Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.836exploits catalogados

32.133CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8.156Nuclei 4.201Metasploit 3.462✓ só verificadosrecentes populares risco

19.967 exploits

Referência

CVE-2017-7588

CVE-2017-7588—

On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a

35RISCO

abrir ↗

Referência

CVE-2010-5299

CVE-2010-5299—

Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl f

50RISCO

abrir ↗

Referência

CVE-2010-5299

CVE-2010-5299—

Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl f

50RISCO

abrir ↗

Referência

CVE-2010-5299

CVE-2010-5299—

Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl f

50RISCO

abrir ↗

Referência

CVE-2018-17552

CVE-2018-17552—

SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigat

60RISCO

abrir ↗

Referência

CVE-2011-4885

CVE-2011-4885—

PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions pre

60RISCO

abrir ↗

Referência

CVE-2010-5299

CVE-2010-5299—

Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl f

50RISCO

abrir ↗

Referência

CVE-2015-6131

CVE-2015-6131—

Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers t

35RISCO

abrir ↗

Referência

CVE-2013-3111

CVE-2013-3111—

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service

35RISCO

abrir ↗

Referência

CVE-2013-3111

CVE-2013-3111—

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service

35RISCO

abrir ↗

Referência

CVE-2022-48194

CVE-2022-48194HIGH

TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a De

53RISCO

abrir ↗

Referência

CVE-2015-0050

CVE-2015-0050—

Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memo

35RISCO

abrir ↗

Referência

CVE-2017-16885

CVE-2017-16885—

Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices (intended for obtaining informati

35RISCO

abrir ↗

Referência

CVE-2012-2925

CVE-2012-2925—

SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência

CVE-2010-4091

CVE-2010-4091—

The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows

28RISCO

abrir ↗

Referência

Groupwise 7.0 - 'mailto: scheme' Buffer Overflow (PoC)

CVE-2008-2069—

Buffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or execute arbitrary code via

35RISCO

abrir ↗

Referência

CVE-2017-5375

CVE-2017-5375—

JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. T

35RISCO

abrir ↗

Referência

CVE-2017-5375

CVE-2017-5375—

JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. T

35RISCO

abrir ↗

Referência

CVE-2017-5375

CVE-2017-5375—

JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. T

35RISCO

abrir ↗

Referência

CVE-2020-29607

CVE-2020-29607—

A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access

35RISCO

abrir ↗

Referência

CVE-2013-1306

CVE-2013-1306—

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a cr

35RISCO

abrir ↗

Referência

CVE-2013-1306

CVE-2013-1306—

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a cr

35RISCO

abrir ↗

Referência

CVE-2015-3124

CVE-2015-3124—

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows

35RISCO

abrir ↗

Referência

CVE-2016-0801

CVE-2016-0801—

The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01

35RISCO

abrir ↗

Referência

CVE-2016-4655

CVE-2016-4655MEDIUMsob ataque

The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.

90RISCO

abrir ↗

Referência

CVE-2020-8195

CVE-2020-8195MEDIUMsob ataque

Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.1

75RISCO

abrir ↗

Referência

BaoFeng - ActiveX 'OnBeforeVideoDownload()' Remote Buffer Overflow

CVE-2009-1612—

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote

50RISCO

abrir ↗

Referência

CVE-2019-15813

CVE-2019-15813—

Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arb

35RISCO

abrir ↗

Referência

Sentrifugo 3.2 - File Upload Restriction Bypass

CVE-2019-15813—

Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arb

35RISCO

abrir ↗

Referência

CVE-2016-4228

CVE-2016-4228—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.