Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.589exploits catalogados

34.508CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8.216Nuclei 4.223Metasploit 3.464✓ só verificadosrecentes populares risco

21.554 exploits

Referência

CVE-2016-8021

CVE-2016-8021—

Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3

23RISCO

abrir ↗

Referência

CVE-2021-42165

CVE-2021-42165—

MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing c

28RISCO

abrir ↗

Referência

CVE-2019-1144

CVE-2019-1144HIGH

Microsoft Graphics Remote Code Execution Vulnerability

46RISCO

abrir ↗

Referência

CVE-2019-1145

CVE-2019-1145HIGH

Microsoft Graphics Remote Code Execution Vulnerability

46RISCO

abrir ↗

Referência

CVE-2021-20031

CVE-2021-20031—

A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management

43RISCO

abrir ↗

Referência

CVE-2018-6911

CVE-2018-6911—

The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS

28RISCO

abrir ↗

Referência

Mitrastar GPT-2541GNAC-N1 - Privilege escalation

CVE-2021-42165—remotehardware

MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing c

28RISCO

abrir ↗

Referência

CVE-2017-18256

CVE-2017-18256—

Brave Browser before 0.13.0 allows remote attackers to cause a denial of service (resource consumption) via a long alert

23RISCO

abrir ↗

Referência

CVE-2012-0904

CVE-2012-0904—

VLC media player 1.1.11 allows remote attackers to cause a denial of service (crash) via a long string in an amr file.

23RISCO

abrir ↗

Referência

CVE-2017-8477

CVE-2017-8477—

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2,

23RISCO

abrir ↗

Referência

CVE-2023-4114

CVE-2023-4114MEDIUM

PHP Jabbers Night Club Booking Software index.php cross site scripting

48RISCO

abrir ↗

Referência

CVE-2017-13876

CVE-2017-13876—

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS b

23RISCO

abrir ↗

Referência

CVE-2022-50794

CVE-2022-50794CRITICAL

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Command Injection via Username

48RISCO

abrir ↗

Referência✓ VexDay Proof

Agora 1.4 RC1 - 'MysqlfinderAdmin.php' Remote File Inclusion

CVE-2006-7194—webappsphp

PHP remote file inclusion vulnerability in modules/Mysqlfinder/MysqlfinderAdmin.php in Agora 1.4 RC1, when register_glob

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows Explorer - '.AVI' File Denial of Service

CVE-2007-0562—doswindows

Windows Explorer (explorer.exe) 6.0.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause

28RISCO

abrir ↗

Referência✓ VexDay Proof

Maian Recipe 1.0 - 'path_to_folder' Remote File Inclusion

CVE-2007-0848—webappsphp

PHP remote file inclusion vulnerability in classes/class_mail.inc.php in Maian Recipe 1.0 allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual InterDev 6.0 SP6 - '.sln' Local Buffer Overflow (PoC)

CVE-2008-1709—doswindows

Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a St

28RISCO

abrir ↗

Referência✓ VexDay Proof

WebXell Editor 0.1.3 - Arbitrary File Upload

CVE-2008-3178—webappsphp

Unrestricted file upload vulnerability in upload_pictures.php in WebXell Editor 0.1.3 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vinagre < 2.24.2 - 'show_error()' Remote Format String (PoC)

CVE-2008-5660—doswindows

Format string vulnerability in the vinagre_utils_show_error function (src/vinagre-utils.c) in Vinagre 0.5.x before 0.5.2

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpEmployment - 'PHP Upload' Arbitrary File Upload

CVE-2008-6920—webappsphp

Unrestricted file upload vulnerability in auth.php in phpEmployment 1.8 allows remote attackers to execute arbitrary cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin Photoracer 1.0 - 'id' SQL Injection

CVE-2009-2122—webappsphp

SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote atta

23RISCO

abrir ↗

Referência

CVE-2017-13713

CVE-2017-13713—

T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user

23RISCO

abrir ↗

Referência

CVE-2017-13713

CVE-2017-13713—

T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user

23RISCO

abrir ↗

Referência

CVE-2017-13867

CVE-2017-13867—

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS b

23RISCO

abrir ↗

Referência

CVE-2010-1199

CVE-2010-1199—

Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,

28RISCO

abrir ↗

Referência

CVE-2017-2482

CVE-2017-2482—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b

23RISCO

abrir ↗

Referência

CVE-2016-0073

CVE-2016-0073—

The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 160

23RISCO

abrir ↗

Referência

CVE-2018-12095

CVE-2018-12095—

A Reflected Cross-Site Scripting web vulnerability has been discovered in the OEcms v3.1 web-application. The vulnerabil

38RISCO

abrir ↗

Referência

CVE-2013-5578

CVE-2013-5578—

Buffer overflow in the ToDot method in the WINGRAPHVIZLib.NEATO ActiveX control in WinGraphviz.dll in StarUML allows rem

23RISCO

abrir ↗

Referência

CVE-2023-29983

CVE-2023-29983MEDIUM

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary co

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.