Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

22.573 exploits

Referência

CVE-2009-2326

CVE-2009-2326—

Multiple SQL injection vulnerabilities in KerviNet Forum 1.1 and earlier allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2018-1999002

CVE-2018-1999002—

A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framewor

45RISCO

abrir ↗

Referência

CVE-2008-4458

CVE-2008-4458—

SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2020-10915

CVE-2020-10915CRITICAL

This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.

85RISCO

abrir ↗

Referência✓ VexDay Proof

Vastal I-Tech Dating Zone - 'fage' SQL Injection

CVE-2008-4461—webappsphp

SQL injection vulnerability in advanced_search_results.php in Vastal I-Tech Dating Zone, possibly 0.9.9, allows remote a

23RISCO

abrir ↗

Referência

CVE-2022-31814

CVE-2022-31814CRITICAL

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metachar

85RISCO

abrir ↗

Referência✓ VexDay Proof

BandSite CMS 1.1.4 - Download Backup / Cross-Site Scripting / Cross-Site Request Forgery

CVE-2008-7058—webappsphp

Cross-site request forgery (CSRF) vulnerability in BandSite CMS 1.1.4 allows remote attackers to hijack the authenticati

23RISCO

abrir ↗

Referência

CVE-2018-6961

CVE-2018-6961HIGHsob ataque

VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web U

100RISCO

abrir ↗

Referência

CVE-2025-9242

CVE-2025-9242CRITICALsob ataque

WatchGuard Firebox iked Out of Bounds Write Vulnerability

100RISCO

abrir ↗

Referência

CVE-2020-14295

CVE-2020-14295—

A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead

60RISCO

abrir ↗

Referência

CVE-2007-2222

CVE-2007-2222—

Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as use

35RISCO

abrir ↗

Referência✓ VexDay Proof

Vastal I-Tech Visa Zone - 'news_id' SQL Injection

CVE-2008-4462—webappsphp

SQL injection vulnerability in view_news.php in Vastal I-Tech Visa Zone allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2025-49844

CVE-2025-49844CRITICAL

Redis Lua Use-After-Free may lead to remote code execution

85RISCO

abrir ↗

Referência✓ VexDay Proof

Vastal I-Tech Jobs Zone - 'news_id' SQL Injection

CVE-2008-4463—webappsphp

SQL injection vulnerability in view_news.php in Vastal I-Tech Jobs Zone allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vastal I-Tech Mag Zone - 'cat_id' SQL Injection

CVE-2008-4464—webappsphp

SQL injection vulnerability in view_mags.php in Vastal I-Tech Mag Zone allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

ICQ Toolbar 2.3 - ActiveX Remote Denial of Service

CVE-2008-7136—doswindows

toolbaru.dll in ICQ Toolbar (ICQToolbar) 2.3 allows remote attackers to cause a denial of service (toolbar crash) via a

23RISCO

abrir ↗

Referência

CVE-2022-2992

CVE-2022-2992CRITICAL

A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows

85RISCO

abrir ↗

Referência

CVE-2009-2331

CVE-2009-2331—

Multiple static code injection vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2021-1675

CVE-2021-1675HIGHsob ataqueransomware

Windows Print Spooler Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2021-1675

CVE-2021-1675HIGHsob ataqueransomware

Windows Print Spooler Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2021-1675

CVE-2021-1675HIGHsob ataqueransomware

Windows Print Spooler Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência✓ VexDay Proof

Vastal I-Tech DVD Zone - 'cat_id' SQL Injection

CVE-2008-4465—webappsphp

SQL injection vulnerability in view_mags.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2026-1731

CVE-2026-1731CRITICALsob ataqueransomware

Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

100RISCO

abrir ↗

Referência

CVE-2020-11652

CVE-2020-11652MEDIUMsob ataque

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RISCO

abrir ↗

Referência✓ VexDay Proof

Vastal I-Tech Toner Cart - 'id' SQL Injection

CVE-2008-4467—webappsphp

SQL injection vulnerability in show_series_ink.php in Vastal I-Tech Toner Cart allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2017-5255

CVE-2017-5255—

In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web

60RISCO

abrir ↗

Referência✓ VexDay Proof

Numark Cue 5.0 rev 2 - '.m3u' File Local Stack Buffer Overflow

CVE-2008-4470—localwindows

Stack-based buffer overflow in Numark CUE 5.0 rev2 allows user-assisted attackers to cause a denial of service (applicat

23RISCO

abrir ↗

Referência

CVE-2018-25415

CVE-2018-25415HIGH

AiOPMSD Final 1.0.0 SQL Injection via director Parameter

41RISCO

abrir ↗

Referência

CVE-2018-25414

CVE-2018-25414HIGH

AiOPMSD Final 1.0.0 SQL Injection via actor.php

41RISCO

abrir ↗

Referência✓ VexDay Proof

Adobe Photoshop CS2 / CS3 - '.bmp' Local Buffer Overflow

CVE-2007-2244—localwindows

Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attac

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.