Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.523 exploits

Referência

CVE-2014-9567

CVE-2014-9567—

Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows rem

50RISCO

abrir ↗

Referência

CVE-2014-9583

CVE-2014-9583—

common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC

60RISCO

abrir ↗

Referência

CVE-2014-9583

CVE-2014-9583—

common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC

60RISCO

abrir ↗

Referência

CVE-2014-9583

CVE-2014-9583—

common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC

60RISCO

abrir ↗

Referência

CVE-2015-0493

CVE-2015-0493—

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8.

23RISCO

abrir ↗

Referência

CVE-2009-4728

CVE-2009-4728—

SQL injection vulnerability in the administrative interface in Questions Answered 1.3 allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2024-24919

CVE-2024-24919HIGHsob ataqueransomware

Information disclosure

100RISCO

abrir ↗

Referência✓ VexDay Proof

Zervit Web Server 0.02 - Remote Buffer Overflow (PoC)

CVE-2009-1353—doswindows

Buffer overflow in the http_parse_hex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause

23RISCO

abrir ↗

Referência

CVE-2026-9627

CVE-2026-9627HIGH

UTT HiPER 1200GW Web Management setSysAdm strcpy buffer overflow

41RISCO

abrir ↗

Referência

CVE-2025-8730

CVE-2025-8730CRITICAL

Belkin F9K1009/F9K1010 Web Interface hard-coded credentials

48RISCO

abrir ↗

Referência✓ VexDay Proof

Elecard AVC HD Player - '.XPL' Stack Buffer Overflow (SEH) (PoC)

CVE-2009-1356—doswindows

Stack-based buffer overflow in Elecard AVC HD Player allows remote attackers to execute arbitrary code via a long MP3 fi

23RISCO

abrir ↗

Referência

CVE-2013-4659

CVE-2013-4659—

Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. T

28RISCO

abrir ↗

Referência

CVE-2021-42013

CVE-2021-42013CRITICALsob ataqueransomware

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

abrir ↗

Referência

CVE-2021-42013

CVE-2021-42013CRITICALsob ataqueransomware

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

abrir ↗

Referência

CVE-2021-42013

CVE-2021-42013CRITICALsob ataqueransomware

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

abrir ↗

Referência

CVE-2026-9575

CVE-2026-9575MEDIUM

itsourcecode Student Transcript Processing System index.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9574

CVE-2026-9574MEDIUM

itsourcecode Student Transcript Processing System trans.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9573

CVE-2026-9573MEDIUM

itsourcecode Student Transcript Processing System index.php sql injection

33RISCO

abrir ↗

Referência

CVE-2013-4692

CVE-2013-4692—

Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS

23RISCO

abrir ↗

Referência

CVE-2013-4694

CVE-2013-4694—

Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial

28RISCO

abrir ↗

Referência

CVE-2013-4863

CVE-2013-4863—

The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute a

28RISCO

abrir ↗

Referência

CVE-2026-7293

CVE-2026-7293MEDIUM

SourceCodester Pizzafy Ecommerce System ajax.php delete_category sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

Easy Scripts Answer and Question Script - Multiple Vulnerabilities

CVE-2009-1664—webappsphp

myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing passwords

23RISCO

abrir ↗

Referência✓ VexDay Proof

TCPDB 3.8 - Arbitrary Add Admin Account

CVE-2009-1670—webappsphp

user/index.php in TCPDB 3.8 does not require administrative authentication, which allows remote attackers to add admin a

23RISCO

abrir ↗

Referência✓ VexDay Proof

32bit FTP - 'PASV' Reply Client Remote Overflow (Metasploit)

CVE-2009-1675—remotewindows_x86

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a

43RISCO

abrir ↗

Referência✓ VexDay Proof

Flyspeck CMS 6.8 - Local/Remote File Inclusion / Change Add Admin

CVE-2009-1770—webappsphp

Directory traversal vulnerability in includes/database/examples/addressbook.php in Flyspeck CMS 6.8 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

ST-Gallery 0.1a - Multiple SQL Injections

CVE-2009-1799—webappsphp

Multiple SQL injection vulnerabilities in the getGalleryImage function in st_admin/gallery_output.php in ST-Gallery 0.1

23RISCO

abrir ↗

Referência

CVE-2013-5447

CVE-2013-5447—

Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to exe

50RISCO

abrir ↗

Referência

CVE-2015-1130

CVE-2015-1130HIGHsob ataque

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and o

86RISCO

abrir ↗

Referência

CVE-2009-4761

CVE-2009-4761—

Stack-based buffer overflow in Mini-stream RM Downloader allows remote attackers to execute arbitrary code via a long st

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.