Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.107exploits catalogados

36.322CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

22.573 exploits

Referência✓ VexDay Proof

TotalCalendar 2.4 - 'Include' Local File Inclusion

CVE-2009-1406—webappsphp

Directory traversal vulnerability in cms_detect.php in TotalCalendar 2.4 allows remote attackers to include and execute

23RISCO

abrir ↗

Referência

CVE-2013-7409

CVE-2013-7409—

Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possib

50RISCO

abrir ↗

Referência

CVE-2013-7409

CVE-2013-7409—

Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possib

50RISCO

abrir ↗

Referência

CVE-2012-6430

CVE-2012-6430—

Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded befor

23RISCO

abrir ↗

Referência

CVE-2025-2747

CVE-2025-2747CRITICALsob ataque

Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass

100RISCO

abrir ↗

Referência

CVE-2018-0775

CVE-2018-0775—

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due t

35RISCO

abrir ↗

Referência

CVE-2018-0774

CVE-2018-0774—

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due t

35RISCO

abrir ↗

Referência

CVE-2019-18426

CVE-2019-18426HIGHsob ataque

A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.

83RISCO

abrir ↗

Referência

CVE-2009-3052

CVE-2009-3052—

SQL injection vulnerability in root/includes/prime_quick_style.php in the Prime Quick Style addon before 1.2.3 for phpBB

23RISCO

abrir ↗

Referência✓ VexDay Proof

2532/Gigs 1.2.2 - Arbitrary Database Backup/Download

CVE-2008-6199—webappsphp

2532designs 2532|Gigs 1.2.2 and earlier allows remote attackers to trigger a backup and obtain sensitive information via

23RISCO

abrir ↗

Referência

CVE-2010-1554

CVE-2010-1554—

Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows r

50RISCO

abrir ↗

Referência

CVE-2016-6662

CVE-2016-6662—

Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.2

35RISCO

abrir ↗

Referência✓ VexDay Proof

Cobalt 0.1 - Multiple SQL Injections

CVE-2008-6202—webappsasp

SQL injection vulnerability in CoBaLT 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter

23RISCO

abrir ↗

Referência

CVE-2017-9833

CVE-2017-9833—

/cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read

50RISCO

abrir ↗

Referência

CVE-2018-8353

CVE-2018-8353—

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

35RISCO

abrir ↗

Referência

CVE-2009-3056

CVE-2009-3056—

PHP remote file inclusion vulnerability in include/engine/content/elements/menu.php in KingCMS 0.6.0 allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Harlandscripts Pro Traffic One - 'mypage.php' SQL Injection

CVE-2008-6213—webappsphp

SQL injection vulnerability in mypage.php in Harlandscripts Pro Traffic One allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Venalsur on-line Booking Centre - Cross-Site Scripting / SQL Injection

CVE-2008-6215—webappsphp

Cross-site scripting (XSS) vulnerability in cadena_ofertas_ext.php in Venalsur Booking Centre Booking System for Hotels

23RISCO

abrir ↗

Referência

CVE-2017-8548

CVE-2017-8548—

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain

35RISCO

abrir ↗

Referência

CVE-2013-5014

CVE-2013-5014—

The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.40

50RISCO

abrir ↗

Referência

CVE-2013-5014

CVE-2013-5014—

The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.40

50RISCO

abrir ↗

Referência

CVE-2012-6433

CVE-2012-6433—

Cross-site request forgery (CSRF) vulnerability in e107_admin/newspost.php in e107 1.0.1 allows remote attackers to hija

23RISCO

abrir ↗

Referência

CVE-2017-14494

CVE-2017-14494—

dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vect

35RISCO

abrir ↗

Referência

CVE-2018-16858

CVE-2018-16858HIGH

It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could

68RISCO

abrir ↗

Referência

CVE-2018-16858

CVE-2018-16858HIGH

It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could

68RISCO

abrir ↗

Referência

CVE-2018-12613

CVE-2018-12613—

An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute

60RISCO

abrir ↗

Referência

CVE-2009-3058

CVE-2009-3058—

Stack-based buffer overflow in akPlayer 1.9.0 allows remote attackers to execute arbitrary code via a long string in a .

23RISCO

abrir ↗

Referência

CVE-2015-0802

CVE-2015-0802—

Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl

50RISCO

abrir ↗

Referência

CVE-2013-3628

CVE-2013-3628—

Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability

50RISCO

abrir ↗

Referência

CVE-2008-4687

CVE-2008-4687—

manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort param

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.