Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.589exploits catalogados

34.508CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8.216Nuclei 4.223Metasploit 3.464✓ só verificadosrecentes populares risco

21.554 exploits

Referência

CVE-2014-6436

CVE-2014-6436—

Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to

35RISCO

Referência

CVE-2017-0121

CVE-2017-0121—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server

35RISCO

Referência

CVE-2012-0266

CVE-2012-0266—

Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitr

50RISCO

Referência

CVE-2025-34112

CVE-2025-34112CRITICAL

Riverbed SteelCentral NetProfiler / NetExpress 10.8.7 RCE

63RISCO

Referência✓ VexDay Proof

Microsoft Office - MSODataSourceControl COM-object Buffer Overflow (PoC)

CVE-2007-3282—doswindows

Buffer overflow in the Microsoft Office MSODataSourceControl ActiveX object allows remote attackers to cause a denial of

35RISCO

Referência✓ VexDay Proof

iziContents rc6 - Local/Remote File Inclusion

CVE-2007-5054—webappsphp

Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute ar

35RISCO

Referência✓ VexDay Proof

PHP wcms XT 0.0.7 - Multiple Remote File Inclusions

CVE-2007-5185—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpWCMS XT 0.0.7 BETA and earlier allow remote attackers to execut

35RISCO

Referência

CVE-2009-3808

CVE-2009-3808—

MixSense DJ Studio 1.0.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute

23RISCO

Referência

CVE-2009-3835

CVE-2009-3835—

SQL injection vulnerability in the JShop (com_jshop) component for Joomla! allows remote attackers to execute arbitrary

23RISCO

Referência

CVE-2017-0088

CVE-2017-0088—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

35RISCO

Referência

CVE-2016-10074

CVE-2016-10074—

The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass

35RISCO

Referência

CVE-2019-0841

CVE-2019-0841HIGHsob ataqueransomware

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

98RISCO

Referência

CVE-2019-0841

CVE-2019-0841HIGHsob ataqueransomware

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

98RISCO

Referência

CVE-2019-0841

CVE-2019-0841HIGHsob ataqueransomware

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

98RISCO

Referência

CVE-2019-0841

CVE-2019-0841HIGHsob ataqueransomware

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

98RISCO

Referência

CVE-2019-0841

CVE-2019-0841HIGHsob ataqueransomware

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

98RISCO

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.10 - Multiple Vulnerabilities

CVE-2008-0382—webappsphp

Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via

35RISCO

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.10 - Remote Code Execution

CVE-2008-0382—webappsphp

Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via

35RISCO

Referência

CVE-2016-0063

CVE-2016-0063—

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service

35RISCO

Referência

CVE-2015-4455

CVE-2015-4455—

Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin

50RISCO

Referência

CVE-2010-3407

CVE-2010-3407—

Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server i

50RISCO

Referência

CVE-2016-2389

CVE-2016-2389—

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMI

50RISCO

Referência

CVE-2016-2389

CVE-2016-2389—

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMI

50RISCO

Referência

CVE-2009-2261

CVE-2009-2261—

PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .z

50RISCO

Referência✓ VexDay Proof

Scout Portal Toolkit 1.4.0 - 'ParentId' SQL Injection

CVE-2005-4195—webappsphp

Multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to execute

23RISCO

Referência

CVE-2021-3317

CVE-2021-3317—

KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on the original value of

35RISCO

Referência

CVE-2011-0966

CVE-2011-0966—

Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Serv

35RISCO

Referência✓ VexDay Proof

Creative Software AutoUpdate Engine - ActiveX Stack Overflow

CVE-2008-0955—remotewindows

Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote atta

50RISCO

Referência✓ VexDay Proof

VideoLAN VLC Media Player < 0.9.6 - '.rt' Local Stack Buffer Overflow

CVE-2008-5036—localwindows

Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execu

50RISCO

Referência

CVE-2016-0122

CVE-2016-0122—

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Compa

35RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.