Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.836exploits catalogados

32.133CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8.156Nuclei 4.201Metasploit 3.462✓ só verificadosrecentes populares risco

19.967 exploits

Referência

CVE-2015-8644

CVE-2015-8644—

Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on

28RISCO

Referência

CVE-2016-0985

CVE-2016-0985—

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on

28RISCO

Referência

Peachtree Accounting 2004 - 'PAWWeb11.ocx' ActiveX Insecure Method

CVE-2008-4699—

Insecure method vulnerability in the ActiveX control (PAWWeb11.ocx) in Peachtree Accounting 2004 allows remote attackers

28RISCO

Referência

Sahi pro 8.x - Directory Traversal

CVE-2019-13063—

Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the sc

28RISCO

Referência

CVE-2016-4203

CVE-2016-4203—

Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acro

28RISCO

Referência

CVE-2013-3522

CVE-2013-3522—

SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier

43RISCO

Referência

CVE-2017-18357

CVE-2017-18357—

Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of t

43RISCO

Referência

CVE-2018-7750

CVE-2018-7750—

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x

28RISCO

Referência

CVE-2023-2745

CVE-2023-2745MEDIUM

WordPress Core < 6.2.1 - Directory Traversal

70RISCO

Referência

CVE-2018-14665

CVE-2018-14665—

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RISCO

Referência

CVE-2018-14665

CVE-2018-14665—

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RISCO

Referência

CVE-2018-14665

CVE-2018-14665—

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RISCO

Referência

CVE-2018-14665

CVE-2018-14665—

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RISCO

Referência

CVE-2018-14665

CVE-2018-14665—

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RISCO

Referência

CVE-2018-14665

CVE-2018-14665—

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RISCO

Referência

CVE-2018-14665

CVE-2018-14665—

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RISCO

Referência

CVE-2018-14665

CVE-2018-14665—

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RISCO

Referência

CVE-2018-14665

CVE-2018-14665—

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RISCO

Referência

WordPress Core 6.2 - Directory Traversal

CVE-2023-2745MEDIUM

WordPress Core < 6.2.1 - Directory Traversal

70RISCO

Referência

CVE-2021-25162

CVE-2021-25162—

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products

28RISCO

Referência

Qt QuickTeam - Multiple Remote File Inclusions

CVE-2009-1551—

Multiple PHP remote file inclusion vulnerabilities in Qt quickteam 2 allow remote attackers to execute arbitrary PHP cod

28RISCO

Referência

CVE-2019-16405

CVE-2019-16405—

Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code

28RISCO

Referência

CVE-2020-35314

CVE-2020-35314—

A remote code execution vulnerability in the installUpdateThemePluginAction function in index.php in WonderCMS 3.1.3, al

28RISCO

Referência

CVE-2013-4810

CVE-2013-4810CRITICALsob ataque

HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle

100RISCO

Referência

CVE-2017-8295

CVE-2017-8295—

WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for re

28RISCO

Referência

CVE-2019-3948

CVE-2019-3948—

The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0

28RISCO

Referência

CVE-2010-3138

CVE-2010-3138—

Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to

28RISCO

Referência

CVE-2010-3138

CVE-2010-3138—

Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to

28RISCO

Referência

CVE-2013-6719

CVE-2013-6719—

delivery.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8.6, 8.7 before FP2

28RISCO

Referência

CVE-2015-8634

CVE-2015-8634—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and

28RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.