Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.526exploits catalogados

34.478CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.534GitHub PoC 13.654VulnCheck XDB 8.213Nuclei 4.218Metasploit 3.464✓ só verificadosrecentes populares risco

21.534 exploits

Referência✓ VexDay Proof

Myspace Clone Script - 'index.php' Remote File Inclusion

CVE-2007-6057—webappsphp

PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script (aka Myspace Clone Script) all

23RISCO

abrir ↗

Referência✓ VexDay Proof

TUTOS 1.3 - 'cmd.php' Remote Command Execution

CVE-2008-0148—webappsphp

TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

asg-sentry 7.0.0 - Multiple Vulnerabilities

CVE-2008-1320—dosmultiple

Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary co

28RISCO

abrir ↗

Referência✓ VexDay Proof

Getleft 1.2 - Remote Buffer Overflow (PoC)

CVE-2008-6897—dosmultiple

Multiple buffer overflows in Getleft.exe in Andres Garcia Getleft 1.2 allow remote attackers to cause a denial of servic

23RISCO

abrir ↗

Referência

CVE-2018-19914

CVE-2018-19914—

DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field.

38RISCO

abrir ↗

Referência

CVE-2019-8375

CVE-2019-8375—

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products

28RISCO

abrir ↗

Referência

CVE-2021-46360

CVE-2021-46360—

Authenticated remote code execution (RCE) in Composr-CMS 10.0.39 and earlier allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2010-2311

CVE-2010-2311—

Stack-based buffer overflow in Power Tab Editor 1.7 build 80 allows user-assisted remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2009-3811

CVE-2009-3811—

Stack-based buffer overflow in Music Tag Editor 1.61 build 212 allows remote attackers to execute arbitrary code via an

23RISCO

abrir ↗

Referência

CVE-2023-0455

CVE-2023-0455HIGH

Unrestricted Upload of File with Dangerous Type in unilogies/bumsys

41RISCO

abrir ↗

Referência

CVE-2011-0498

CVE-2011-0498—

Stack-based buffer overflow in Nokia Multimedia Player 1.00.55.5010, and possibly other versions, allows user-assisted r

23RISCO

abrir ↗

Referência

CVE-2017-2479

CVE-2017-2479—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud b

23RISCO

abrir ↗

Referência✓ VexDay Proof

SubEdit Player build 4066 - subtitle Buffer Overflow (PoC)

CVE-2008-1973—doswindows

Heap-based buffer overflow in SubEdit Player build 4056 and 4066 allows remote attackers to cause a denial of service (c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Devalcms 1.4a - Cross-Site Scripting / Remote Code Execution

CVE-2008-6982—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in devalcms 1.4a allows remote attackers to inject arbitrary web s

38RISCO

abrir ↗

Referência✓ VexDay Proof

WinAsm Studio 5.1.5.0 - Local Heap Overflow (PoC)

CVE-2009-1040—doswindows

Buffer overflow in WinAsm Studio 5.1.5.0 allows user-assisted remote attackers to execute arbitrary code via a crafted p

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nero ShowTime 5.0.15.0 - '.m3u' Playlist File Remote Buffer Overflow (PoC)

CVE-2008-7079—doswindows

Buffer overflow in Nero ShowTime 5.0.15.0 allows remote attackers to cause a denial of service (crash) and possibly exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

PrecisionID Datamatrix - ActiveX Arbitrary File Overwrite

CVE-2009-1212—remotewindows

Multiple insecure method vulnerabilities in PRECIS~2.DLL in the PrecisionID Datamatrix ActiveX control (DMATRIXLib.Datam

23RISCO

abrir ↗

Referência

CVE-2018-19751

CVE-2018-19751—

DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields.

38RISCO

abrir ↗

Referência

CVE-2018-19752

CVE-2018-19752—

DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar.

38RISCO

abrir ↗

Referência

CVE-2010-0985

CVE-2010-0985—

Directory traversal vulnerability in the Abbreviations Manager (com_abbrev) component 1.1 for Joomla! allows remote atta

43RISCO

abrir ↗

Referência

CVE-2012-5340

CVE-2012-5340—

SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corru

23RISCO

abrir ↗

Referência

CVE-2025-7206

CVE-2025-7206CRITICAL

D-Link DIR-825 httpd switch_language.cgi sub_410DDC stack-based overflow

53RISCO

abrir ↗

Referência

CVE-2017-15580

CVE-2017-15580—

osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats. However, it does not properly v

28RISCO

abrir ↗

Referência

CVE-2017-15580

CVE-2017-15580—

osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats. However, it does not properly v

28RISCO

abrir ↗

Referência

CVE-2017-15580

CVE-2017-15580—

osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats. However, it does not properly v

28RISCO

abrir ↗

Referência

CVE-2010-1601

CVE-2010-1601—

Directory traversal vulnerability in the JA Comment (com_jacomment) component for Joomla! allows remote attackers to rea

43RISCO

abrir ↗

Referência

CVE-2010-1601

CVE-2010-1601—

Directory traversal vulnerability in the JA Comment (com_jacomment) component for Joomla! allows remote attackers to rea

43RISCO

abrir ↗

Referência

CVE-2013-1468

CVE-2013-1468—

Cross-site request forgery (CSRF) vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote att

23RISCO

abrir ↗

Referência

CVE-2021-24245

CVE-2021-24245—

Stop Spammers < 2021.9 - Reflected Cross-Site Scripting (XSS)

38RISCO

abrir ↗

Referência

CVE-2019-25713

CVE-2019-25713HIGH

MyT-PM 1.5.1 SQL Injection via Charge[group_total] Parameter

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.