Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.313exploits catalogados

34.834CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentes populares risco

21.797 exploits

Referência✓ VexDay Proof

FTP Now 2.6 Server - Response Remote Crash (PoC)

CVE-2008-5045—doswindows

Heap-based buffer overflow in Network-Client FTP Now 2.6, and possibly other versions, allows remote FTP servers to caus

23RISCO

abrir ↗

Referência

CVE-2014-10010

CVE-2014-10010—

Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary file

23RISCO

abrir ↗

Referência

CVE-2014-10010

CVE-2014-10010—

Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary file

23RISCO

abrir ↗

Referência

CVE-2024-13985

CVE-2024-13985CRITICAL

Dahua EIMS capture_handle.action RCE

48RISCO

abrir ↗

Referência

CVE-2024-13985

CVE-2024-13985CRITICAL

Dahua EIMS capture_handle.action RCE

48RISCO

abrir ↗

Referência

CVE-2024-13985

CVE-2024-13985CRITICAL

Dahua EIMS capture_handle.action RCE

48RISCO

abrir ↗

Referência

CVE-2018-20735

CVE-2018-20735—

An issue was discovered in BMC PATROL Agent through 11.3.01. It was found that the PatrolCli application can allow for l

38RISCO

abrir ↗

Referência

CVE-2020-5844

CVE-2020-5844—

index.php?sec=godmode/extensions&sec2=extensions/files_repo in Pandora FMS v7.0 NG allows authenticated administrators t

35RISCO

abrir ↗

Referência

CVE-2014-9262

CVE-2014-9262—

The Duplicator plugin in Wordpress before 0.5.10 allows remote authenticated users to create and download backup files.

23RISCO

abrir ↗

Referência

CVE-2025-2620

CVE-2025-2620CRITICAL

D-Link DAP-1620 Authentication storage mod_graph_auth_uri_handler stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2017-9936

CVE-2017-9936—

In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in a

23RISCO

abrir ↗

Referência

CVE-2021-21972

CVE-2021-21972CRITICALsob ataqueransomware

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor

100RISCO

abrir ↗

Referência

CVE-2009-3315

CVE-2009-3315—

SQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4.5 allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2010-1951

CVE-2010-1951—

Multiple directory traversal vulnerabilities in 60cycleCMS allow remote attackers to include and execute arbitrary local

23RISCO

abrir ↗

Referência

CVE-2010-2153

CVE-2010-2153—

Unrestricted file upload vulnerability in admin/code/tce_functions_tcecode_editor.php in TCExam 10.1.006 and 10.1.007 al

23RISCO

abrir ↗

Referência

CVE-2015-2790

CVE-2015-2790—

Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory c

28RISCO

abrir ↗

Referência

CVE-2008-5753

CVE-2008-5753—

Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2015-2790

CVE-2015-2790—

Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory c

28RISCO

abrir ↗

Referência

CVE-2008-5753

CVE-2008-5753—

Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Telekorn Signkorn Guestbook 1.3 - 'dir_path' Remote File Inclusion

CVE-2006-4788—webappsphp

PHP remote file inclusion vulnerability in includes/log.inc.php in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, whe

23RISCO

abrir ↗

Referência

CVE-2017-7456

CVE-2017-7456—

Moxa MXView 2.8 allows remote attackers to cause a Denial of Service by sending overly long junk payload for the MXView

28RISCO

abrir ↗

Referência

CVE-2018-2380

CVE-2018-2380MEDIUMsob ataqueransomware

SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information pr

68RISCO

abrir ↗

Referência

CVE-2014-4971

CVE-2014-4971—

Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write

43RISCO

abrir ↗

Referência

CVE-2014-4971

CVE-2014-4971—

Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write

43RISCO

abrir ↗

Referência

CVE-2014-2009

CVE-2014-2009—

The mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to obtain credentials, the installation path

23RISCO

abrir ↗

Referência

CVE-2010-1977

CVE-2010-1977—

Directory traversal vulnerability in the J!WHMCS Integrator (com_jwhmcs) component 1.5.0 for Joomla! allows remote attac

38RISCO

abrir ↗

Referência

CVE-2010-1603

CVE-2010-1603—

Directory traversal vulnerability in the ZiMB Core (aka ZiMBCore or com_zimbcore) component 0.1 in the ZiMB Manager coll

38RISCO

abrir ↗

Referência

CVE-2014-4971

CVE-2014-4971—

Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write

43RISCO

abrir ↗

Referência

CVE-2010-1603

CVE-2010-1603—

Directory traversal vulnerability in the ZiMB Core (aka ZiMBCore or com_zimbcore) component 0.1 in the ZiMB Manager coll

38RISCO

abrir ↗

Referência

CVE-2017-11358

CVE-2017-11358—

The read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.