Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.836exploits catalogados

32.133CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8.156Nuclei 4.201Metasploit 3.462✓ só verificadosrecentes populares risco

19.967 exploits

Referência

CVE-2010-4862

CVE-2010-4862—

SQL injection vulnerability in the JExtensions JE Directory (com_jedirectory) component 1.0 for Joomla! allows remote at

23RISCO

abrir ↗

Referência

CVE-2015-8635

CVE-2015-8635—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and

28RISCO

abrir ↗

Referência

Small Axe 0.3.1 - 'cfile' Remote File Inclusion

CVE-2008-0376—

PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute

35RISCO

abrir ↗

Referência

CVE-2013-2570

CVE-2013-2570—

A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 in the General.Time.NTP.Server parameter to t

28RISCO

abrir ↗

Referência

CVE-2013-6225

CVE-2013-6225—

LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability

28RISCO

abrir ↗

Referência

CVE-2020-5515

CVE-2020-5515—

Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection.

28RISCO

abrir ↗

Referência

CVE-2020-5515

CVE-2020-5515—

Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection.

28RISCO

abrir ↗

Referência

CVE-2010-4598

CVE-2010-4598—

Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary f

28RISCO

abrir ↗

Referência

CVE-2019-13359

CVE-2019-13359—

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal user to craft and uploa

28RISCO

abrir ↗

Referência

CVE-2018-4935

CVE-2018-4935—

Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability. Successful exp

28RISCO

abrir ↗

Referência

CVE-2018-4937

CVE-2018-4937—

Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability. Successful exp

28RISCO

abrir ↗

Referência

CVE-2016-10036

CVE-2016-10036—

Unrestricted file upload vulnerability in ui/artifact/upload in JFrog Artifactory before 4.16 allows remote attackers to

28RISCO

abrir ↗

Referência

CVE-2016-10036

CVE-2016-10036—

Unrestricted file upload vulnerability in ui/artifact/upload in JFrog Artifactory before 4.16 allows remote attackers to

28RISCO

abrir ↗

Referência

CVE-2021-24563

CVE-2021-24563—

Frontend Uploader <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting

28RISCO

abrir ↗

Referência

CVE-2017-16642

CVE-2017-16642—

In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian hand

28RISCO

abrir ↗

Referência

CVE-2015-2998

CVE-2015-2998—

SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensi

43RISCO

abrir ↗

Referência

CVE-2020-8196

CVE-2020-8196MEDIUMsob ataque

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

68RISCO

abrir ↗

Referência

CVE-2018-0708

CVE-2018-0708—

Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allo

28RISCO

abrir ↗

Referência

CVE-2018-0708

CVE-2018-0708—

Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allo

28RISCO

abrir ↗

Referência

CVE-2018-5347

CVE-2018-5347—

Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs

35RISCO

abrir ↗

Referência

CVE-2008-6132

CVE-2008-6132—

Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allo

43RISCO

abrir ↗

Referência

CVE-2008-6132

CVE-2008-6132—

Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allo

43RISCO

abrir ↗

Referência

CVE-2015-2166

CVE-2015-2166—

Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5

43RISCO

abrir ↗

Referência

CVE-2015-2166

CVE-2015-2166—

Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5

43RISCO

abrir ↗

Referência

CVE-2019-19576

CVE-2019-19576—

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! an

28RISCO

abrir ↗

Referência

CVE-2018-17057

CVE-2018-17057—

An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar://

28RISCO

abrir ↗

Referência

CVE-2018-17057

CVE-2018-17057—

An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar://

28RISCO

abrir ↗

Referência

CVE-2018-17057

CVE-2018-17057—

An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar://

28RISCO

abrir ↗

Referência

CVE-2015-6024

CVE-2015-6024—

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remot

28RISCO

abrir ↗

Referência

CVE-2015-6024

CVE-2015-6024—

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remot

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.