Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

22.492 exploits

Referência

CVE-2022-4305

CVE-2022-4305CRITICAL

75RISCO

abrir ↗

Referência

CVE-2015-7309

CVE-2015-7309—

The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authent

50RISCO

abrir ↗

Referência

CVE-2015-7309

CVE-2015-7309—

The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authent

50RISCO

abrir ↗

Referência

CVE-2022-31814

CVE-2022-31814CRITICAL

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metachar

85RISCO

abrir ↗

Referência✓ VexDay Proof

Kensei Board 2.0.0b - Multiple SQL Injections

CVE-2009-1853—webappsphp

Multiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA (aka 2.0.0b) and earlier allow remote attac

23RISCO

abrir ↗

Referência

CVE-2011-2089

CVE-2011-2089—

Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0

50RISCO

abrir ↗

Referência

CVE-2011-2089

CVE-2011-2089—

Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0

50RISCO

abrir ↗

Referência

CVE-2018-14009

CVE-2018-14009—

Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.

35RISCO

abrir ↗

Referência

CVE-2016-10034

CVE-2016-10034—

The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.

35RISCO

abrir ↗

Referência

CVE-2015-3798

CVE-2015-3798—

The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute

28RISCO

abrir ↗

Referência

CVE-2022-45721

CVE-2022-45721CRITICAL

IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the picName parameter in the formDelWewifi

48RISCO

abrir ↗

Referência

CVE-2016-10034

CVE-2016-10034—

The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.

35RISCO

abrir ↗

Referência

Soosyze CMS 2.0 - Brute Force Login

CVE-2025-52392MEDIUMwebappsmultiple

Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missing rate-limiting and lockout m

33RISCO

abrir ↗

Referência✓ VexDay Proof

Wordsmith 1.1b - 'config.inc.php?_path' Remote File Inclusion

CVE-2007-5102—webappsphp

PHP remote file inclusion vulnerability in config.inc.php in Wordsmith 1.0 RC1, when register_globals is enabled, allows

35RISCO

abrir ↗

Referência✓ VexDay Proof

Sige 0.1 - 'sige_init.php' Remote File Inclusion

CVE-2007-5781—webappsphp

PHP remote file inclusion vulnerability in inc/sige_init.php in Sige 0.1 allows remote attackers to execute arbitrary PH

35RISCO

abrir ↗

Referência

CVE-2022-26965

CVE-2022-26965—

In Pluck 4.7.16, an admin user can use the theme upload functionality at /admin.php?action=themeinstall to perform remot

35RISCO

abrir ↗

Referência

CVE-2016-1101

CVE-2016-1101—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RISCO

abrir ↗

Referência

CVE-2016-1101

CVE-2016-1101—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RISCO

abrir ↗

Referência

CVE-2010-0688

CVE-2010-0688—

Stack-based buffer overflow in Orbital Viewer 1.04 allows user-assisted remote attackers to execute arbitrary code via a

50RISCO

abrir ↗

Referência

CVE-2018-7582

CVE-2018-7582—

WebLog Expert Web Server Enterprise 9.4 allows Remote Denial Of Service (daemon crash) via a long HTTP Accept Header to

35RISCO

abrir ↗

Referência

CVE-2018-7582

CVE-2018-7582—

WebLog Expert Web Server Enterprise 9.4 allows Remote Denial Of Service (daemon crash) via a long HTTP Accept Header to

35RISCO

abrir ↗

Referência

CVE-2017-6884

CVE-2017-6884HIGHsob ataqueransomware

A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vul

83RISCO

abrir ↗

Referência

CVE-2022-37661

CVE-2022-37661—

SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution (RCE) via the ping host feature.

35RISCO

abrir ↗

Referência

CVE-2022-37661

CVE-2022-37661—

SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution (RCE) via the ping host feature.

35RISCO

abrir ↗

Referência

CVE-2022-37661

CVE-2022-37661—

SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution (RCE) via the ping host feature.

35RISCO

abrir ↗

Referência

CVE-2011-2763

CVE-2011-2763—

The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) and 4.7.18 allows remote attackers to execute arbitra

50RISCO

abrir ↗

Referência

CVE-2008-5232

CVE-2008-5232—

Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3

35RISCO

abrir ↗

Referência

CVE-2012-3752

CVE-2012-3752—

Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a de

50RISCO

abrir ↗

Referência

CVE-2012-5975

CVE-2012-5975—

The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6

50RISCO

abrir ↗

Referência

CVE-2018-13109

CVE-2018-13109—

All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerabili

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.