Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

22.492 exploits

Referência

CVE-2007-6681

CVE-2007-6681—

Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitr

28RISCO

abrir ↗

Referência

CVE-2021-24040

CVE-2021-24040—

Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files c

28RISCO

abrir ↗

Referência

CVE-2018-9843

CVE-2018-9843—

The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows remote attackers to execute

28RISCO

abrir ↗

Referência

CVE-2019-5722

CVE-2019-5722—

An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Due to a lack of user input validation in parameter handl

23RISCO

abrir ↗

Referência

CVE-2019-6543

CVE-2019-6543—

AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition)

28RISCO

abrir ↗

Referência

CVE-2018-13981

CVE-2018-13981—

The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated remote code

28RISCO

abrir ↗

Referência

CVE-2018-13981

CVE-2018-13981—

The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated remote code

28RISCO

abrir ↗

Referência

CVE-2010-0758

CVE-2010-0758—

SQL injection vulnerability in news_desc.php in Softbiz Jobs allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

ZeroCMS 1.0 Alpha - Arbitrary File Upload / SQL Injection

CVE-2008-0233—webappsphp

Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote attackers to bypass intended acce

23RISCO

abrir ↗

Referência✓ VexDay Proof

QuickTime Player 7.3.1.70 - 'RTSP' Buffer Overflow (PoC)

CVE-2008-0234—doswindows

Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allo

28RISCO

abrir ↗

Referência

CVE-2015-2993

CVE-2015-2993—

SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers t

50RISCO

abrir ↗

Referência

CVE-2017-8535

CVE-2017-8535—

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serve

28RISCO

abrir ↗

Referência

CVE-2010-4227

CVE-2010-4227—

The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of s

28RISCO

abrir ↗

Referência

CVE-2010-0803

CVE-2010-0803—

SQL injection vulnerability in the jVideoDirect (com_jvideodirect) component 1.1 RC3b for Joomla! allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2015-8396

CVE-2015-8396—

Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cx

28RISCO

abrir ↗

Referência

CVE-2015-8396

CVE-2015-8396—

Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cx

28RISCO

abrir ↗

Referência

CVE-2016-1768

CVE-2016-1768—

QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (m

28RISCO

abrir ↗

Referência

CVE-2020-0938

CVE-2020-0938HIGHsob ataque

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly

83RISCO

abrir ↗

Referência

CVE-2018-5234

CVE-2018-5234—

The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in whic

28RISCO

abrir ↗

Referência

CVE-2012-6554

CVE-2012-6554—

functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute

43RISCO

abrir ↗

Referência

CVE-2017-6182

CVE-2017-6182—

In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports wa

28RISCO

abrir ↗

Referência

CVE-2022-34047

CVE-2022-34047—

An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via v

43RISCO

abrir ↗

Referência

CVE-2016-4135

CVE-2016-4135—

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsof

28RISCO

abrir ↗

Referência

CVE-2019-6974

CVE-2019-6974—

In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because

28RISCO

abrir ↗

Referência

CVE-2020-27950

CVE-2020-27950MEDIUMsob ataque

A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watch

68RISCO

abrir ↗

Referência

CVE-2025-14706

CVE-2025-14706CRITICAL

Shiguangwu sgwbox N3 NETREBOOT http_eshell_server command injection

53RISCO

abrir ↗

Referência

CVE-2025-14707

CVE-2025-14707CRITICAL

Shiguangwu sgwbox N3 DOCKER Feature http_eshell_server command injection

53RISCO

abrir ↗

Referência

CVE-2017-8051

CVE-2017-8051—

Tenable Appliance 3.5 - 4.4.0, and possibly prior versions, contains a flaw in the simpleupload.py script in the Web UI.

28RISCO

abrir ↗

Referência

CVE-2014-2595

CVE-2014-2595—

Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a perm

28RISCO

abrir ↗

Referência

CVE-2018-18761

CVE-2018-18761—

SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.