Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

22.492 exploits

Referência

CVE-2011-5010

CVE-2011-5010—

apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via sh

50RISCO

abrir ↗

Referência✓ VexDay Proof

RM Downloader 3.0.0.9 - '.m3u' Universal Stack Overflow

CVE-2009-1326—localwindows

Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a

23RISCO

abrir ↗

Referência

CVE-2018-0767

CVE-2018-0767—

Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain info

35RISCO

abrir ↗

Referência

CVE-2017-11811

CVE-2017-11811—

ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker

35RISCO

abrir ↗

Referência

CVE-2012-3399

CVE-2012-3399—

Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the

50RISCO

abrir ↗

Referência

CVE-2011-3322

CVE-2011-3322—

Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows

50RISCO

abrir ↗

Referência

CVE-2024-3272

CVE-2024-3272CRITICALsob ataque

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials

100RISCO

abrir ↗

Referência✓ VexDay Proof

WM Downloader - '.m3u' Local Stack Overflow (PoC)

CVE-2009-1327—doswindows

Stack-based buffer overflow in Mini-stream WM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a

23RISCO

abrir ↗

Referência

CVE-2019-6977

CVE-2019-6977—

gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch funct

35RISCO

abrir ↗

Referência

CVE-2019-6977

CVE-2019-6977—

gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch funct

35RISCO

abrir ↗

Referência

CVE-2018-19422

CVE-2018-19422—

/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, beca

50RISCO

abrir ↗

Referência

CVE-2018-19422

CVE-2018-19422—

/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, beca

50RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX - 'mount_smbfs' Local Stack Buffer Overflow

CVE-2007-3876—localosx

Stack-based buffer overflow in SMB in Apple Mac OS X 10.4.11 allows local users to execute arbitrary code via (1) a long

23RISCO

abrir ↗

Referência✓ VexDay Proof

TFTP Server for Windows 1.4 - ST Remote BSS Overflow

CVE-2008-2161—remotewindows

Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execut

50RISCO

abrir ↗

Referência

CVE-2017-11861

CVE-2017-11861—

Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker t

35RISCO

abrir ↗

Referência

CVE-2018-8735

CVE-2018-8735—

Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execut

50RISCO

abrir ↗

Referência

CVE-2018-8735

CVE-2018-8735—

Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execut

50RISCO

abrir ↗

Referência

CVE-2016-1593

CVE-2016-1593—

Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remot

50RISCO

abrir ↗

Referência

CVE-2026-7060

CVE-2026-7060MEDIUM

liyupi yu-picture MyBatis-Plus PictureServiceImpl.java PageRequest sql injection

33RISCO

abrir ↗

Referência

CVE-2018-9948

CVE-2018-9948—

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader

50RISCO

abrir ↗

Referência

CVE-2019-8394

CVE-2019-8394HIGHsob ataque

Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via l

98RISCO

abrir ↗

Referência

CVE-2009-3175

CVE-2009-3175—

Multiple SQL injection vulnerabilities in Model Agency Manager PRO (formerly Modeling Agency Content Management Script)

23RISCO

abrir ↗

Referência

CVE-2023-34039

CVE-2023-34039CRITICAL

Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key g

75RISCO

abrir ↗

Referência

CVE-2023-34039

CVE-2023-34039CRITICAL

Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key g

75RISCO

abrir ↗

Referência✓ VexDay Proof

Mazens PHP Chat V3 (basepath) - Remote File Inclusion

CVE-2007-2939—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Mazen's PHP Chat 3.0.0 allow remote attackers to execute arbitrary

35RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.3 - 'PHP_gd2.dll' imagepsloadfont Local Buffer Overflow (PoC)

CVE-2007-4033—doswindows

Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent at

28RISCO

abrir ↗

Referência

CVE-2024-20353

CVE-2024-20353HIGHsob ataque

A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Fir

93RISCO

abrir ↗

Referência✓ VexDay Proof

The Recipe Script 5 - Authentication Bypass / Database Backup

CVE-2009-1662—webappsphp

Multiple SQL injection vulnerabilities in admin/login.php in Wright Way Services Recipe Script 5 allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2015-7768

CVE-2015-7768—

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD comma

50RISCO

abrir ↗

Referência

CVE-2016-0151

CVE-2016-0151HIGHsob ataqueransomware

The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,

83RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.