Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

22.573 exploits

Referência✓ VexDay Proof

Amaya 11.1 - W3C Editor/Browser 'defer' Remote Stack Overflow

CVE-2009-1209—remotewindows

Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute arbitrary code via a script

28RISCO

abrir ↗

Referência

CVE-2013-7409

CVE-2013-7409—

Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possib

50RISCO

abrir ↗

Referência

CVE-2013-7409

CVE-2013-7409—

Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possib

50RISCO

abrir ↗

Referência

CVE-2012-6430

CVE-2012-6430—

Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded befor

23RISCO

abrir ↗

Referência

CVE-2025-2747

CVE-2025-2747CRITICALsob ataque

Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass

100RISCO

abrir ↗

Referência

CVE-2018-0775

CVE-2018-0775—

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due t

35RISCO

abrir ↗

Referência

CVE-2018-0774

CVE-2018-0774—

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due t

35RISCO

abrir ↗

Referência

CVE-2019-18426

CVE-2019-18426HIGHsob ataque

A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.

83RISCO

abrir ↗

Referência

CVE-2009-3052

CVE-2009-3052—

SQL injection vulnerability in root/includes/prime_quick_style.php in the Prime Quick Style addon before 1.2.3 for phpBB

23RISCO

abrir ↗

Referência✓ VexDay Proof

2532/Gigs 1.2.2 - Arbitrary Database Backup/Download

CVE-2008-6199—webappsphp

2532designs 2532|Gigs 1.2.2 and earlier allows remote attackers to trigger a backup and obtain sensitive information via

23RISCO

abrir ↗

Referência

CVE-2010-1554

CVE-2010-1554—

Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows r

50RISCO

abrir ↗

Referência

CVE-2016-6662

CVE-2016-6662—

Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.2

35RISCO

abrir ↗

Referência✓ VexDay Proof

Cobalt 0.1 - Multiple SQL Injections

CVE-2008-6202—webappsasp

SQL injection vulnerability in CoBaLT 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter

23RISCO

abrir ↗

Referência

CVE-2014-6593

CVE-2014-6593—

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.

50RISCO

abrir ↗

Referência

CVE-2018-8145

CVE-2018-8145—

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could

35RISCO

abrir ↗

Referência

CVE-2025-25257

CVE-2025-25257CRITICALsob ataque

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerabi

100RISCO

abrir ↗

Referência✓ VexDay Proof

PreProject Multi-Vendor Shopping Malls - Multiple Vulnerabilities

CVE-2008-6228—webappsphp

Pre Multi-Vendor Shopping Malls allows remote attackers to bypass authentication and gain administrative access by setti

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre Shopping Mall - Insecure Cookie Handling

CVE-2008-6232—webappsphp

Pre Shopping Mall allows remote attackers to bypass authentication and gain administrative access by setting the (1) adm

23RISCO

abrir ↗

Referência

Sophos XG115w Firewall 17.0.10 MR-10 - Authentication Bypass

CVE-2022-1040CRITICALsob ataquewebappshardware

An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sopho

100RISCO

abrir ↗

Referência✓ VexDay Proof

Harlandscripts drinks - 'recid' SQL Injection

CVE-2008-6233—webappsphp

SQL injection vulnerability in index.php in Five Dollar Scripts Drinks script allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2012-6524

CVE-2012-6524—

SQL injection vulnerability in kommentar.php in pGB 2.12 allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência

CVE-2015-0816

CVE-2015-0816—

Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not properly restrict resource

50RISCO

abrir ↗

Referência

CVE-2013-3928

CVE-2013-3928—

Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote atta

50RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component com_Musica - 'id' SQL Injection

CVE-2008-6234—webappsphp

SQL injection vulnerability in the com_musica module in Joomla! and Mambo allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Software - 'id' SQL Injection

CVE-2008-6237—webappsphp

SQL injection vulnerability in software-description.php in Scripts For Sites (SFS) Hotscripts-like Site allows remote at

23RISCO

abrir ↗

Referência

CVE-2018-0953

CVE-2018-0953—

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

35RISCO

abrir ↗

Referência

CVE-2019-14530

CVE-2019-14530—

An issue was discovered in custom/ajax_download.php in OpenEMR before 5.0.2 via the fileName parameter. An attacker can

50RISCO

abrir ↗

Referência

CVE-2019-14530

CVE-2019-14530—

An issue was discovered in custom/ajax_download.php in OpenEMR before 5.0.2 via the fileName parameter. An attacker can

50RISCO

abrir ↗

Referência✓ VexDay Proof

smcFanControl 2.1.2 (OSX) - Multiple Buffer Overflow Vulnerabilities (PoC)

CVE-2008-6252—dososx

Stack-based buffer overflow in the smc program in smcFanControl 2.1.2 allows local users to execute arbitrary code and g

23RISCO

abrir ↗

Referência

CVE-2013-7260

CVE-2013-7260—

Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.