Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.107exploits catalogados

36.322CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

22.573 exploits

Referência

CVE-2015-4117

CVE-2015-4117—

Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharac

28RISCO

abrir ↗

Referência

CVE-2013-5660

CVE-2013-5660—

Buffer overflow in Power Software WinArchiver 3.2 allows remote attackers to execute arbitrary code via a crafted .zip f

28RISCO

abrir ↗

Referência

CVE-2016-8380

CVE-2016-8380—

The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.

28RISCO

abrir ↗

Referência

CVE-2016-8371

CVE-2016-8371—

The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism i

28RISCO

abrir ↗

Referência✓ VexDay Proof

Bytehoard 2.1 - 'server.php' Remote File Inclusion

CVE-2006-2849—webappsphp

PHP remote file inclusion vulnerability in includes/webdav/server.php in Bytehoard 2.1 Epsilon/Delta allows remote attac

28RISCO

abrir ↗

Referência✓ VexDay Proof

Site@School 2.4.02 - Arbitrary File Upload

CVE-2006-4920—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to exe

28RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component NeoReferences 1.3.1 - 'catid' SQL Injection

CVE-2008-0686—webappsphp

SQL injection vulnerability in index.php in the NeoReferences (com_neoreferences) 1.3.1 and 1.3.3 component for Joomla!

23RISCO

abrir ↗

Referência

CVE-2009-2885

CVE-2009-2885—

SQL injection vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2013-6221

CVE-2013-6221—

Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoP

60RISCO

abrir ↗

Referência

CVE-2018-0946

CVE-2018-0946—

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

35RISCO

abrir ↗

Referência

CVE-2015-4632

CVE-2015-4632—

Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08

50RISCO

abrir ↗

Referência

CVE-2015-4632

CVE-2015-4632—

Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08

50RISCO

abrir ↗

Referência

CVE-2016-3288

CVE-2016-3288—

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page, aka "Internet E

35RISCO

abrir ↗

Referência

CVE-2014-5468

CVE-2014-5468—

A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cf

50RISCO

abrir ↗

Referência

CVE-2026-14749

CVE-2026-14749MEDIUM

mjperpinosa stumasy calculate.php eval code injection

33RISCO

abrir ↗

Referência

CVE-2026-14748

CVE-2026-14748MEDIUM

AIAnytime Awesome-MCP-Server mcp-wiki/wiki-summary server.py server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2015-2097

CVE-2015-2097—

Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary c

28RISCO

abrir ↗

Referência

CVE-2015-2097

CVE-2015-2097—

Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary c

28RISCO

abrir ↗

Referência

CVE-2020-15261

CVE-2020-15261HIGH

Unquoted service path vulnerability on Veyon

46RISCO

abrir ↗

Referência

CVE-2013-4625

CVE-2013-4625—

Cross-site scripting (XSS) vulnerability in files/installer.cleanup.php in the Duplicator plugin before 0.4.5 for WordPr

43RISCO

abrir ↗

Referência

CVE-2016-8020

CVE-2016-8020—

Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earl

28RISCO

abrir ↗

Referência

CVE-2009-2392

CVE-2009-2392—

SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2011-1761

CVE-2011-1761—

Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions in src/load_abc.cpp in l

28RISCO

abrir ↗

Referência

CVE-2017-6320

CVE-2017-6320—

A remote command injection vulnerability exists in the Barracuda Load Balancer product line (confirmed on v5.4.0.004 (20

28RISCO

abrir ↗

Referência

CVE-2017-17867

CVE-2017-17867—

Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying th

28RISCO

abrir ↗

Referência

CVE-2017-7397

CVE-2017-7397—

BackBox Linux 4.6 allows remote attackers to cause a denial of service (ksoftirqd CPU consumption) via a flood of packet

28RISCO

abrir ↗

Referência

CVE-2019-6208

CVE-2019-6208—

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Moja

23RISCO

abrir ↗

Referência

CVE-2015-2097

CVE-2015-2097—

Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary c

28RISCO

abrir ↗

Referência

CVE-2021-27973

CVE-2021-27973—

SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages.

28RISCO

abrir ↗

Referência

CVE-2013-6221

CVE-2013-6221—

Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoP

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.