Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

22.573 exploits

Referência

CVE-2017-16894

CVE-2017-16894—

In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passwo

60RISCO

abrir ↗

Referência

CVE-2018-1002105

CVE-2018-1002105CRITICAL

In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upg

70RISCO

abrir ↗

Referência

CVE-2018-1002105

CVE-2018-1002105CRITICAL

In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upg

70RISCO

abrir ↗

Referência✓ VexDay Proof

mIRC 6.34 - Remote Buffer Overflow (PoC)

CVE-2008-4449—doswindows

Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIV

50RISCO

abrir ↗

Referência

CVE-2018-9276

CVE-2018-9276HIGHsob ataque

An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administra

100RISCO

abrir ↗

Referência

CVE-2018-9276

CVE-2018-9276HIGHsob ataque

An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administra

100RISCO

abrir ↗

Referência

CVE-2018-9276

CVE-2018-9276HIGHsob ataque

An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administra

100RISCO

abrir ↗

Referência

CVE-2010-1743

CVE-2010-1743—

SQL injection vulnerability in projects.php in Scratcher allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Natterchat 1.12 - Authentication Bypass

CVE-2008-7049—webappsphp

Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2021-24762

CVE-2021-24762—

Perfect Survey < 1.5.2 - Unauthenticated SQL Injection

60RISCO

abrir ↗

Referência✓ VexDay Proof

mIRC 6.34 - Remote Buffer Overflow

CVE-2008-4449—remotewindows

Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIV

50RISCO

abrir ↗

Referência✓ VexDay Proof

ESET SysInspector 1.1.1.0 - 'esiadrv.sys' (PoC)

CVE-2008-4451—doswindows

The SysInspector AntiStealth driver (esiasdrv.sys) 3.0.65535.0 in ESET System Analyzer Tool 1.1.1.0 allows local users t

23RISCO

abrir ↗

Referência

CVE-2018-1160

CVE-2018-1160CRITICAL

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking

70RISCO

abrir ↗

Referência

CVE-2018-1160

CVE-2018-1160CRITICAL

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking

70RISCO

abrir ↗

Referência

CVE-2018-1160

CVE-2018-1160CRITICAL

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking

70RISCO

abrir ↗

Referência

CVE-2018-1160

CVE-2018-1160CRITICAL

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking

70RISCO

abrir ↗

Referência

CVE-2020-13151

CVE-2020-13151—

Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs)

60RISCO

abrir ↗

Referência

CVE-2020-13151

CVE-2020-13151—

Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs)

60RISCO

abrir ↗

Referência✓ VexDay Proof

vxFtpSrv 2.0.3 - 'CWD' Remote Buffer Overflow (PoC)

CVE-2008-4452—doswindows

Buffer overflow in Cambridge Computer Corporation vxFtpSrv 2.0.3 allows remote attackers to cause a denial of service (c

23RISCO

abrir ↗

Referência

CVE-2017-5816

CVE-2017-5816—

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

60RISCO

abrir ↗

Referência

CVE-2017-5816

CVE-2017-5816—

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

60RISCO

abrir ↗

Referência✓ VexDay Proof

MySQL Quick Admin 1.5.5 - 'cookie' Local File Inclusion

CVE-2008-4455—webappsphp

Directory traversal vulnerability in index.php in EKINdesigns MySQL Quick Admin 1.5.5 and earlier, when magic_quotes_gpc

23RISCO

abrir ↗

Referência✓ VexDay Proof

CJG EXPLORER PRO 3.2 - 'g_pcltar_lib_dir' Remote File Inclusion

CVE-2007-2199—webappsphp

PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vi

35RISCO

abrir ↗

Referência✓ VexDay Proof

LogMeIn Remote Access Utility - ActiveX Memory Corruption (Denial of Service)

CVE-2008-7053—doswindows

LogMeIn Remote Access Utility ActiveX control (RACtrl.dll) allows remote attackers to cause a denial of service (crash)

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-CMS 1 - 'Username' Blind SQL Injection

CVE-2009-0407—webappsphp

SQL injection vulnerability in admin/login.php in PHP-CMS Project 1 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2021-32305

CVE-2021-32305—

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search paramet

60RISCO

abrir ↗

Referência

CVE-2026-7113

CVE-2026-7113MEDIUM

NousResearch hermes-agent Webhooks Endpoint webhook.py missing authentication

33RISCO

abrir ↗

Referência

CVE-2026-7112

CVE-2026-7112MEDIUM

NousResearch hermes-agent API_SERVER_KEY api_server.py _check_auth improper authentication

33RISCO

abrir ↗

Referência

CVE-2026-7110

CVE-2026-7110MEDIUM

code-projects Invoice System in Laravel item cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-7109

CVE-2026-7109MEDIUM

code-projects Invoice System in Laravel API Endpoint item improper authorization

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.