Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.526exploits catalogados

34.478CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.534GitHub PoC 13.654VulnCheck XDB 8.213Nuclei 4.218Metasploit 3.464✓ só verificadosrecentes populares risco

21.534 exploits

Referência

CVE-2009-3428

CVE-2009-3428—

Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote attackers to execute arbitrary code via a crafted

23RISCO

abrir ↗

Referência

CVE-2009-3428

CVE-2009-3428—

Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote attackers to execute arbitrary code via a crafted

23RISCO

abrir ↗

Referência

CVE-2009-3428

CVE-2009-3428—

Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote attackers to execute arbitrary code via a crafted

23RISCO

abrir ↗

Referência

CVE-2015-3898

CVE-2015-3898—

Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to arb

23RISCO

abrir ↗

Referência

CVE-2017-2514

CVE-2017-2514—

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The

23RISCO

abrir ↗

Referência

CVE-2014-100014

CVE-2014-100014—

Multiple stack-based buffer overflows in pdmwService.exe in SolidWorks Workgroup PDM 2014 SP2 allow remote attackers to

23RISCO

abrir ↗

Referência

CVE-2010-0832

CVE-2010-0832—

pam_motd (aka the MOTD module) in libpam-modules before 1.1.0-2ubuntu1.1 in PAM on Ubuntu 9.10 and libpam-modules before

23RISCO

abrir ↗

Referência

CVE-2017-17593

CVE-2017-17593—

Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/.

23RISCO

abrir ↗

Referência

CVE-2017-17593

CVE-2017-17593—

Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/.

23RISCO

abrir ↗

Referência

CVE-2011-0405

CVE-2011-0405—

Directory traversal vulnerability in module.php in PhpGedView 4.2.3 and possibly other versions, when magic_quotes_gpc i

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpProfiles 2.1 Beta - Multiple Remote File Inclusions

CVE-2006-5634—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpProfiles 2.1 Beta allow remote attackers to execute arbitrary P

23RISCO

abrir ↗

Referência✓ VexDay Proof

VImpX ActiveX (VImpX.ocx 4.7.3.0) - Remote Buffer Overflow

CVE-2007-2667—remotewindows

Buffer overflow in the DB Software Laboratory VImpX ActiveX control in VImpX.ocx 4.7.3 allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ruby 1.8.6/1.9 (WEBick HTTPd 1.3.1) - Directory Traversal

CVE-2008-1145—remotemultiple

Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when

28RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Photo Album 0.8b - 'preview' Local File Inclusion

CVE-2009-0423—webappsphp

Directory traversal vulnerability in index.php in Php Photo Album (PHPPA) 0.8 BETA allows remote attackers to include an

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebPortal CMS 0.8b - Multiple Local/Remote File Inclusions

CVE-2009-1445—webappsphp

Multiple directory traversal vulnerabilities in WebPortal CMS 0.8-beta allow remote attackers to (1) read arbitrary file

23RISCO

abrir ↗

Referência

CVE-2009-3188

CVE-2009-3188—

PHP remote file inclusion vulnerability in save.php in phpSANE 0.5.0 allows remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Referência

CVE-2012-1258

CVE-2012-1258—

cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1.19899 does not validate

23RISCO

abrir ↗

Referência

CVE-2010-2846

CVE-2010-2846—

Cross-site scripting (XSS) vulnerability in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! al

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebAlbum 2.02pl - COOKIE[skin2] Remote Code Execution

CVE-2006-1480—webappsphp

Directory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to include arbitrary files and e

23RISCO

abrir ↗

Referência

CVE-2010-4613

CVE-2010-4613—

Multiple directory traversal vulnerabilities in Hycus CMS 1.0.3 allow remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2023-26918

CVE-2023-26918CRITICAL

Diasoft File Replication Pro 7.5.0 allows attackers to escalate privileges by replacing a legitimate file with a Trojan

48RISCO

abrir ↗

Referência

CVE-2019-7441

CVE-2019-7441—

cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.8 for WordPress allows Parameter

23RISCO

abrir ↗

Referência

CVE-2019-7441

CVE-2019-7441—

cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.8 for WordPress allows Parameter

23RISCO

abrir ↗

Referência

CVE-2013-6874

CVE-2013-6874—

Stack-based buffer overflow in Vortex Light Alloy before 4.7.4 allows remote attackers to execute arbitrary code via a l

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Ticket 0.71 - 'search.php' SQL Injection

CVE-2006-1481—webappsphp

SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2009-3810

CVE-2009-3810—

Heap-based buffer overflow in Acoustica MP3 Audio Mixer 2.471 allows remote attackers to cause a denial of service (cras

23RISCO

abrir ↗

Referência

CVE-2015-5285

CVE-2015-5285—

CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduc

23RISCO

abrir ↗

Referência

CVE-2025-20188

CVE-2025-20188CRITICAL

A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client de

68RISCO

abrir ↗

Referência

CVE-2018-11741

CVE-2018-11741—

NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in Account Information Disclosure vi

28RISCO

abrir ↗

Referência

CVE-2018-11741

CVE-2018-11741—

NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in Account Information Disclosure vi

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.