Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.313exploits catalogados

34.834CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentes populares risco

21.797 exploits

Referência✓ VexDay Proof

TYPSoft FTP Server 1.11 - 'ABORT' Remote Denial of Service

CVE-2009-1668—doswindows

TYPSoft FTP Server 1.11 allows remote attackers to cause a denial of service (CPU consumption) by sending an ABOR (abort

23RISCO

abrir ↗

Referência

CVE-2009-3531

CVE-2009-3531—

SQL injection vulnerability in vnews.php in Universe CMS 1.0.6 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

CliServ Web Community 0.65 - 'cl_headers' Include

CVE-2006-7068—webappsphp

PHP remote file inclusion vulnerability in CliServ Web Community 0.65 and earlier allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

TEC-IT TBarCode - OCX ActiveX Arbitrary File Overwrite

CVE-2007-3233—remotewindows

The TEC-IT TBarCode OCX ActiveX control (TBarCode7.ocx) 7.0.2.3524 allows remote attackers to overwrite arbitrary files

23RISCO

abrir ↗

Referência✓ VexDay Proof

Arcadem LE 2.04 - 'loadadminpage' Remote File Inclusion

CVE-2007-6542—webappsphp

PHP remote file inclusion vulnerability in admin/frontpage_right.php in Arcadem LE 2.04 and earlier allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component SimpleBoard 1.0.1 - Arbitrary File Upload

CVE-2008-6814—webappsphp

Unrestricted file upload vulnerability in image_upload.php in the SimpleBoard (com_simpleboard) component 1.0.1 and earl

23RISCO

abrir ↗

Referência

CVE-2014-1618

CVE-2014-1618—

Multiple SQL injection vulnerabilities in UAEPD Shopping Cart Script allow remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2010-0944

CVE-2010-0944—

Directory traversal vulnerability in the JCollection (com_jcollection) component for Joomla! allows remote attackers to

43RISCO

abrir ↗

Referência

CVE-2009-3536

CVE-2009-3536—

Multiple stack-based buffer overflows in EpicDJSoftware EpicVJ 1.2.8.0 and 1.3.1.2 allow remote attackers to cause a den

23RISCO

abrir ↗

Referência

CVE-2009-2384

CVE-2009-2384—

Buffer overflow in amp.exe in Brothersoft PEamp 1.02b allows user-assisted remote attackers to execute arbitrary code vi

23RISCO

abrir ↗

Referência

CVE-2019-16758

CVE-2019-16758—

In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can use a directory traversal tech

28RISCO

abrir ↗

Referência

CVE-2018-15691

CVE-2018-15691—

Insecure deserialization of a specially crafted serialized object, in CA Release Automation 6.5 and earlier, allows atta

28RISCO

abrir ↗

Referência

CVE-2026-29000

CVE-2026-29000CRITICAL

pac4j-jwt JwtAuthenticator Authentication Bypass

48RISCO

abrir ↗

Referência

CVE-2016-5680

CVE-2016-5680—

Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance

28RISCO

abrir ↗

Referência✓ VexDay Proof

FTPShell Server 4.3 - Licence Key Remote Buffer Overflow (PoC)

CVE-2009-0349—doswindows

Stack-based buffer overflow in FTPShell Server 4.3 allows user-assisted remote attackers to cause a denial of service (p

23RISCO

abrir ↗

Referência

CVE-2017-5607

CVE-2017-5607—

Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.3

23RISCO

abrir ↗

Referência

CVE-2009-1329

CVE-2009-1329—

Stack-based buffer overflow in Mini-stream Shadow Stream Recorder 3.0.1.7 allows remote attackers to execute arbitrary c

23RISCO

abrir ↗

Referência

CVE-2009-1329

CVE-2009-1329—

Stack-based buffer overflow in Mini-stream Shadow Stream Recorder 3.0.1.7 allows remote attackers to execute arbitrary c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Elecard MPEG Player 5.5 - '.m3u' Stack Buffer Overflow (PoC)

CVE-2009-0491—doswindows

Stack-based buffer overflow in Elecard MPEG Player 5.5 build 15884.081218 allows remote attackers to execute arbitrary c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple Website Software 0.99 - 'common.php' File Inclusion

CVE-2006-5636—webappsphp

PHP remote file inclusion vulnerability in common.php in Simple Website Software (SWS) 0.99 and earlier allows remote at

23RISCO

abrir ↗

Referência

phpList 3.5.0 - Authentication Bypass

CVE-2020-8547—webappsphp

phpList 3.5.0 allows type juggling for admin login bypass because == is used instead of === for password hashes, which m

23RISCO

abrir ↗

Referência✓ VexDay Proof

MLdonkey 2.9.7 - Arbitrary File Disclosure

CVE-2009-0753—remotemultiple

Absolute path traversal vulnerability in MLDonkey 2.8.4 through 2.9.7 allows remote attackers to read arbitrary files vi

23RISCO

abrir ↗

Referência

CVE-2018-6092

CVE-2018-6092—

An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker t

23RISCO

abrir ↗

Referência

CVE-2017-13791

CVE-2017-13791—

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud

23RISCO

abrir ↗

Referência

CVE-2019-13656

CVE-2019-13656CRITICAL

An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.

48RISCO

abrir ↗

Referência

CVE-2019-10887

CVE-2019-10887—

A reflected HTML injection vulnerability on Salicru SLC-20-cube3(5) devices running firmware version cs121-SNMP v4.54.82

23RISCO

abrir ↗

Referência

CVE-2019-10887

CVE-2019-10887—

A reflected HTML injection vulnerability on Salicru SLC-20-cube3(5) devices running firmware version cs121-SNMP v4.54.82

23RISCO

abrir ↗

Referência

CVE-2010-0970

CVE-2010-0970—

SQL injection vulnerability in phpmylogon.php in PhpMyLogon 2 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2010-0972

CVE-2010-0972—

Directory traversal vulnerability in the GCalendar (com_gcalendar) component 2.1.5 for Joomla! allows remote attackers t

43RISCO

abrir ↗

Referência

CVE-2010-2439

CVE-2010-2439—

Stack-based buffer overflow in MoreAmp allows remote attackers to execute arbitrary code via a long line in a song list

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.