Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.618exploits catalogados

35.646CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.429GitHub PoC 14.268VulnCheck XDB 8.693Nuclei 4.299Metasploit 3.474✓ só verificadosrecentes populares risco

22.407 exploits

Referência

CVE-2012-6081

CVE-2012-6081—

Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action

50RISCO

abrir ↗

Referência

CVE-2016-2385

CVE-2016-2385—

Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER a

35RISCO

abrir ↗

Referência

CVE-2014-4141

CVE-2014-4141—

Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service

35RISCO

abrir ↗

Referência✓ VexDay Proof

virtue news - SQL Injection / Cross-Site Scripting

CVE-2009-2020—webappsphp

Cross-site scripting (XSS) vulnerability in news_detail.php in Virtue News Manager allows remote attackers to inject arb

23RISCO

abrir ↗

Referência

CVE-2009-4597

CVE-2009-4597—

Multiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow (1) remote authenticated users to execute

23RISCO

abrir ↗

Referência

CVE-2015-0065

CVE-2015-0065—

Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio

35RISCO

abrir ↗

Referência✓ VexDay Proof

GuppY 4.5.16 - Remote Command Execution

CVE-2007-5845—webappsphp

Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include an

23RISCO

abrir ↗

Referência✓ VexDay Proof

WorkSimple 1.2.1 - Remote File Inclusion / Sensitive Data Disclosure

CVE-2008-5764—webappsphp

PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows re

35RISCO

abrir ↗

Referência

CVE-2011-5052

CVE-2011-5052—

Stack-based buffer overflow in CoCSoft Stream Down 6.8.0 allows remote web servers to execute arbitrary code via a long

50RISCO

abrir ↗

Referência

CVE-2017-16995

CVE-2017-16995—

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial

50RISCO

abrir ↗

Referência

CVE-2017-16995

CVE-2017-16995—

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial

50RISCO

abrir ↗

Referência

CVE-2017-16995

CVE-2017-16995—

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial

50RISCO

abrir ↗

Referência

CVE-2015-0040

CVE-2015-0040—

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co

35RISCO

abrir ↗

Referência

CVE-2017-0561

CVE-2017-0561—

A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary

28RISCO

abrir ↗

Referência

CVE-2017-0561

CVE-2017-0561—

A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary

28RISCO

abrir ↗

Referência

CVE-2019-15715

CVE-2019-15715—

MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution.

35RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component flash fun! 1.0 - Remote File Inclusion

CVE-2007-4955—webappsphp

PHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun! (com_joomlaflashfun) 1.0 component

28RISCO

abrir ↗

Referência

CVE-2015-8046

CVE-2015-8046—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and

28RISCO

abrir ↗

Referência

CVE-2018-6396

CVE-2018-6396—

SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a l

28RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Feederator 1.0.5 - Multiple Remote File Inclusions

CVE-2008-5789—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the Recly Interactive Feederator (com_feederator) component 1.0.5

35RISCO

abrir ↗

Referência✓ VexDay Proof

campus virtual-lms - Cross-Site Scripting / SQL Injection

CVE-2009-2150—webappsphp

Multiple cross-site request forgery (CSRF) vulnerabilities in Campus Virtual-LMS allow (1) remote attackers to hijack th

23RISCO

abrir ↗

Referência

CVE-2009-4598

CVE-2009-4598—

SQL injection vulnerability in the JPhoto (com_jphoto) component 1.0 for Joomla! allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2009-1699

CVE-2009-1699—

The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for i

28RISCO

abrir ↗

Referência

CVE-2017-11517

CVE-2017-11517—

Stack-based buffer overflow in GCoreServer.exe in the server in Geutebrueck Gcore 1.3.8.42 and 1.4.2.37 allows remote at

43RISCO

abrir ↗

Referência

CVE-2019-1150

CVE-2019-1150HIGH

Microsoft Graphics Remote Code Execution Vulnerability

46RISCO

abrir ↗

Referência

CVE-2019-1150

CVE-2019-1150HIGH

Microsoft Graphics Remote Code Execution Vulnerability

46RISCO

abrir ↗

Referência

CVE-2019-7274

CVE-2019-7274—

Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.

28RISCO

abrir ↗

Referência

CVE-2018-12327

CVE-2018-12327—

Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or es

28RISCO

abrir ↗

Referência

CVE-2024-6366

CVE-2024-6366CRITICAL

User Profile Builder < 3.11.8 - Unauthenticated Media Upload

68RISCO

abrir ↗

Referência

CVE-2024-12847

CVE-2024-12847CRITICAL

NETGEAR DGN setup.cgi OS Command Injection

68RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.