

CVE-2009-4783

CVE-2009-4783—

Multiple SQL injection vulnerabilities in Theeta CMS, possibly 0.01, allow remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2009-4784

CVE-2009-4784—

SQL injection vulnerability in the Joaktree (com_joaktree) component 1.0 for Joomla! allows remote attackers to execute

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.