Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.107exploits catalogados

36.322CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

22.573 exploits

Referência

CVE-2022-25090

CVE-2022-25090—

Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure

28RISCO

abrir ↗

Referência

UltimateHG/CVE-2025-52689-PoC

CVE-2025-52689CRITICAL

Weak Session ID Check in the OmniAccess Stellar Web Management Interface

53RISCO

abrir ↗

Referência

CVE-2015-6023

CVE-2015-6023—

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remot

28RISCO

abrir ↗

Referência

CVE-2015-6023

CVE-2015-6023—

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remot

28RISCO

abrir ↗

Referência

CVE-2013-1670

CVE-2013-1670—

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbi

28RISCO

abrir ↗

Referência

CVE-2018-5407

CVE-2018-5407—

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks

23RISCO

abrir ↗

Referência

CVE-2011-5212

CVE-2011-5212—

SQL injection vulnerability in admin/index.php in Subrion CMS 2.0.4 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2014-7221

CVE-2014-7221—

TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (buffer overflow and

28RISCO

abrir ↗

Referência

CVE-2009-2402

CVE-2009-2402—

SQL injection vulnerability in index.php in the forum module in PHPEcho CMS 2.0-rc3 allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2020-13144

CVE-2020-13144—

Studio in Open edX Ironwood 2.5, when CodeJail is not used, allows a user to go to the "Create New course>New section>Ne

28RISCO

abrir ↗

Referência

CVE-2020-11060

CVE-2020-11060HIGH

Remote Code Execution in GLPI

46RISCO

abrir ↗

Referência

CVE-2010-3145

CVE-2010-3145—

Untrusted search path vulnerability in the BitLocker Drive Encryption API, as used in sdclt.exe in Backup Manager in Mic

28RISCO

abrir ↗

Referência

CVE-2010-2259

CVE-2010-2259—

Directory traversal vulnerability in the BF Survey (com_bfsurvey) component for Joomla! allows remote attackers to inclu

43RISCO

abrir ↗

Referência

CVE-2010-2263

CVE-2010-2263—

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or

60RISCO

abrir ↗

Referência

CVE-2021-38648

CVE-2021-38648HIGHsob ataque

Open Management Infrastructure Elevation of Privilege Vulnerability

91RISCO

abrir ↗

Referência

CVE-2010-2310

CVE-2010-2310—

SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request.

28RISCO

abrir ↗

Referência

CVE-2013-6227

CVE-2013-6227—

Unrestricted file upload vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly

23RISCO

abrir ↗

Referência

CVE-2009-2893

CVE-2009-2893—

Multiple cross-site scripting (XSS) vulnerabilities in index.php in XZero Community Classifieds 4.97.8 allow remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

CA BrightStor ARCserve 11.5.2.0 - 'catirpc.dll' RPC Server Denial of Service

CVE-2007-0816—doswindows

The RPC Server service (catirpc.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 SP2 and earlie

28RISCO

abrir ↗

Referência

CVE-2009-2423

CVE-2009-2423—

SQL injection vulnerability in category.php in Ebay Clone 2009 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

CandyPress eCommerce suite 4.1.1.26 - Multiple Vulnerabilities

CVE-2008-0736—webappsasp

admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and possibly other 4.x and 3.x versions, allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2018-6228

CVE-2018-6228—

A SQL injection vulnerability in a Trend Micro Email Encryption Gateway 5.5 policy script could allow an attacker to exe

28RISCO

abrir ↗

Referência

CVE-2018-6229

CVE-2018-6229—

A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 edit policy script could allow an attacker

28RISCO

abrir ↗

Referência

CVE-2020-15160

CVE-2020-15160—

Blind SQL Injection in PrestaShop

28RISCO

abrir ↗

Referência

CVE-2019-16702

CVE-2019-16702—

Integard Pro 2.2.0.9026 allows remote attackers to execute arbitrary code via a buffer overflow involving a long NoJs pa

28RISCO

abrir ↗

Referência

CVE-2010-1299

CVE-2010-1299—

Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magic_quotes_gpc is di

28RISCO

abrir ↗

Referência

CVE-2015-5452

CVE-2015-5452—

SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2009-2915

CVE-2009-2915—

SQL injection vulnerability in 2fly_gift.php in 2FLY Gift Delivery System 6.0 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2017-1000083

CVE-2017-1000083—

backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to e

50RISCO

abrir ↗

Referência✓ VexDay Proof

Serv-U FTP Server 7.3 - (Authenticated) Remote FTP File Replacement

CVE-2008-4501—remotewindows

Directory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote auth

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.