Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

22.492 exploits

Referência

CVE-2016-4971

CVE-2016-4971—

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted F

35RISCO

abrir ↗

Referência

CVE-2022-35411

CVE-2022-35411—

rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header i

35RISCO

abrir ↗

Referência

CVE-2013-2068

CVE-2013-2068—

Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow re

50RISCO

abrir ↗

Referência

CVE-2011-5171

CVE-2011-5171—

Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to e

50RISCO

abrir ↗

Referência

CVE-2026-14768

CVE-2026-14768MEDIUM

code-projects Real State Services builderHome.php sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

DFD Cart 1.1 - Multiple Remote File Inclusions

CVE-2007-5098—webappsphp

Multiple PHP remote file inclusion vulnerabilities in DFD Cart 1.1.4 and earlier, when register_globals is enabled, allo

35RISCO

abrir ↗

Referência

CVE-2009-1786

CVE-2009-1786—

The malloc subsystem in libc in IBM AIX 5.3 and 6.1 allows local users to create or overwrite arbitrary files via a syml

23RISCO

abrir ↗

Referência✓ VexDay Proof

Real Player - 'rmoc3260.dll' ActiveX Control Remote Code Execution

CVE-2008-1309—remotewindows

The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, Rea

50RISCO

abrir ↗

Referência

CVE-2010-0219

CVE-2010-0219—

Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products

60RISCO

abrir ↗

Referência

CVE-2019-6444

CVE-2019-6444—

An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read be

35RISCO

abrir ↗

Referência

CVE-2017-0202

CVE-2017-0202—

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerabi

35RISCO

abrir ↗

Referência

CVE-2023-4708

CVE-2023-4708MEDIUM

Infosoftbd Clcknshop GET Parameter all sql injection

45RISCO

abrir ↗

Referência

CVE-2019-0221

CVE-2019-0221—

The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided

50RISCO

abrir ↗

Referência

CVE-2017-11885

CVE-2017-11885—

Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold,

35RISCO

abrir ↗

Referência

CVE-2015-5574

CVE-2015-5574—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and

35RISCO

abrir ↗

Referência

CVE-2015-7245

CVE-2015-7245—

Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remot

50RISCO

abrir ↗

Referência✓ VexDay Proof

LS Simple Guestbook 1.0 - Remote Code Execution

CVE-2007-2093—webappsphp

Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) 1.0 allows remote at

35RISCO

abrir ↗

Referência

CVE-2011-5046

CVE-2011-5046—

The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Window

35RISCO

abrir ↗

Referência

CVE-2011-0506

CVE-2011-0506—

Directory traversal vulnerability in modules/profile/user.php in Ax Developer CMS (AxDCMS) 0.1.1 allows remote attackers

23RISCO

abrir ↗

Referência

Grafana 11.6.0 - SSRF

CVE-2025-4123HIGHwebappsmultiple

A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redire

78RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft SQL Server - Distributed Management Objects 'sqldmo.dll' Buffer Overflow (PoC)

CVE-2007-4814—doswindows

Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.200

35RISCO

abrir ↗

Referência✓ VexDay Proof

WebDesktop 0.1 - Remote File Inclusion

CVE-2007-5388—webappsphp

Multiple PHP remote file inclusion vulnerabilities in WebDesktop 0.1 allow remote attackers to execute arbitrary PHP cod

35RISCO

abrir ↗

Referência

CVE-2018-0866

CVE-2018-0866—

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Se

35RISCO

abrir ↗

Referência

CVE-2019-6116

CVE-2019-6116—

In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to

35RISCO

abrir ↗

Referência

CVE-2019-6116

CVE-2019-6116—

In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to

35RISCO

abrir ↗

Referência

CVE-2018-1306

CVE-2018-1306—

The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote a

35RISCO

abrir ↗

Referência

CVE-2014-8687

CVE-2014-8687—

Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root

50RISCO

abrir ↗

Referência✓ VexDay Proof

eXtremail 2.1.1 - PLAIN Authentication Remote Stack Overflow

CVE-2007-5466—remotelinux

Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sending

28RISCO

abrir ↗

Referência

CVE-2020-11652

CVE-2020-11652MEDIUMsob ataque

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RISCO

abrir ↗

Referência

CVE-2018-8625

CVE-2018-8625—

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.