Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.107exploits catalogados

36.322CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

22.573 exploits

Referência

CVE-2013-5977

CVE-2013-5977—

Cross-site request forgery (CSRF) vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordP

23RISCO

abrir ↗

Referência

CVE-2022-2651

CVE-2022-2651CRITICAL

Authentication Bypass by Primary Weakness in bookwyrm-social/bookwyrm

53RISCO

abrir ↗

Referência

CVE-2016-2210

CVE-2016-2210—

Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec

28RISCO

abrir ↗

Referência

CVE-2017-2370

CVE-2017-2370—

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS

28RISCO

abrir ↗

Referência

TylerTech Eagle 2018.3.11 - Remote Code Execution

CVE-2019-16112—webappsjava

TylerTech Eagle 2018.3.11 deserializes untrusted user input, resulting in remote code execution via a crafted Java objec

28RISCO

abrir ↗

Referência✓ VexDay Proof

Black Ice Software Annotation Plugin - 'BiAnno.ocx' Remote Buffer Overflow

CVE-2008-2745—remotewindows

Stack-based buffer overflow in BiAnno ActiveX Control (BiAnno.ocx) in Black Ice Software Annotation Plugin 10.95 allows

28RISCO

abrir ↗

Referência✓ VexDay Proof

BXCP 0.2.9.9 - 'tid' SQL Injection

CVE-2006-0821—webappsphp

SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Online Media Technologies 'AVSMJPEGFILE.DLL 1.1' - Remote Buffer Overflow (PoC)

CVE-2007-6327—doswindows

Buffer overflow in a certain ActiveX control in Online Media Technologies AVSMJPEGFILE.DLL 1.1.1.102 allows remote attac

28RISCO

abrir ↗

Referência

CVE-2018-25403

CVE-2018-25403HIGH

The Open ISES Project 3.30A SQL Injection via city_graph.php

41RISCO

abrir ↗

Referência

CVE-2018-25402

CVE-2018-25402HIGH

The Open ISES Project 3.30A SQL Injection via inc_types_graph.php

41RISCO

abrir ↗

Referência

CVE-2018-25401

CVE-2018-25401HIGH

The Open ISES Project 3.30A SQL Injection via sever_graph.php

41RISCO

abrir ↗

Referência

CVE-2024-27199

CVE-2024-27199HIGHsob ataqueransomware

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

100RISCO

abrir ↗

Referência

CVE-2022-44877

CVE-2022-44877CRITICALsob ataque

100RISCO

abrir ↗

Referência

CVE-2022-44877

CVE-2022-44877CRITICALsob ataque

100RISCO

abrir ↗

Referência

CVE-2018-25400

CVE-2018-25400HIGH

The Open ISES Project 3.30A SQL Injection via form_post.php

41RISCO

abrir ↗

Referência

CVE-2013-2684

CVE-2013-2684—

Cross-site Scripting (XSS) in Cisco Linksys E4200 1.0.05 Build 7 devices allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2009-4721

CVE-2009-4721—

Multiple SQL injection vulnerabilities in Admin/index.asp in Andrews-Web (A-W) BannerAd 1.0 allow remote attackers to ex

23RISCO

abrir ↗

Referência

CVE-2015-0313

CVE-2015-0313HIGHsob ataque

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows

100RISCO

abrir ↗

Referência

CVE-2013-3529

CVE-2013-3529—

Multiple cross-site scripting (XSS) vulnerabilities in user/obits.php in the WP FuneralPress plugin before 1.1.7 for Wor

23RISCO

abrir ↗

Referência

CVE-2013-3532

CVE-2013-3532—

SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote

23RISCO

abrir ↗

Referência

CVE-2013-3532

CVE-2013-3532—

SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote

23RISCO

abrir ↗

Referência

CVE-2013-3537

CVE-2013-3537—

Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2024-24919

CVE-2024-24919HIGHsob ataqueransomware

Information disclosure

100RISCO

abrir ↗

Referência

CVE-2024-45519

CVE-2024-45519CRITICALsob ataque

The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9,

100RISCO

abrir ↗

Referência

CVE-2015-0779

CVE-2015-0779—

Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11

60RISCO

abrir ↗

Referência

CVE-2014-8361

CVE-2014-8361CRITICALsob ataque

The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClien

100RISCO

abrir ↗

Referência

CVE-2026-49127

CVE-2026-49127HIGH

Music Player Daemon < 0.24.11 Stack Buffer Overflow via pcm_unpack_24be

41RISCO

abrir ↗

Referência

CVE-2026-24444

CVE-2026-24444CRITICAL

SDMC NE6037 Hardcoded Password via mgmt.php/npcmd.php

48RISCO

abrir ↗

Referência

CVE-2017-2445

CVE-2017-2445—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef

23RISCO

abrir ↗

Referência

CVE-2009-4730

CVE-2009-4730—

SQL injection vulnerability in report.php in x10 Adult Media Script 1.7 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.