Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.836exploits catalogados

35.811CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.572GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.572 exploits

Referência✓ VexDay Proof

TCPDB 3.8 - Arbitrary Add Admin Account

CVE-2009-1670—webappsphp

user/index.php in TCPDB 3.8 does not require administrative authentication, which allows remote attackers to add admin a

23RISCO

abrir ↗

Referência✓ VexDay Proof

32bit FTP - 'PASV' Reply Client Remote Overflow (Metasploit)

CVE-2009-1675—remotewindows_x86

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a

43RISCO

abrir ↗

Referência✓ VexDay Proof

Flyspeck CMS 6.8 - Local/Remote File Inclusion / Change Add Admin

CVE-2009-1770—webappsphp

Directory traversal vulnerability in includes/database/examples/addressbook.php in Flyspeck CMS 6.8 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

ST-Gallery 0.1a - Multiple SQL Injections

CVE-2009-1799—webappsphp

Multiple SQL injection vulnerabilities in the getGalleryImage function in st_admin/gallery_output.php in ST-Gallery 0.1

23RISCO

abrir ↗

Referência

CVE-2013-5447

CVE-2013-5447—

Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to exe

50RISCO

abrir ↗

Referência

CVE-2015-1130

CVE-2015-1130HIGHsob ataque

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and o

86RISCO

abrir ↗

Referência

CVE-2009-4761

CVE-2009-4761—

Stack-based buffer overflow in Mini-stream RM Downloader allows remote attackers to execute arbitrary code via a long st

23RISCO

abrir ↗

Referência

CVE-2013-5758

CVE-2013-5758—

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by

28RISCO

abrir ↗

Referência✓ VexDay Proof

Soulseek 157 NS x/156.x - Remote Distributed Search Code Execution

CVE-2009-1830—doswindows

Stack-based buffer overflow in Soulseek 156 and 157 NS allows remote attackers to execute arbitrary code via a long sear

23RISCO

abrir ↗

Referência✓ VexDay Proof

Winamp 5.55 - MAKI Script Universal Overwrite (SEH)

CVE-2009-1831—localwindows

The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute

50RISCO

abrir ↗

Referência✓ VexDay Proof

phpBugTracker 1.0.3 - Authentication Bypass

CVE-2009-1850—webappsphp

SQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyForum 1.3 - Authentication Bypass

CVE-2009-1852—webappsphp

Multiple SQL injection vulnerabilities in Graphiks MyForum 1.3 allow remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Million Dollar Text Links 1.x - Insecure Cookie Handling

CVE-2009-1854—webappsphp

Million Dollar Text Links 1.0 allows remote attackers to bypass authentication and gain administrative access by setting

23RISCO

abrir ↗

Referência

CVE-2013-5977

CVE-2013-5977—

Cross-site request forgery (CSRF) vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordP

23RISCO

abrir ↗

Referência

CVE-2023-38035

CVE-2023-38035CRITICALsob ataqueransomware

A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an

100RISCO

abrir ↗

Referência

CVE-2025-24813

CVE-2025-24813CRITICALsob ataque

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RISCO

abrir ↗

Referência

CVE-2013-6117

CVE-2013-6117—

Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive informatio

50RISCO

abrir ↗

Referência

CVE-2013-6232

CVE-2013-6232—

Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2022-41040

CVE-2022-41040HIGHsob ataqueransomware

Microsoft Exchange Server Elevation of Privilege Vulnerability

100RISCO

abrir ↗

Referência✓ VexDay Proof

DB Top Sites 1.0 - 'index.php?u' Local File Inclusion

CVE-2009-2110—webappsphp

Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic_quotes_gpc is disabled, allow remote attack

23RISCO

abrir ↗

Referência

CVE-2015-1479

CVE-2015-1479—

SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 buil

23RISCO

abrir ↗

Referência

CVE-2009-2123

CVE-2009-2123—

Multiple SQL injection vulnerabilities in Elvin 1.2.0 allow remote attackers to execute arbitrary SQL commands via the (

23RISCO

abrir ↗

Referência

CVE-2026-9434

CVE-2026-9434CRITICAL

Totolink A8000RU Web Management cstecgi.cgi setWiFiWpsCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-9431

CVE-2026-9431HIGH

Tenda F1202 PptpUserAdd fromPptpUserAdd stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2013-6987

CVE-2013-6987—

Multiple directory traversal vulnerabilities in the FileBrowser components in Synology DiskStation Manager (DSM) before

28RISCO

abrir ↗

Referência

CVE-2013-7025

CVE-2013-7025—

Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell So

23RISCO

abrir ↗

Referência

CVE-2013-7186

CVE-2013-7186—

Buffer overflow in Steinberg MyMp3PRO 5.0 (Build 5.1.0.21) allows remote attackers to execute arbitrary code via a long

28RISCO

abrir ↗

Referência

CVE-2013-7186

CVE-2013-7186—

Buffer overflow in Steinberg MyMp3PRO 5.0 (Build 5.1.0.21) allows remote attackers to execute arbitrary code via a long

28RISCO

abrir ↗

Referência

CVE-2013-7186

CVE-2013-7186—

Buffer overflow in Steinberg MyMp3PRO 5.0 (Build 5.1.0.21) allows remote attackers to execute arbitrary code via a long

28RISCO

abrir ↗

Referência✓ VexDay Proof

LushiNews 1.01 - 'comments.php' SQL Injection

CVE-2007-0865—webappsphp

SQL injection vulnerability in comments.php in LushiNews 1.01 and earlier allows remote authenticated users to inject ar

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.