Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.496exploits catalogados

34.964CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8.510Nuclei 4.239Metasploit 3.468✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2015-7767

CVE-2015-7767—

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of

23RISCO

abrir ↗

Referência

CVE-2017-11322

CVE-2017-11322—

The chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileg

23RISCO

abrir ↗

Referência

CVE-2014-8469

CVE-2014-8469—

Cross-site scripting (XSS) vulnerability in Guests/Boots in AdminCP in Moxi9 PHPFox before 4 Beta allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2014-8469

CVE-2014-8469—

Cross-site scripting (XSS) vulnerability in Guests/Boots in AdminCP in Moxi9 PHPFox before 4 Beta allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2014-9260

CVE-2014-9260—

The basic_settings function in the download manager plugin for WordPress before 2.7.3 allows remote authenticated users

28RISCO

abrir ↗

Referência

CVE-2026-6118

CVE-2026-6118MEDIUM

AstrBotDevs AstrBot MCP Endpoint tools.py add_mcp_server command injection

48RISCO

abrir ↗

Referência

CVE-2012-0981

CVE-2012-0981—

Directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories and image fil

43RISCO

abrir ↗

Referência

CVE-2019-0543

CVE-2019-0543HIGHsob ataqueransomware

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft W

71RISCO

abrir ↗

Referência✓ VexDay Proof

Achievo 1.3.2 - 'FCKeditor' Arbitrary File Upload

CVE-2008-2742—webappsphp

Unrestricted file upload in the mcpuk file editor (atk/attributes/fck/editor/filemanager/browser/mcpuk/connectors/php/co

23RISCO

abrir ↗

Referência

CVE-2018-5725

CVE-2018-5725—

MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Change, as demonstrated by the port number of t

23RISCO

abrir ↗

Referência

CVE-2018-5725

CVE-2018-5725—

MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Change, as demonstrated by the port number of t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Electronics Workbench - '.ewb' Local Stack Overflow (PoC)

CVE-2008-5383—doswindows

Stack-based buffer overflow in National Instruments Electronics Workbench allows user-assisted attackers to cause a deni

23RISCO

abrir ↗

Referência

CVE-2017-2473

CVE-2017-2473—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b

23RISCO

abrir ↗

Referência

CVE-2020-26829

CVE-2020-26829CRITICAL

SAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary conne

48RISCO

abrir ↗

Referência

CVE-2013-1937

CVE-2013-1937—

Multiple cross-site scripting (XSS) vulnerabilities in tbl_gis_visualization.php in phpMyAdmin 3.5.x before 3.5.8 might

23RISCO

abrir ↗

Referência

CVE-2019-10226

CVE-2019-10226—

HTML Injection has been discovered in the v0.19.0 version of the Fat Free CRM product via an authenticated request to th

23RISCO

abrir ↗

Referência

CVE-2019-10226

CVE-2019-10226—

HTML Injection has been discovered in the v0.19.0 version of the Fat Free CRM product via an authenticated request to th

23RISCO

abrir ↗

Referência

CVE-2011-4024

CVE-2011-4024—

Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2018-6671

CVE-2018-6671MEDIUM

SB10240 - ePolicy Orchestrator (ePO) - Application Protection Bypass vulnerability

33RISCO

abrir ↗

Referência

CVE-2014-3220

CVE-2014-3220—

F5 BIG-IQ Cloud and Security 4.0.0 through 4.1.0 allows remote authenticated users to change the password of arbitrary u

28RISCO

abrir ↗

Referência

CVE-2021-24405

CVE-2021-24405—

Easy Cookie Policy <= 1.6.2 - Broken Access Control to Stored Cross-Site Scripting

28RISCO

abrir ↗

Referência✓ VexDay Proof

Web Content System 2.7.1 - Remote File Inclusion

CVE-2007-1771—webappsphp

PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System Solutions Web Content Syste

23RISCO

abrir ↗

Referência

CVE-2014-125117

CVE-2014-125117CRITICAL

D-Link info.cgi POST Request Stack-Based Buffer Overflow RCE

63RISCO

abrir ↗

Referência

CVE-2014-125117

CVE-2014-125117CRITICAL

D-Link info.cgi POST Request Stack-Based Buffer Overflow RCE

63RISCO

abrir ↗

Referência

CVE-2014-125117

CVE-2014-125117CRITICAL

D-Link info.cgi POST Request Stack-Based Buffer Overflow RCE

63RISCO

abrir ↗

Referência

CVE-2025-7097

CVE-2025-7097CRITICAL

Comodo Internet Security Premium Manifest File cis_update_x64.xml os command injection

48RISCO

abrir ↗

Referência

CVE-2025-7097

CVE-2025-7097CRITICAL

Comodo Internet Security Premium Manifest File cis_update_x64.xml os command injection

48RISCO

abrir ↗

Referência

CVE-2018-12052

CVE-2018-12052—

SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in get_sec.php.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Adobe JRun 4 - 'logfile' (Authenticated) Directory Traversal

CVE-2009-1873—remotewindows

Directory traversal vulnerability in logging/logviewer.jsp in the Management Console in Adobe JRun Application Server 4

23RISCO

abrir ↗

Referência

CVE-2024-23749

CVE-2024-23749HIGH

KiTTY versions 0.76.1.13 and before is vulnerable to command injection via the filename variable, occurs due to insuffic

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.