Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

22.492 exploits

Referência

CVE-2024-3191

CVE-2024-3191CRITICAL

MailCleaner Email os command injection

48RISCO

abrir ↗

Referência

CVE-2018-5759

CVE-2018-5759—

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

Total Video Player 1.31 - 'DefaultSkin.ini' Local Stack Overflow

CVE-2009-0261—localwindows

Stack-based buffer overflow in EffectMatrix Total Video Player 1.31 allows user-assisted attackers to execute arbitrary

43RISCO

abrir ↗

Referência

CVE-2010-2549

CVE-2010-2549—

Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2 and Server 2008 Gold and

23RISCO

abrir ↗

Referência✓ VexDay Proof

FipsCMS Light 2.1 - 'db.mdb' Remote Database Disclosure

CVE-2009-2022—webappsasp

fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote

23RISCO

abrir ↗

Referência

CVE-2016-1803

CVE-2016-1803—

CoreCapture in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers

23RISCO

abrir ↗

Referência

CVE-2016-1803

CVE-2016-1803—

CoreCapture in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers

23RISCO

abrir ↗

Referência

CVE-2019-15092

CVE-2019-15092—

The webtoffee "WordPress Users & WooCommerce Customers Import Export" plugin 1.3.0 for WordPress allows CSV injection in

23RISCO

abrir ↗

Referência

CVE-2019-25699

CVE-2019-25699HIGH

Newsbull Haber Script 1.0.0 Authenticated SQL Injection via search parameter

41RISCO

abrir ↗

Referência✓ VexDay Proof

Linksys WRT54G Firmware 1.00.9 - Security Bypass (1)

CVE-2008-1247—remotehardware

The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts,

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP PORTAL - Remote Database Disclosure

CVE-2008-5562—webappsasp

ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2021-42165

CVE-2021-42165—

MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing c

28RISCO

abrir ↗

Referência

CVE-2019-1144

CVE-2019-1144HIGH

Microsoft Graphics Remote Code Execution Vulnerability

46RISCO

abrir ↗

Referência

CVE-2021-20031

CVE-2021-20031—

A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management

43RISCO

abrir ↗

Referência

CVE-2018-6911

CVE-2018-6911—

The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS

28RISCO

abrir ↗

Referência✓ VexDay Proof

phpEmployment - 'PHP Upload' Arbitrary File Upload

CVE-2008-6920—webappsphp

Unrestricted file upload vulnerability in auth.php in phpEmployment 1.8 allows remote attackers to execute arbitrary cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

Agora 1.4 RC1 - 'MysqlfinderAdmin.php' Remote File Inclusion

CVE-2006-7194—webappsphp

PHP remote file inclusion vulnerability in modules/Mysqlfinder/MysqlfinderAdmin.php in Agora 1.4 RC1, when register_glob

23RISCO

abrir ↗

Referência

CVE-2017-18256

CVE-2017-18256—

Brave Browser before 0.13.0 allows remote attackers to cause a denial of service (resource consumption) via a long alert

23RISCO

abrir ↗

Referência

CVE-2012-0904

CVE-2012-0904—

VLC media player 1.1.11 allows remote attackers to cause a denial of service (crash) via a long string in an amr file.

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin Photoracer 1.0 - 'id' SQL Injection

CVE-2009-2122—webappsphp

SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote atta

23RISCO

abrir ↗

Referência

CVE-2017-8477

CVE-2017-8477—

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2,

23RISCO

abrir ↗

Referência

CVE-2023-4114

CVE-2023-4114MEDIUM

PHP Jabbers Night Club Booking Software index.php cross site scripting

48RISCO

abrir ↗

Referência

CVE-2014-1854

CVE-2014-1854—

SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3.9.5 and AdRotate Free p

23RISCO

abrir ↗

Referência

CVE-2017-13876

CVE-2017-13876—

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS b

23RISCO

abrir ↗

Referência

CVE-2022-50794

CVE-2022-50794CRITICAL

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Command Injection via Username

48RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows Explorer - '.AVI' File Denial of Service

CVE-2007-0562—doswindows

Windows Explorer (explorer.exe) 6.0.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause

28RISCO

abrir ↗

Referência✓ VexDay Proof

Maian Recipe 1.0 - 'path_to_folder' Remote File Inclusion

CVE-2007-0848—webappsphp

PHP remote file inclusion vulnerability in classes/class_mail.inc.php in Maian Recipe 1.0 allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual InterDev 6.0 SP6 - '.sln' Local Buffer Overflow (PoC)

CVE-2008-1709—doswindows

Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a St

28RISCO

abrir ↗

Referência✓ VexDay Proof

Carscripts Classifieds - 'cat' SQL Injection

CVE-2008-2844—webappsphp

SQL injection vulnerability in index.php in Carscripts Classifieds allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

Mitrastar GPT-2541GNAC-N1 - Privilege escalation

CVE-2021-42165—remotehardware

MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing c

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.