Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

19.978 exploits

Referência

CVE-2018-8139

CVE-2018-8139—

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

35RISCO

abrir ↗

Referência

CVE-2017-12965

CVE-2017-12965—

Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID pa

28RISCO

abrir ↗

Referência

CVE-2017-12965

CVE-2017-12965—

Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID pa

28RISCO

abrir ↗

Referência

CyberLink PowerDVD - CreateNewFile Remote Rewrite Denial of Service

CVE-2007-5219—

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLA

28RISCO

abrir ↗

Referência

PPMate PPMedia Class - ActiveX Control Buffer Overflow (PoC)

CVE-2008-3242—

Heap-based buffer overflow in the PPMedia Class ActiveX control in PPMPlayer.dll in PPMate 2.3.1.93 allows remote attack

28RISCO

abrir ↗

Referência

CVE-2015-8352

CVE-2015-8352—

Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and execute arbitrary local files

28RISCO

abrir ↗

Referência

CVE-2019-3778

CVE-2019-3778—

Open Redirect in spring-security-oauth2

28RISCO

abrir ↗

Referência

CVE-2013-7051

CVE-2013-7051—

D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters

28RISCO

abrir ↗

Referência

CVE-2018-0491

CVE-2018-0491—

A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of se

28RISCO

abrir ↗

Referência

CVE-2020-25790

CVE-2020-25790—

Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archi

28RISCO

abrir ↗

Referência

CVE-2020-25790

CVE-2020-25790—

Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archi

28RISCO

abrir ↗

Referência

CVE-2016-0793

CVE-2016-0793—

Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Se

28RISCO

abrir ↗

Referência

CVE-2016-0793

CVE-2016-0793—

Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Se

28RISCO

abrir ↗

Referência

CVE-2025-44823

CVE-2025-44823CRITICAL

Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagi

53RISCO

abrir ↗

Referência

CVE-2015-2049

CVE-2015-2049—

Unrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote authenticated use

50RISCO

abrir ↗

Referência

CVE-2017-6554

CVE-2017-6554—

pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to wr

28RISCO

abrir ↗

Referência

CVE-2017-6554

CVE-2017-6554—

pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to wr

28RISCO

abrir ↗

Referência

CVE-2012-0874

CVE-2012-0874—

The (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBoss Enterprise Application Platform (EAP)

28RISCO

abrir ↗

Referência

CVE-2021-46354

CVE-2021-46354—

Thinfinity VirtualUI 2.1.28.0, 2.1.32.1 and 2.5.26.2, fixed in version 3.0 is affected by an information disclosure vuln

28RISCO

abrir ↗

Referência

Hexamail Server 3.0.0.001 - 'pop3' Remote Overflow (PoC)

CVE-2007-4646—

Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of servi

28RISCO

abrir ↗

Referência

CVE-2018-5979

CVE-2018-5979—

SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field.

28RISCO

abrir ↗

Referência

CVE-2018-10517

CVE-2018-10517—

In CMS Made Simple (CMSMS) through 2.2.7, the "module import" operation in the admin dashboard contains a remote code ex

28RISCO

abrir ↗

Referência

CVE-2003-0831

CVE-2003-0831—

ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, whi

35RISCO

abrir ↗

Referência

CVE-2017-7411

CVE-2017-7411—

An issue was discovered in Enalean Tuleap 9.6 and prior versions. The vulnerability exists because the User::getRecentEl

50RISCO

abrir ↗

Referência

CVE-2017-7411

CVE-2017-7411—

An issue was discovered in Enalean Tuleap 9.6 and prior versions. The vulnerability exists because the User::getRecentEl

50RISCO

abrir ↗

Referência

CVE-2010-0187

CVE-2010-0187—

Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service

28RISCO

abrir ↗

Referência

NaviCOPA Web Server 2.01 - 'GET' Remote Buffer Overflow

CVE-2006-5112—

Buffer overflow in InterVations NaviCOPA Web Server 2.01 allows remote attackers to execute arbitrary code via a long HT

50RISCO

abrir ↗

Referência

CVE-2018-0980

CVE-2018-0980—

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

35RISCO

abrir ↗

Referência

CVE-2018-0933

CVE-2018-0933—

ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution,

35RISCO

abrir ↗

Referência

CVE-2014-6437

CVE-2014-6437—

Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices allow remote attackers to obtain sensitive device configurat

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.