Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.180exploits catalogados

31.691CVEs com exploração pública

0testados em laboratório

Todos Exploit-DB 22.469Referência 19.841GitHub PoC 13.140VulnCheck XDB 8.078Nuclei 4.190Metasploit 3.462✓ só verificadosrecentes populares risco

19.841 exploits

Referência

CVE-2022-36267

CVE-2022-36267—

In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerabilit

35RISCO

abrir ↗

Referência

CVE-2016-5676

CVE-2016-5676—

cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillanc

50RISCO

abrir ↗

Referência

CVE-2016-5312

CVE-2016-5312—

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote au

35RISCO

abrir ↗

Referência

CVE-2016-5312

CVE-2016-5312—

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote au

35RISCO

abrir ↗

Referência

CVE-2024-9441

CVE-2024-9441CRITICAL

Linear eMerge e3-Series Forgot Password Command Injection

60RISCO

abrir ↗

Referência

CVE-2018-8021

CVE-2018-8021—

Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to pos

35RISCO

abrir ↗

Referência

Microsoft Windows - '.chm' Denial of Service (HTML Compiled)

CVE-2009-0119—

Buffer overflow in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (memory corruption and

35RISCO

abrir ↗

Referência

CVE-2012-4329

CVE-2012-4329—

The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restart

28RISCO

abrir ↗

Referência

CVE-2018-18326

CVE-2018-18326—

DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expect

50RISCO

abrir ↗

Referência

CVE-2019-6441

CVE-2019-6441—

An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM33

35RISCO

abrir ↗

Referência

CVE-2019-6441

CVE-2019-6441—

An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM33

35RISCO

abrir ↗

Referência

CVE-2019-6441

CVE-2019-6441—

An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM33

35RISCO

abrir ↗

Referência

Coship Wireless Router 4.0.0.48 / 4.0.0.40 / 5.0.0.54 / 5.0.0.55 / 10.0.0.49 - Unauthenticated Admin Password Reset

CVE-2019-6441—

An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM33

35RISCO

abrir ↗

Referência

CVE-2011-4453

CVE-2011-4453—

The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitra

50RISCO

abrir ↗

Referência

CVE-2011-4453

CVE-2011-4453—

The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitra

50RISCO

abrir ↗

Referência

CVE-2014-9118

CVE-2014-9118—

The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary comm

35RISCO

abrir ↗

Referência

CVE-2014-9118

CVE-2014-9118—

The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary comm

35RISCO

abrir ↗

Referência

CVE-2018-0840

CVE-2018-0840—

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server

35RISCO

abrir ↗

Referência

CVE-2015-7007

CVE-2015-7007—

Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement f

50RISCO

abrir ↗

Referência

CVE-2015-7007

CVE-2015-7007—

Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement f

50RISCO

abrir ↗

Referência

CVE-2017-17932

CVE-2017-17932—

A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow

50RISCO

abrir ↗

Referência

CVE-2017-17932

CVE-2017-17932—

A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow

50RISCO

abrir ↗

Referência

CVE-2017-17932

CVE-2017-17932—

A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow

50RISCO

abrir ↗

Referência

CVE-2010-2343

CVE-2010-2343—

Stack-based buffer overflow in D.R. Software Audio Converter 8.1, 2007, and 8.05 allows remote attackers to execute arbi

50RISCO

abrir ↗

Referência

CVE-2014-4114

CVE-2014-4114HIGHsob ataque

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2

100RISCO

abrir ↗

Referência

CVE-2019-0808

CVE-2019-0808HIGHsob ataque

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

98RISCO

abrir ↗

Referência

Apache mod_dav / svn - Remote Denial of Service

CVE-2009-1955—

The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav

35RISCO

abrir ↗

Referência

CVE-2018-8734

CVE-2018-8734—

SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker

50RISCO

abrir ↗

Referência

CVE-2018-8734

CVE-2018-8734—

SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker

50RISCO

abrir ↗

Referência

CVE-2014-4114

CVE-2014-4114HIGHsob ataque

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.