Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.445exploits catalogados

34.432CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

21.497 exploits

Referência

CVE-2009-4856

CVE-2009-4856—

Cross-site scripting (XSS) vulnerability in subitems.php in PHP Easy Shopping Cart 3.1R allows remote attackers to injec

23RISCO

abrir ↗

Referência

CVE-2019-11013

CVE-2019-11013—

Nimble Streamer 3.0.2-2 through 3.5.4-9 has a ../ directory traversal vulnerability. Successful exploitation could allow

43RISCO

abrir ↗

Referência

CVE-2021-27878

CVE-2021-27878HIGHsob ataqueransomware

An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires suc

91RISCO

abrir ↗

Referência

CVE-2018-5997

CVE-2018-5997—

An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upload feature and a pa

28RISCO

abrir ↗

Referência

CVE-2009-4860

CVE-2009-4860—

SQL injection vulnerability in demo.php in Typing Pal 1.0 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2009-4862

CVE-2009-4862—

Multiple SQL injection vulnerabilities in Alwasel 1.5 allow remote attackers to execute arbitrary SQL commands via the i

23RISCO

abrir ↗

Referência

CVE-2009-4870

CVE-2009-4870—

Multiple SQL injection vulnerabilities in login.php in PHPCityPortal allow remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Snaps! Gallery 1.4.4 - Remote User Pass Change

CVE-2007-2715—webappsphp

Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1)

28RISCO

abrir ↗

Referência✓ VexDay Proof

Merak Media Player 3.2 - '.m3u' File Local Buffer Overflow (PoC)

CVE-2009-0350—doswindows

Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute arbitrary code via a long strin

28RISCO

abrir ↗

Referência

CVE-2009-4871

CVE-2009-4871—

SQL injection vulnerability in globepersonnel_forum.asp in Logoshows BBS 2.0 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2009-4872

CVE-2009-4872—

Multiple SQL injection vulnerabilities in globepersonnel_login.asp in Logoshows BBS 2.0 allow remote attackers to execut

23RISCO

abrir ↗

Referência

CVE-2009-4876

CVE-2009-4876—

admin/cikkform.php in Netrix CMS 1.0 allows remote attackers to modify arbitrary pages via a direct request using the ci

23RISCO

abrir ↗

Referência

CVE-2017-15048

CVE-2017-15048—

Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote

28RISCO

abrir ↗

Referência

CVE-2017-15048

CVE-2017-15048—

Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote

28RISCO

abrir ↗

Referência

CVE-2025-10327

CVE-2025-10327MEDIUM

MiczFlor RPi-Jukebox-RFID shuffle.php os command injection

38RISCO

abrir ↗

Referência

CVE-2020-7030

CVE-2020-7030MEDIUM

IPO Information Disclosure

33RISCO

abrir ↗

Referência

CVE-2015-7247

CVE-2015-7247—

D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and

28RISCO

abrir ↗

Referência

CVE-2015-7247

CVE-2015-7247—

D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and

28RISCO

abrir ↗

Referência

CVE-2014-8322

CVE-2014-8322—

Stack-based buffer overflow in the tcp_test function in aireplay-ng.c in Aircrack-ng before 1.2 RC 1 allows remote attac

28RISCO

abrir ↗

Referência

CVE-2017-7117

CVE-2017-7117—

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud befor

28RISCO

abrir ↗

Referência

CVE-2016-4340

CVE-2016-4340—

The impersonate feature in Gitlab 8.7.0, 8.6.0 through 8.6.7, 8.5.0 through 8.5.11, 8.4.0 through 8.4.9, 8.3.0 through 8

28RISCO

abrir ↗

Referência

CVE-2016-4340

CVE-2016-4340—

The impersonate feature in Gitlab 8.7.0, 8.6.0 through 8.6.7, 8.5.0 through 8.5.11, 8.4.0 through 8.4.9, 8.3.0 through 8

28RISCO

abrir ↗

Referência

CVE-2009-4883

CVE-2009-4883—

SQL injection vulnerability in index.php in PHPRecipeBook 2.24 and 2.39 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2009-4889

CVE-2009-4889—

SQL injection vulnerability in books.php in the Book Panel (book_panel) module for PHP-Fusion allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Internet Explorer 6 / Provideo Camimage - 'ISSCamControl.dll 1.0.1.5' Remote Buffer Overflow

CVE-2007-3111—remotewindows

Buffer overflow in the Provideo Camimage ActiveX control in ISSCamControl.dll 1.0.1.5, when Internet Explorer 6 is used

35RISCO

abrir ↗

Referência✓ VexDay Proof

WebFileExplorer 3.1 - Authentication Bypass

CVE-2009-1314—webappsphp

body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the s

28RISCO

abrir ↗

Referência

CVE-2009-4892

CVE-2009-4892—

SQL injection vulnerability in Content Management System WEBjump! allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência

CVE-2009-4905

CVE-2009-4905—

Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to

23RISCO

abrir ↗

Referência

CVE-2009-4907

CVE-2009-4907—

Multiple cross-site request forgery (CSRF) vulnerabilities in oBlog allow remote attackers to hijack the authentication

23RISCO

abrir ↗

Referência

CVE-2018-18773

CVE-2018-18773—

CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=rootpwd, as demo

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.