Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.313exploits catalogados

34.834CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentes populares risco

21.797 exploits

Referência

CVE-2007-2586

CVE-2007-2586—

The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which allows remote attackers

28RISCO

abrir ↗

Referência

CVE-2025-34040

CVE-2025-34040CRITICAL

Seeyon Zhiyuan OA System Path Traversal File Upload

68RISCO

abrir ↗

Referência

CVE-2011-3496

CVE-2011-3496—

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell me

28RISCO

abrir ↗

Referência

CVE-2014-8722

CVE-2014-8722—

GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) data/users/<user

28RISCO

abrir ↗

Referência

CVE-2019-7193

CVE-2019-7193CRITICALsob ataqueransomware

This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the

83RISCO

abrir ↗

Referência

CVE-2011-2443

CVE-2011-2443—

Multiple buffer overflows in Adobe Photoshop Elements 8.0 and earlier allow remote attackers to cause a denial of servic

28RISCO

abrir ↗

Referência

CVE-2016-0165

CVE-2016-0165HIGHsob ataque

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, W

76RISCO

abrir ↗

Referência

CVE-2017-2547

CVE-2017-2547—

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The

28RISCO

abrir ↗

Referência

CVE-2017-16944

CVE-2017-16944—

The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to cause a denial

35RISCO

abrir ↗

Referência

CVE-2024-11972

CVE-2024-11972CRITICAL

Hunk Companion < 1.9.0 - Unauthenticated Plugin Installation

75RISCO

abrir ↗

Referência

CVE-2018-11742

CVE-2018-11742—

NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI.

28RISCO

abrir ↗

Referência

CVE-2018-11742

CVE-2018-11742—

NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI.

28RISCO

abrir ↗

Referência

CVE-2010-1081

CVE-2010-1081—

Directory traversal vulnerability in the Community Polls (com_communitypolls) component 1.5.2, and possibly earlier, for

43RISCO

abrir ↗

Referência

CVE-2019-9648

CVE-2019-9648—

An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exis

28RISCO

abrir ↗

Referência

CVE-2021-45901

CVE-2021-45901—

The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending

28RISCO

abrir ↗

Referência✓ VexDay Proof

Apple CFNetwork - HTTP Response Denial of Service

CVE-2007-0464—dososx

The _CFNetConnectionWillEnqueueRequests function in CFNetwork 129.19 on Apple Mac OS X 10.4 through 10.4.10 allows remot

28RISCO

abrir ↗

Referência

CVE-2019-15637

CVE-2019-15637HIGH

Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to informat

46RISCO

abrir ↗

Referência

Sahi Pro 8.0.0 - Remote Command Execution

CVE-2019-13597—webappsjava

_s_/sprm/_s_/dyn/Player_setScriptFile in Sahi Pro 8.0.0 allows command execution. It allows one to run ".sah" scripts vi

28RISCO

abrir ↗

Referência

CVE-2026-14753

CVE-2026-14753MEDIUM

mjperpinosa stumasy Note Handler/Assignment notes authorization

33RISCO

abrir ↗

Referência

CVE-2026-14752

CVE-2026-14752MEDIUM

mjperpinosa stumasy add_into_dictionary.php add_definition cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-14751

CVE-2026-14751MEDIUM

mjperpinosa stumasy search_scratch_data.php search_scratch_data sql injection

33RISCO

abrir ↗

Referência

CVE-2026-14750

CVE-2026-14750MEDIUM

mjperpinosa stumasy accessing_dictionary_authorization.php accessing_dictionary_authorization sql injection

33RISCO

abrir ↗

Referência

Core FTP Server FTP / SFTP Server v2 Build 674 - 'SIZE' Directory Traversal

CVE-2019-9648—doswindows

An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exis

28RISCO

abrir ↗

Referência

CVE-2018-9958

CVE-2018-9958—

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1

50RISCO

abrir ↗

Referência

CVE-2018-9958

CVE-2018-9958—

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1

50RISCO

abrir ↗

Referência

CVE-2018-9958

CVE-2018-9958—

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1

50RISCO

abrir ↗

Referência

CVE-2011-0917

CVE-2011-0917—

Buffer overflow in nLDAP.exe in IBM Lotus Domino allows remote attackers to execute arbitrary code via a long string in

28RISCO

abrir ↗

Referência

CVE-2014-4158

CVE-2014-4158—

Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a GET req

28RISCO

abrir ↗

Referência

CVE-2014-4158

CVE-2014-4158—

Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a GET req

28RISCO

abrir ↗

Referência

CVE-2014-4158

CVE-2014-4158—

Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a GET req

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.