Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

22.910 exploits

Referência✓ VexDay Proof

IntelliTamper 2.07 - server header Remote Code Execution

CVE-2008-3361—remotewindows

Stack-based buffer overflow in IntelliTamper 2.07 allows remote web sites to execute arbitrary code via a long HTTP Serv

23RISCO

abrir ↗

Referência

CVE-2021-20034

CVE-2021-20034—

An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal

45RISCO

abrir ↗

Referência

CVE-2015-7808

CVE-2015-7808—

The vB_Api_Hook::decodeArguments method in vBulletin 5 Connect 5.1.2 through 5.1.9 allows remote attackers to conduct PH

60RISCO

abrir ↗

Referência✓ VexDay Proof

PixelPost 1.7.1 - 'language_full' Local File Inclusion

CVE-2008-3365—webappsphp

Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when register_globals is enabled, allows r

23RISCO

abrir ↗

Referência

CVE-2018-0758

CVE-2018-0758—

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitra

45RISCO

abrir ↗

Referência

CVE-2019-10669

CVE-2019-10669—

An issue was discovered in LibreNMS through 1.47. There is a command injection vulnerability in html/includes/graphs/dev

60RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS myAds Module - 'lid' SQL Injection

CVE-2006-3341—webappsphp

SQL injection vulnerability in annonces-p-f.php in MyAds module 2.04jp for Xoops allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Censura 1.15.04 - 'censura.php?vendorid' SQL Injection

CVE-2007-2673—webappsphp

SQL injection vulnerability in includes/funcs_vendors.php in Censura 1.15.04, and other versions before 1.16.04, allows

23RISCO

abrir ↗

Referência

CVE-2016-0491

CVE-2016-0491—

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12

60RISCO

abrir ↗

Referência✓ VexDay Proof

Pre Classifieds Listings 1.0 - SQL Injection

CVE-2007-2675—webappsphp

SQL injection vulnerability in search.php in Pre Classifieds Listings 1.0 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2008-3371

CVE-2008-3371—

Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remot

23RISCO

abrir ↗

Referência

CVE-2026-9481

CVE-2026-9481HIGH

Edimax EW-7438RPn formStats stack-based overflow

41RISCO

abrir ↗

Referência✓ VexDay Proof

TalkBack 2.3.5 - 'Language' Local File Inclusion

CVE-2008-3371—webappsphp

Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

Gregarius 0.5.4 - SQL Injection

CVE-2008-3374—webappsphp

SQL injection vulnerability in ajax.php in Gregarius 0.5.4 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2020-13160

CVE-2020-13160—

AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execut

60RISCO

abrir ↗

Referência✓ VexDay Proof

Open Translation Engine (OTE) 0.7.8 - 'header.php?ote_home' Remote File Inclusion

CVE-2007-2676—webappsphp

PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine (OTE) 0.7.8 allows remote attacke

35RISCO

abrir ↗

Referência

CVE-2018-12464

CVE-2018-12464CRITICAL

Unauthenticated SQL injection in Micro Focus Secure Messaging Gateway

85RISCO

abrir ↗

Referência

CVE-2020-13160

CVE-2020-13160—

AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execut

60RISCO

abrir ↗

Referência

CVE-2021-21425

CVE-2021-21425CRITICAL

Unauthenticated Arbitrary YAML Write/Update leads to Code Execution

85RISCO

abrir ↗

Referência

CVE-2021-21425

CVE-2021-21425CRITICAL

Unauthenticated Arbitrary YAML Write/Update leads to Code Execution

85RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft SQL Server - 'sp_replwritetovarbin()' Heap Overflow

CVE-2008-5416—localwindows

Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop

60RISCO

abrir ↗

Referência

CVE-2009-2436

CVE-2009-2436—

SQL injection vulnerability in page.php in Online Dating Software MyPHPDating 1.0 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2017-0037

CVE-2017-0037HIGHsob ataque

Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilde

93RISCO

abrir ↗

Referência

CVE-2017-12557

CVE-2017-12557—

A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and e

60RISCO

abrir ↗

Referência✓ VexDay Proof

PHPTest 0.6.3 - SQL Injection

CVE-2008-3377—webappsphp

SQL injection vulnerability in picture.php in phpTest 0.6.3 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência

CVE-2023-22952

CVE-2023-22952HIGHsob ataque

In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because o

100RISCO

abrir ↗

Referência

CVE-2019-5526

CVE-2019-5526—

VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by t

23RISCO

abrir ↗

Referência

CVE-2026-14603

CVE-2026-14603HIGH

WowOptin < 1.4.38 - Unauthenticated Opt-in Deactivation and Template Row Injection

41RISCO

abrir ↗

Referência

CVE-2020-14871

CVE-2020-14871CRITICALsob ataque

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported ve

100RISCO

abrir ↗

Referência

CVE-2016-6563

CVE-2016-6563—

D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.