Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

19.978 exploits

Referência

LoudBlog 0.6.1 - 'parsedpage' Remote Code Execution

CVE-2008-0139—

Eval injection vulnerability in loudblog/inc/parse_old.php in Loudblog 0.8.0 and earlier allows remote attackers to exec

28RISCO

abrir ↗

Referência

CVE-2021-3560

CVE-2021-3560HIGHsob ataque

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

91RISCO

abrir ↗

Referência

CVE-2021-3560

CVE-2021-3560HIGHsob ataque

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

91RISCO

abrir ↗

Referência

Ipswitch WS_FTP Server with SSH 6.1.0.0 - Remote Buffer Overflow (PoC)

CVE-2008-0590—

Buffer overflow in Ipswitch WS_FTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of servic

28RISCO

abrir ↗

Referência

CVE-2011-1669

CVE-2011-1669—

Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote a

43RISCO

abrir ↗

Referência

CVE-2013-0662

CVE-2013-0662—

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow

28RISCO

abrir ↗

Referência

CVE-2013-0662

CVE-2013-0662—

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow

28RISCO

abrir ↗

Referência

CVE-2014-2668

CVE-2014-2668—

Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via t

28RISCO

abrir ↗

Referência

CVE-2014-2668

CVE-2014-2668—

Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via t

28RISCO

abrir ↗

Referência

CVE-2010-3131

CVE-2010-3131—

Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 an

28RISCO

abrir ↗

Referência

CVE-2010-3131

CVE-2010-3131—

Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 an

28RISCO

abrir ↗

Referência

CVE-2015-1579

CVE-2015-1579—

Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitra

43RISCO

abrir ↗

Referência

CVE-2017-0120

CVE-2017-0120—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

28RISCO

abrir ↗

Referência

CVE-2010-3275

CVE-2010-3275—

libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a

60RISCO

abrir ↗

Referência

CVE-2017-14143

CVE-2017-14143—

The getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to validate cookie signatures, wh

60RISCO

abrir ↗

Referência

CVE-2017-14143

CVE-2017-14143—

The getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to validate cookie signatures, wh

60RISCO

abrir ↗

Referência

CVE-2026-2441

CVE-2026-2441HIGHsob ataque

Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside

76RISCO

abrir ↗

Referência

CVE-2025-34392

CVE-2025-34392CRITICAL

Barracuda RMM < 2025.1.1 Service Center Absolute Path Traversal RCE

53RISCO

abrir ↗

Referência

CVE-2010-1938

CVE-2010-1938—

Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeB

28RISCO

abrir ↗

Referência

CVE-2022-28117

CVE-2022-28117—

A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows remote attackers to force the ap

43RISCO

abrir ↗

Referência

CVE-2017-2985

CVE-2017-2985—

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript

28RISCO

abrir ↗

Referência

CVE-2016-3715

CVE-2016-3715MEDIUMsob ataque

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary fi

85RISCO

abrir ↗

Referência

CVE-2018-0878

CVE-2018-0878LOW

Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Window

33RISCO

abrir ↗

Referência

CVE-2013-4341

CVE-2013-4341—

Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, an

43RISCO

abrir ↗

Referência

CVE-2009-1493

CVE-2009-1493—

The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and

28RISCO

abrir ↗

Referência

Adobe 8.1.4/9.1 - 'customDictionaryOpen()' Code Execution

CVE-2009-1493—

The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and

28RISCO

abrir ↗

Referência

CVE-2017-6542

CVE-2017-6542—

The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large

28RISCO

abrir ↗

Referência

CVE-2017-3623

CVE-2017-3623—

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel RPC). For supported ve

28RISCO

abrir ↗

Referência

phpFFL 1.24 - 'PHPFFL_FILE_ROOT' Remote File Inclusion

CVE-2007-4934—

Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code v

28RISCO

abrir ↗

Referência

CVE-2015-3302

CVE-2015-3302—

The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.