Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.760exploits catalogados

32.083CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.934GitHub PoC 13.235VulnCheck XDB 8.150Nuclei 4.193Metasploit 3.462✓ só verificadosrecentes populares risco

19.934 exploits

Referência

CVE-2013-1309

CVE-2013-1309—

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary co

35RISCO

abrir ↗

Referência

CVE-2013-1309

CVE-2013-1309—

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary co

35RISCO

abrir ↗

Referência

CVE-2016-0120

CVE-2016-0120—

The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window

35RISCO

abrir ↗

Referência

CVE-2014-2928

CVE-2014-2928—

The iControl API in F5 BIG-IP LTM, APM, ASM, GTM, Link Controller, and PSM 10.0.0 through 10.2.4 and 11.0.0 through 11.5

50RISCO

abrir ↗

Referência

Grape Statistics 0.2a - 'location' Remote File Inclusion

CVE-2008-1963—

PHP remote file inclusion vulnerability in includes/functions.php in Quate Grape Web Statistics 0.2a allows remote attac

35RISCO

abrir ↗

Referência

Booby 1.0.1 - Multiple Remote File Inclusions

CVE-2008-2645—

Multiple PHP remote file inclusion vulnerabilities in Brim (formerly Booby) 1.0.1 allow remote attackers to execute arbi

35RISCO

abrir ↗

Referência

CVE-2017-0283

CVE-2017-0283—

Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT

35RISCO

abrir ↗

Referência

CA BrightStor ARCserve Backup r11.5 - ActiveX Remote Buffer Overflow

CVE-2008-1472—

Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including Br

50RISCO

abrir ↗

Referência

CVE-2012-0267

CVE-2012-0267—

The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a

50RISCO

abrir ↗

Referência

CVE-2020-24217

CVE-2020-24217—

An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endpo

35RISCO

abrir ↗

Referência

CVE-2020-24217

CVE-2020-24217—

An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endpo

35RISCO

abrir ↗

Referência

Microsoft Internet Explorer 6 - DirectX Media Remote Overflow Denial of Service

CVE-2006-4301—

Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attrib

35RISCO

abrir ↗

Referência

TermTalk Server 3.24.0.2 - Arbitrary File Read (Unauthenticated)

CVE-2021-35380—

A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthe

50RISCO

abrir ↗

Referência

CVE-2015-2562

CVE-2015-2562—

Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla! allo

50RISCO

abrir ↗

Referência

CVE-2015-2562

CVE-2015-2562—

Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla! allo

50RISCO

abrir ↗

Referência

CVE-2025-30065

CVE-2025-30065CRITICAL

Apache Parquet Java: Arbitrary code execution in the parquet-avro module when reading an Avro schema from a Parquet file metadata

60RISCO

abrir ↗

Referência

UltraVNC/TightVNC (Multiple VNC Clients) - Multiple Integer Overflows (PoC)

CVE-2009-0388—

Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to ca

28RISCO

abrir ↗

Referência

CVE-2010-3709

CVE-2010-3709—

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent

28RISCO

abrir ↗

Referência

TSEP 0.942 - 'copyright.php' Remote File Inclusion

CVE-2006-3993—

PHP remote file inclusion vulnerability in copyright.php in Olaf Noehring The Search Engine Project (TSEP) 0.942 allows

23RISCO

abrir ↗

Referência

CVE-2008-0610

CVE-2008-0610—

Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp

50RISCO

abrir ↗

Referência

mIRC 6.34 - Remote Buffer Overflow (PoC)

CVE-2008-4449—

Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIV

50RISCO

abrir ↗

Referência

mIRC 6.34 - Remote Buffer Overflow

CVE-2008-4449—

Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIV

50RISCO

abrir ↗

Referência

CVE-2023-26609

CVE-2023-26609HIGH

ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin

53RISCO

abrir ↗

Referência

CVE-2013-5093

CVE-2013-5093—

The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python

50RISCO

abrir ↗

Referência

CVE-2022-4305

CVE-2022-4305CRITICAL

75RISCO

abrir ↗

Referência

CVE-2015-7309

CVE-2015-7309—

The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authent

50RISCO

abrir ↗

Referência

CVE-2015-7309

CVE-2015-7309—

The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authent

50RISCO

abrir ↗

Referência

Wordsmith 1.1b - 'config.inc.php?_path' Remote File Inclusion

CVE-2007-5102—

PHP remote file inclusion vulnerability in config.inc.php in Wordsmith 1.0 RC1, when register_globals is enabled, allows

35RISCO

abrir ↗

Referência

LiveAlbum 0.9.0 - 'common.php' Remote File Inclusion

CVE-2007-5315—

PHP remote file inclusion vulnerability in common.php in LiveAlbum 0.9.0, when register_globals is enabled, allows remot

35RISCO

abrir ↗

Referência

Sige 0.1 - 'sige_init.php' Remote File Inclusion

CVE-2007-5781—

PHP remote file inclusion vulnerability in inc/sige_init.php in Sige 0.1 allows remote attackers to execute arbitrary PH

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.