Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.445exploits catalogados

34.432CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

20.023 exploits

Referência

CVE-2011-1546

CVE-2011-1546—

Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3 allow remote attackers to exec

23RISCO

abrir ↗

Referência

DNS Tools (PHP Digger) - Remote Command Execution

CVE-2009-1916—

dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the

28RISCO

abrir ↗

Referência

Technote 7 - 'shop_this_skin_path' Remote File Inclusion

CVE-2008-4138—

PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows r

28RISCO

abrir ↗

Referência

CVE-2010-1029

CVE-2010-1029—

Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Saf

28RISCO

abrir ↗

Referência

CVE-2010-1029

CVE-2010-1029—

Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Saf

28RISCO

abrir ↗

Referência

CVE-2017-8770

CVE-2017-8770—

There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesys

28RISCO

abrir ↗

Referência

CVE-2019-3978

CVE-2019-3978—

RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queri

28RISCO

abrir ↗

Referência

CVE-2019-15993

CVE-2019-15993HIGH

Cisco Small Business Switches Information Disclosure Vulnerability

46RISCO

abrir ↗

Referência

CVE-2026-6594

CVE-2026-6594MEDIUM

brikcss merge prototype pollution

33RISCO

abrir ↗

Referência

SquirrelMail G/PGP Encryption Plugin 2.0 - Command Execution

CVE-2005-1924—

The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands v

28RISCO

abrir ↗

Referência

CVE-2024-6127

CVE-2024-6127CRITICAL

BC Security Empire Path Traversal RCE

68RISCO

abrir ↗

Referência

CVE-2018-7254

CVE-2018-7254—

The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of

23RISCO

abrir ↗

Referência

CVE-2018-7254

CVE-2018-7254—

The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of

23RISCO

abrir ↗

Referência

CVE-2021-25157

CVE-2021-25157—

A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s

28RISCO

abrir ↗

Referência

RhinoSoft Serv-U FTP Server 7.3 - (Authenticated) 'stou con:1' Denial of Service

CVE-2008-4500—

Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service (CPU consu

28RISCO

abrir ↗

Referência

Winamp 5.34 - '.mp4' Code Execution

CVE-2007-2498—

libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .

28RISCO

abrir ↗

Referência

CVE-2012-6303

CVE-2012-6303—

Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in

28RISCO

abrir ↗

Referência

AlsaPlayer < 0.99.80-rc3 - Vorbis Input Local Buffer Overflow

CVE-2007-5301—

Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in Alsa

28RISCO

abrir ↗

Referência

CVE-2013-6023

CVE-2013-6023—

Directory traversal vulnerability in the TVT TD-2308SS-B DVR with firmware 3.2.0.P-3520A-00 and earlier allows remote at

28RISCO

abrir ↗

Referência

CVE-2019-1346

CVE-2019-1346—

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Servi

28RISCO

abrir ↗

Referência

CVE-2019-1343

CVE-2019-1343—

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Servi

28RISCO

abrir ↗

Referência

CVE-2008-6994

CVE-2008-6994—

Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.14

28RISCO

abrir ↗

Referência

Google Chrome 0.2.149.27 - 'SaveAs' Remote Buffer Overflow

CVE-2008-6994—

Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.14

28RISCO

abrir ↗

Referência

CVE-2013-6236

CVE-2013-6236—

IZON IP 2.0.2: hard-coded password vulnerability

28RISCO

abrir ↗

Referência

CVE-2016-4557

CVE-2016-4557—

The replace_map_fd_with_map_ptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly mai

43RISCO

abrir ↗

Referência

Merak Media Player 3.2 - '.m3u' File Local Buffer Overflow (PoC)

CVE-2009-0350—

Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute arbitrary code via a long strin

28RISCO

abrir ↗

Referência

Snaps! Gallery 1.4.4 - Remote User Pass Change

CVE-2007-2715—

Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1)

28RISCO

abrir ↗

Referência

CVE-2014-2996

CVE-2014-2996—

XCloner Standalone 3.5 and earlier, when enable_db_backup and sql_mem are enabled, allows remote authenticated administr

28RISCO

abrir ↗

Referência

CVE-2009-2934

CVE-2009-2934—

Multiple stack-based buffer overflows in xaudio.dll in Programmed Integration PIPL 2.5.0 and 2.5.0D allow remote attacke

28RISCO

abrir ↗

Referência

CVE-2019-12922

CVE-2019-12922—

A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page.

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.