Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.523 exploits

Referência

CVE-2021-46354

CVE-2021-46354—

Thinfinity VirtualUI 2.1.28.0, 2.1.32.1 and 2.5.26.2, fixed in version 3.0 is affected by an information disclosure vuln

28RISCO

abrir ↗

Referência

CVE-2018-5979

CVE-2018-5979—

SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field.

28RISCO

abrir ↗

Referência

CVE-2018-10517

CVE-2018-10517—

In CMS Made Simple (CMSMS) through 2.2.7, the "module import" operation in the admin dashboard contains a remote code ex

28RISCO

abrir ↗

Referência

CVE-2003-0831

CVE-2003-0831—

ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, whi

35RISCO

abrir ↗

Referência

CVE-2010-0187

CVE-2010-0187—

Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service

28RISCO

abrir ↗

Referência

CVE-2018-0980

CVE-2018-0980—

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

35RISCO

abrir ↗

Referência

CVE-2018-0933

CVE-2018-0933—

ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution,

35RISCO

abrir ↗

Referência✓ VexDay Proof

Hexamail Server 3.0.0.001 - 'pop3' Remote Overflow (PoC)

CVE-2007-4646—doswindows

Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of servi

28RISCO

abrir ↗

Referência

CVE-2014-6437

CVE-2014-6437—

Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices allow remote attackers to obtain sensitive device configurat

28RISCO

abrir ↗

Referência

CVE-2019-1151

CVE-2019-1151HIGH

Microsoft Graphics Remote Code Execution Vulnerability

46RISCO

abrir ↗

Referência

CVE-2009-2601

CVE-2009-2601—

SQL injection vulnerability in the Joomlaequipment (aka JUser or com_juser) component 2.0.4 for Joomla! allows remote at

23RISCO

abrir ↗

Referência

CVE-2004-1423

CVE-2004-1423—

Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth o

28RISCO

abrir ↗

Referência

CVE-2009-2603

CVE-2009-2603—

Multiple SQL injection vulnerabilities in index.php in Escon SupportPortal Pro 3.0 allow remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2017-1084

CVE-2017-1084—

In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections a

28RISCO

abrir ↗

Referência

CVE-2017-1084

CVE-2017-1084—

In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections a

28RISCO

abrir ↗

Referência

CVE-2007-0213

CVE-2007-0213—

Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, wh

35RISCO

abrir ↗

Referência

CVE-2017-6360

CVE-2017-6360—

QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and obtain sensitive information

35RISCO

abrir ↗

Referência

CVE-2019-13605

CVE-2019-13605—

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in

28RISCO

abrir ↗

Referência

CVE-2015-3456

CVE-2015-3456—

The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a

28RISCO

abrir ↗

Referência

CVE-2018-9248

CVE-2018-9248—

FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass via a "Cookie: Name=0admin" header.

28RISCO

abrir ↗

Referência

CVE-2020-28977

CVE-2020-28977—

The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a

28RISCO

abrir ↗

Referência

CVE-2010-4977

CVE-2010-4977—

SQL injection vulnerability in menu.php in the Canteen (com_canteen) component 1.0 for Joomla! allows remote attackers t

43RISCO

abrir ↗

Referência

CVE-2009-2618

CVE-2009-2618—

SQL injection vulnerability in the Surveys (aka NS-Polls) module in MDPro (MD-Pro) 1.083.x allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

sPHPell 1.01 - Multiple Remote File Inclusions

CVE-2007-3522—webappsphp

Multiple PHP remote file inclusion vulnerabilities in sPHPell 1.01 allow remote attackers to execute arbitrary PHP code

35RISCO

abrir ↗

Referência✓ VexDay Proof

EDraw Office Viewer Component 5.3 - 'FtpDownloadFile()' Remote Buffer Overflow

CVE-2007-5257—doswindows

Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Compone

28RISCO

abrir ↗

Referência

CVE-2020-3433

CVE-2020-3433HIGHsob ataqueransomware

Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

91RISCO

abrir ↗

Referência

CVE-2017-14084

CVE-2017-14084—

A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to e

28RISCO

abrir ↗

Referência

CVE-2017-14084

CVE-2017-14084—

A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to e

28RISCO

abrir ↗

Referência

CVE-2020-7115

CVE-2020-7115—

The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass. Upon succ

35RISCO

abrir ↗

Referência

CVE-2016-9091

CVE-2016-9091—

Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susc

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.