Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.957exploits catalogados

32.195CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8.182Nuclei 4.217Metasploit 3.462✓ só verificadosrecentes populares risco

20.003 exploits

Referência

PHP 4.4.6 - 'snmpget()' Object id Local Buffer Overflow

CVE-2007-1413—

Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably

28RISCO

abrir ↗

Referência

PHP 5.2.3 - 'snmpget()' Object id Local Buffer Overflow

CVE-2007-1413—

Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably

28RISCO

abrir ↗

Referência

CVE-2011-1761

CVE-2011-1761—

Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions in src/load_abc.cpp in l

28RISCO

abrir ↗

Referência

CVE-2017-6320

CVE-2017-6320—

A remote command injection vulnerability exists in the Barracuda Load Balancer product line (confirmed on v5.4.0.004 (20

28RISCO

abrir ↗

Referência

CVE-2010-2034

CVE-2010-2034—

Directory traversal vulnerability in the Percha Image Attach (com_perchaimageattach) component 1.1 for Joomla! allows re

43RISCO

abrir ↗

Referência

CVE-2010-2037

CVE-2010-2037—

Directory traversal vulnerability in the Percha Downloads Attach (com_perchadownloadsattach) component 1.1 for Joomla! a

43RISCO

abrir ↗

Referência

CVE-2017-17867

CVE-2017-17867—

Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying th

28RISCO

abrir ↗

Referência

CVE-2017-7397

CVE-2017-7397—

BackBox Linux 4.6 allows remote attackers to cause a denial of service (ksoftirqd CPU consumption) via a flood of packet

28RISCO

abrir ↗

Referência

CVE-2019-6208

CVE-2019-6208—

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Moja

23RISCO

abrir ↗

Referência

CVE-2015-2097

CVE-2015-2097—

Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary c

28RISCO

abrir ↗

Referência

CVE-2021-27973

CVE-2021-27973—

SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages.

28RISCO

abrir ↗

Referência

WordPress Core 2.0.6 - 'wp-trackback.php' SQL Injection

CVE-2007-0233—

wp-trackback.php in WordPress 2.0.6 and earlier does not properly unset variables when the input data includes a numeric

28RISCO

abrir ↗

Referência

CVE-2018-12053

CVE-2018-12053—

Arbitrary File Deletion exists in PHP Scripts Mall Schools Alert Management Script via the img parameter in delete_img.p

28RISCO

abrir ↗

Referência

VideoLAN VLC Media Player 0.8.6i - Mms Protocol Handling Heap Overflow (PoC)

CVE-2008-3794—

Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i all

28RISCO

abrir ↗

Referência

CVE-2010-2310

CVE-2010-2310—

SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request.

28RISCO

abrir ↗

Referência

PHP DB Designer 1.02 - Remote File Inclusion

CVE-2007-1620—

Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute

28RISCO

abrir ↗

Referência

CA BrightStor ARCserve 11.5.2.0 - 'catirpc.dll' RPC Server Denial of Service

CVE-2007-0816—

The RPC Server service (catirpc.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 SP2 and earlie

28RISCO

abrir ↗

Referência

CVE-2022-25090

CVE-2022-25090—

Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure

28RISCO

abrir ↗

Referência

CVE-2022-25090

CVE-2022-25090—

Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure

28RISCO

abrir ↗

Referência

Printix Client 1.3.1106.0 - Privilege Escalation

CVE-2022-25090—

Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure

28RISCO

abrir ↗

Referência

UltimateHG/CVE-2025-52689-PoC

CVE-2025-52689CRITICAL

Weak Session ID Check in the OmniAccess Stellar Web Management Interface

53RISCO

abrir ↗

Referência

CVE-2022-38580

CVE-2022-38580CRITICAL

Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).

53RISCO

abrir ↗

Referência

CVE-2015-6023

CVE-2015-6023—

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remot

28RISCO

abrir ↗

Referência

CVE-2015-6023

CVE-2015-6023—

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remot

28RISCO

abrir ↗

Referência

CVE-2013-1670

CVE-2013-1670—

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbi

28RISCO

abrir ↗

Referência

TopList 1.3.8 - 'phpBB Hack' Remote File Inclusion (1)

CVE-2006-2151—

PHP remote file inclusion vulnerability in toplist.php in phpBB TopList 1.3.8 and earlier, when register_globals is enab

28RISCO

abrir ↗

Referência

TopList 1.3.8 - 'phpBB Hack' Remote File Inclusion (2)

CVE-2006-2151—

PHP remote file inclusion vulnerability in toplist.php in phpBB TopList 1.3.8 and earlier, when register_globals is enab

28RISCO

abrir ↗

Referência

CVE-2018-5407

CVE-2018-5407—

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks

23RISCO

abrir ↗

Referência

CVE-2011-5212

CVE-2011-5212—

SQL injection vulnerability in admin/index.php in Subrion CMS 2.0.4 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2014-7221

CVE-2014-7221—

TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (buffer overflow and

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.