Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.492 exploits

Referência

CVE-2017-8640

CVE-2017-8640—

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary cod

35RISCO

abrir ↗

Referência

CVE-2017-8645

CVE-2017-8645—

Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in t

35RISCO

abrir ↗

Referência

CVE-2018-8631

CVE-2018-8631—

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet

35RISCO

abrir ↗

Referência

CVE-2017-11802

CVE-2017-11802—

ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker

35RISCO

abrir ↗

Referência

CVE-2024-28000

CVE-2024-28000CRITICAL

WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability

75RISCO

abrir ↗

Referência

Litespeed Cache WordPress Plugin 6.3.0.1 - Privilege Escalation

CVE-2024-28000CRITICALwebappsphp

WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability

75RISCO

abrir ↗

Referência

CVE-2022-22960

CVE-2022-22960HIGHsob ataque

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due t

98RISCO

abrir ↗

Referência

CVE-2022-22960

CVE-2022-22960HIGHsob ataque

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due t

98RISCO

abrir ↗

Referência

CVE-2020-0601

CVE-2020-0601HIGHsob ataque

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

Referência

CVE-2020-0601

CVE-2020-0601HIGHsob ataque

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

Referência

CVE-2014-6039

CVE-2014-6039—

ManageEngine EventLog Analyzer version 7 through 9.9 build 9002 has a Credentials Disclosure Vulnerability. Fixed versio

50RISCO

abrir ↗

Referência

CVE-2017-8670

CVE-2017-8670—

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code

35RISCO

abrir ↗

Referência

CVE-2012-5687

CVE-2012-5687—

Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13

50RISCO

abrir ↗

Referência

CVE-2016-7286

CVE-2016-7286—

The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

35RISCO

abrir ↗

Referência

CVE-2016-7286

CVE-2016-7286—

The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

35RISCO

abrir ↗

Referência

CVE-2018-10093

CVE-2018-10093—

AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.

50RISCO

abrir ↗

Referência

CVE-2018-10093

CVE-2018-10093—

AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.

50RISCO

abrir ↗

Referência

CVE-2015-7611

CVE-2015-7611—

Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary syst

50RISCO

abrir ↗

Referência

CVE-2015-7611

CVE-2015-7611—

Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary syst

50RISCO

abrir ↗

Referência

CVE-2009-2227

CVE-2009-2227—

Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrar

50RISCO

abrir ↗

Referência

CVE-2018-15473

CVE-2018-15473MEDIUM

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISCO

abrir ↗

Referência

CVE-2018-15473

CVE-2018-15473MEDIUM

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISCO

abrir ↗

Referência✓ VexDay Proof

Amaya 11.1 - W3C Editor/Browser 'defer' Remote Stack Overflow

CVE-2009-1209—remotewindows

Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute arbitrary code via a script

28RISCO

abrir ↗

Referência✓ VexDay Proof

eMeeting Online Dating Software 5.2 - SQL Injection

CVE-2007-3609—webappsphp

Multiple SQL injection vulnerabilities in eMeeting Online Dating Software 5.2 allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2013-7409

CVE-2013-7409—

Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possib

50RISCO

abrir ↗

Referência

CVE-2013-7409

CVE-2013-7409—

Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possib

50RISCO

abrir ↗

Referência

CVE-2012-6430

CVE-2012-6430—

Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded befor

23RISCO

abrir ↗

Referência

CVE-2025-2747

CVE-2025-2747CRITICALsob ataque

Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass

100RISCO

abrir ↗

Referência✓ VexDay Proof

e107 < 0.7.15 - 'extended_user_fields' Blind SQL Injection

CVE-2009-1409—webappsphp

SQL injection vulnerability in usersettings.php in e107 0.7.15 and earlier, when "Extended User Fields" is enabled and m

23RISCO

abrir ↗

Referência

CVE-2018-0775

CVE-2018-0775—

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due t

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.