Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.866exploits catalogados

35.812CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.573GitHub PoC 14.316VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.573 exploits

Referência

CVE-2026-9627

CVE-2026-9627HIGH

UTT HiPER 1200GW Web Management setSysAdm strcpy buffer overflow

41RISCO

abrir ↗

Referência

CVE-2025-8730

CVE-2025-8730CRITICAL

Belkin F9K1009/F9K1010 Web Interface hard-coded credentials

48RISCO

abrir ↗

Referência✓ VexDay Proof

Zervit Web Server 0.02 - Remote Buffer Overflow (PoC)

CVE-2009-1353—doswindows

Buffer overflow in the http_parse_hex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause

23RISCO

abrir ↗

Referência✓ VexDay Proof

Elecard AVC HD Player - '.XPL' Stack Buffer Overflow (SEH) (PoC)

CVE-2009-1356—doswindows

Stack-based buffer overflow in Elecard AVC HD Player allows remote attackers to execute arbitrary code via a long MP3 fi

23RISCO

abrir ↗

Referência

CVE-2011-3496

CVE-2011-3496—

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell me

28RISCO

abrir ↗

Referência

CVE-2011-3833

CVE-2011-3833—

Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote

43RISCO

abrir ↗

Referência

CVE-2021-42013

CVE-2021-42013CRITICALsob ataqueransomware

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

abrir ↗

Referência

CVE-2021-42013

CVE-2021-42013CRITICALsob ataqueransomware

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

abrir ↗

Referência

CVE-2021-42013

CVE-2021-42013CRITICALsob ataqueransomware

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

abrir ↗

Referência

CVE-2026-9575

CVE-2026-9575MEDIUM

itsourcecode Student Transcript Processing System index.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9574

CVE-2026-9574MEDIUM

itsourcecode Student Transcript Processing System trans.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9573

CVE-2026-9573MEDIUM

itsourcecode Student Transcript Processing System index.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7293

CVE-2026-7293MEDIUM

SourceCodester Pizzafy Ecommerce System ajax.php delete_category sql injection

33RISCO

abrir ↗

Referência

CVE-2015-1059

CVE-2015-1059—

Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute

23RISCO

abrir ↗

Referência

CVE-2015-1060

CVE-2015-1060—

Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect

23RISCO

abrir ↗

Referência✓ VexDay Proof

Teraway LiveHelp 2.0 - Insecure Cookie Handling

CVE-2009-1618—webappsphp

Teraway LiveHelp 2.0 allows remote attackers to bypass authentication and gain administrative access via a pwd=&lvl=1&us

23RISCO

abrir ↗

Referência

CVE-2013-5121

CVE-2013-5121—

SQL injection vulnerability in PHPFox before 3.6.0 (build6) allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência

Redis 8.0.2 - RCE

CVE-2025-32023HIGHremotelinux

Redis allows out of bounds writes in hyperloglog commands leading to RCE

41RISCO

abrir ↗

Referência

CVE-2025-32432

CVE-2025-32432CRITICALsob ataque

Craft CMS Allows Remote Code Execution

100RISCO

abrir ↗

Referência✓ VexDay Proof

Easy Scripts Answer and Question Script - Multiple Vulnerabilities

CVE-2009-1664—webappsphp

myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing passwords

23RISCO

abrir ↗

Referência

CVE-2015-1130

CVE-2015-1130HIGHsob ataque

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and o

86RISCO

abrir ↗

Referência

CVE-2009-4761

CVE-2009-4761—

Stack-based buffer overflow in Mini-stream RM Downloader allows remote attackers to execute arbitrary code via a long st

23RISCO

abrir ↗

Referência✓ VexDay Proof

Soulseek 157 NS x/156.x - Remote Distributed Search Code Execution

CVE-2009-1830—doswindows

Stack-based buffer overflow in Soulseek 156 and 157 NS allows remote attackers to execute arbitrary code via a long sear

23RISCO

abrir ↗

Referência

CVE-2023-38035

CVE-2023-38035CRITICALsob ataqueransomware

A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an

100RISCO

abrir ↗

Referência

CVE-2025-24813

CVE-2025-24813CRITICALsob ataque

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RISCO

abrir ↗

Referência✓ VexDay Proof

Winamp 5.55 - MAKI Script Universal Overwrite (SEH)

CVE-2009-1831—localwindows

The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute

50RISCO

abrir ↗

Referência✓ VexDay Proof

phpBugTracker 1.0.3 - Authentication Bypass

CVE-2009-1850—webappsphp

SQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyForum 1.3 - Authentication Bypass

CVE-2009-1852—webappsphp

Multiple SQL injection vulnerabilities in Graphiks MyForum 1.3 allow remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2015-1427

CVE-2015-1427CRITICALsob ataque

The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the s

100RISCO

abrir ↗

Referência

CVE-2026-24061

CVE-2026-24061CRITICALsob ataque

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.