Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

22.491 exploits

Referência

CVE-2016-7202

CVE-2016-7202—

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute a

45RISCO

abrir ↗

Referência

CVE-2016-7202

CVE-2016-7202—

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute a

45RISCO

abrir ↗

Referência

CVE-2011-5007

CVE-2011-5007—

Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB

60RISCO

abrir ↗

Referência

CVE-2017-1000028

CVE-2017-1000028—

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Trave

60RISCO

abrir ↗

Referência

CVE-2018-6389

CVE-2018-6389—

In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the

45RISCO

abrir ↗

Referência✓ VexDay Proof

Amaya 11.1 - W3C Editor/Browser (defer) Stack Overflow (PoC)

CVE-2009-1209—doswindows

Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute arbitrary code via a script

28RISCO

abrir ↗

Referência★ 180

Unauthenticated Remote Code Execution – Bricks <= 1.9.6

CVE-2024-25600CRITICAL

WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

85RISCO

abrir ↗

Referência✓ VexDay Proof

Philex 0.2.3 - Remote File Inclusion / File Disclosure

CVE-2007-1697—webappsphp

PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execute

45RISCO

abrir ↗

Referência✓ VexDay Proof

vsp stats processor 0.45 - 'gamestat.php?gameID' SQL Injection

CVE-2009-1224—webappsphp

SQL injection vulnerability in vsp-core/pub/themes/bismarck/gamestat.php in vsp stats processor 0.45 allows remote attac

23RISCO

abrir ↗

Referência

CVE-2019-13720

CVE-2019-13720HIGHsob ataque

Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap

83RISCO

abrir ↗

Referência✓ VexDay Proof

Vivotek Motion Jpeg Control - 'MjpegDecoder.dll 2.0.0.13' Remote Overflow

CVE-2007-3167—remotewindows

Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control (aka MjpegControl) in MjpegDecoder.dll 2.0.0.13 a

23RISCO

abrir ↗

Referência

CVE-2025-2776

CVE-2025-2776CRITICALsob ataque

SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection

100RISCO

abrir ↗

Referência

CVE-2016-1744

CVE-2016-1744—

The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary co

23RISCO

abrir ↗

Referência

CVE-2018-7251

CVE-2018-7251—

An issue was discovered in config/error.php in Anchor 0.12.3. The error log is exposed at an errors.log URI, and contain

60RISCO

abrir ↗

Referência

CVE-2019-1429

CVE-2019-1429HIGHsob ataque

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

93RISCO

abrir ↗

Referência

CVE-2014-3914

CVE-2014-3914—

Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows

60RISCO

abrir ↗

Referência

CVE-2017-6316

CVE-2017-6316CRITICALsob ataque

Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as r

100RISCO

abrir ↗

Referência

CVE-2017-6316

CVE-2017-6316CRITICALsob ataque

Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as r

100RISCO

abrir ↗

Referência

CVE-2022-20699

CVE-2022-20699CRITICALsob ataque

Cisco Small Business RV Series Routers Vulnerabilities

100RISCO

abrir ↗

Referência

CVE-2017-15889

CVE-2017-15889—

Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authe

60RISCO

abrir ↗

Referência✓ VexDay Proof

Blue Eye CMS 1.0.0 - Remote Cookie SQL Injection

CVE-2009-0883—webappsphp

SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magic_quotes_gpc is disabled, allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2021-25296

CVE-2021-25296HIGHsob ataque

Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi

100RISCO

abrir ↗

Referência

CVE-2021-25296

CVE-2021-25296HIGHsob ataque

Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi

100RISCO

abrir ↗

Referência

CVE-2021-39327

CVE-2021-39327MEDIUM

BulletProof Security <= 5.1 Sensitive Information Disclosure

70RISCO

abrir ↗

Referência

CVE-2016-1560

CVE-2016-1560—

ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and

60RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_bookJoomlas 0.1 - SQL Injection

CVE-2009-1263—webappsphp

SQL injection vulnerability in sub_commententry.php in the BookJoomlas (com_bookjoomlas) component 0.1 for Joomla! allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpTrafficA 1.4.2 - 'pageid' SQL Injection

CVE-2007-3426—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2017-16709

CVE-2017-16709—

Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote

60RISCO

abrir ↗

Referência

CVE-2017-8540

CVE-2017-8540HIGHsob ataque

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serve

93RISCO

abrir ↗

Referência

CVE-2013-3623

CVE-2013-3623—

Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Managemen

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.