Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.020exploits catalogados

35.276CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8.604Nuclei 4.251Metasploit 3.473✓ só verificadosrecentes populares risco

22.166 exploits

Referência✓ VexDay Proof

Joomla! Component joom12pic 1.0 - Remote File Inclusion

CVE-2007-4954—webappsphp

PHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (com_joom12pic) 1.0 component for Joomla

28RISCO

abrir ↗

Referência

CVE-2015-7007

CVE-2015-7007—

Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement f

50RISCO

abrir ↗

Referência

CVE-2015-7007

CVE-2015-7007—

Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement f

50RISCO

abrir ↗

Referência

CVE-2017-17932

CVE-2017-17932—

A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow

50RISCO

abrir ↗

Referência

CVE-2017-17932

CVE-2017-17932—

A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow

50RISCO

abrir ↗

Referência

CVE-2017-17932

CVE-2017-17932—

A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow

50RISCO

abrir ↗

Referência

CVE-2013-0742

CVE-2013-0742—

Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial

35RISCO

abrir ↗

Referência

CVE-2010-2343

CVE-2010-2343—

Stack-based buffer overflow in D.R. Software Audio Converter 8.1, 2007, and 8.05 allows remote attackers to execute arbi

50RISCO

abrir ↗

Referência

CVE-2018-17379

CVE-2018-17379—

SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filter_order_Dir or filter_order paramete

23RISCO

abrir ↗

Referência

CVE-2018-17379

CVE-2018-17379—

SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filter_order_Dir or filter_order paramete

23RISCO

abrir ↗

Referência

CVE-2013-0807

CVE-2013-0807—

Cross-site scripting (XSS) vulnerability in the NewSectionPrompt function in include/tool/editing_page.php in gpEasy CMS

23RISCO

abrir ↗

Referência

CVE-2013-0928

CVE-2013-0928—

The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote

50RISCO

abrir ↗

Referência

CVE-2013-1080

CVE-2013-1080—

The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform a

60RISCO

abrir ↗

Referência

CVE-2013-1306

CVE-2013-1306—

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a cr

35RISCO

abrir ↗

Referência

CVE-2013-1347

CVE-2013-1347HIGHsob ataque

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbit

100RISCO

abrir ↗

Referência✓ VexDay Proof

KwsPHP 1.0 - 'login.php' SQL Injection

CVE-2007-4956—webappsphp

Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) th

23RISCO

abrir ↗

Referência

CVE-2018-5723

CVE-2018-5723—

MASTER IPCAMERA01 3.3.4.2103 devices have a hardcoded password of cat1029 for the root account.

23RISCO

abrir ↗

Referência✓ VexDay Proof

32bit FTP (09.04.24) - 'Banner' Remote Buffer Overflow

CVE-2009-1592—remotewindows_x86

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a

23RISCO

abrir ↗

Referência

CVE-2018-8734

CVE-2018-8734—

SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker

50RISCO

abrir ↗

Referência

Redis 8.0.2 - RCE

CVE-2025-32023HIGHremotelinux

Redis allows out of bounds writes in hyperloglog commands leading to RCE

41RISCO

abrir ↗

Referência

CVE-2010-2343

CVE-2010-2343—

Stack-based buffer overflow in D.R. Software Audio Converter 8.1, 2007, and 8.05 allows remote attackers to execute arbi

50RISCO

abrir ↗

Referência✓ VexDay Proof

32bit FTP (09.04.24) - 'CWD Response' Universal Overwrite (SEH)

CVE-2009-1611—remotewindows_x86

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Leap CMS 0.1.4 - 'searchterm' Blind SQL Injection

CVE-2009-1613—webappsphp

Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magic_quotes_gpc is disabled, allow remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Leap CMS 0.1.4 - SQL Injection / Cross-Site Scripting / Arbitrary File Upload

CVE-2009-1613—webappsphp

Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magic_quotes_gpc is disabled, allow remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Leap CMS 0.1.4 - SQL Injection / Cross-Site Scripting / Arbitrary File Upload

CVE-2009-1614—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web scr

23RISCO

abrir ↗

Referência

CVE-2023-24078

CVE-2023-24078HIGH

Real Time Logic FuguHub v8.1 and earlier was discovered to contain a remote code execution (RCE) vulnerability via the c

53RISCO

abrir ↗

Referência

CVE-2008-3922

CVE-2008-3922—

awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences

50RISCO

abrir ↗

Referência

CVE-2019-9760

CVE-2019-9760—

FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-cont

50RISCO

abrir ↗

Referência

CVE-2016-7434

CVE-2016-7434—

The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a craf

35RISCO

abrir ↗

Referência

CVE-2021-41381

CVE-2021-41381—

Payara Micro Community 5.2021.6 and below allows Directory Traversal.

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.