Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.813exploits catalogados

35.788CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.549 exploits

Referência

CVE-2014-3740

CVE-2014-3740—

Cross-site scripting (XSS) vulnerability in SpiceWorks before 7.2.00195 allows remote authenticated users to inject arbi

23RISCO

abrir ↗

Referência

CVE-2016-7185

CVE-2016-7185—

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,

23RISCO

abrir ↗

Referência

CVE-2011-2963

CVE-2011-2963—

TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, whi

23RISCO

abrir ↗

Referência

CVE-2014-4306

CVE-2014-4306—

Directory traversal vulnerability in logs-x.php in WebTitan before 4.04 allows remote attackers to read arbitrary files

23RISCO

abrir ↗

Referência

CVE-2013-1807

CVE-2013-1807—

PHP-Fusion before 7.02.06 stores backup files with predictable filenames in an unrestricted directory under the web docu

23RISCO

abrir ↗

Referência✓ VexDay Proof

EnjoySAP ActiveX rfcguisink.rfcguisink.1 - Remote Heap Overflow (PoC)

CVE-2007-3606—doswindows

Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI, on systems using ASCI

23RISCO

abrir ↗

Referência

CVE-2018-18955

CVE-2018-18955—

In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalat

38RISCO

abrir ↗

Referência

CVE-2011-5002

CVE-2011-5002—

Multiple stack-based buffer overflows in Final Draft 8 before 8.02 allow remote attackers to execute arbitrary code via

23RISCO

abrir ↗

Referência

CVE-2010-4776

CVE-2010-4776—

SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2010-4776

CVE-2010-4776—

SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

jspwiki 2.4.104/2.5.139 - Multiple Vulnerabilities

CVE-2008-1231—webappsjsp

Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to include and exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

AuraCMS 2.x - '/user.php' Security Code Bypass / Arbitrary Add Administrator

CVE-2008-1715—webappsphp

SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when magic_quotes_gpc is disabled, allows

23RISCO

abrir ↗

Referência

CVE-2010-3456

CVE-2010-3456—

Directory traversal vulnerability in download.php in EnergyScripts (ES) Simple Download 1.0 allows remote attackers to r

23RISCO

abrir ↗

Referência

CVE-2019-7265

CVE-2019-7265—

Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).

28RISCO

abrir ↗

Referência

CVE-2010-3456

CVE-2010-3456—

Directory traversal vulnerability in download.php in EnergyScripts (ES) Simple Download 1.0 allows remote attackers to r

23RISCO

abrir ↗

Referência

CVE-2025-41244

CVE-2025-41244HIGHsob ataque

VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

71RISCO

abrir ↗

Referência

CVE-2021-27519

CVE-2021-27519—

A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "

38RISCO

abrir ↗

Referência

CVE-2016-6512

CVE-2016-6512—

epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function, whi

23RISCO

abrir ↗

Referência

CVE-2010-0373

CVE-2010-0373—

SQL injection vulnerability in the libros (com_libros) component for Joomla! allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2010-4769

CVE-2010-4769—

Directory traversal vulnerability in the Jimtawl (com_jimtawl) component 1.0.2 Joomla! allows remote attackers to read a

38RISCO

abrir ↗

Referência✓ VexDay Proof

acronis pxe server 2.0.0.1076 - Directory Traversal / Null Pointer

CVE-2008-1411—remotewindows

The PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to cause a denial of s

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Classifieds Script - Remote Database Disclosure

CVE-2008-7080—webappsphp

Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which

23RISCO

abrir ↗

Referência✓ VexDay Proof

BuzzyWall 1.3.1 - 'id' Remote File Disclosure

CVE-2008-4759—webappsphp

Directory traversal vulnerability in download.php in BuzzyWall 1.3.1 allows remote attackers to read arbitrary local fil

23RISCO

abrir ↗

Referência

CVE-2010-4783

CVE-2010-4783—

Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18, when ma

23RISCO

abrir ↗

Referência

CVE-2010-4797

CVE-2010-4797—

Multiple SQL injection vulnerabilities in the log-in form in Truworth Flex Timesheet allow remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2017-15920

CVE-2017-15920—

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer

23RISCO

abrir ↗

Referência

CVE-2017-15920

CVE-2017-15920—

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer

23RISCO

abrir ↗

Referência

CVE-2013-2225

CVE-2013-2225—

inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _pr

23RISCO

abrir ↗

Referência

CVE-2014-4874

CVE-2014-4874—

BMC Track-It! 11.3.0.355 allows remote authenticated users to read arbitrary files by visiting the TrackItWeb/Attachment

23RISCO

abrir ↗

Referência

CVE-2020-7384

CVE-2020-7384HIGH

Client-Side Command Injection in Rapid7 Metasploit

68RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.