Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.523 exploits

Referência✓ VexDay Proof

BlogPHP 2 - 'id' Cross-Site Scripting / SQL Injection

CVE-2008-0678—webappsphp

SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência

CVE-2015-3081

CVE-2015-3081—

Race condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and b

28RISCO

abrir ↗

Referência

CVE-2016-1608

CVE-2016-1608—

vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated u

28RISCO

abrir ↗

Referência

CVE-2009-4797

CVE-2009-4797—

SQL injection vulnerability in browse.php in JobHut 1.2 and earlier allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2022-24562

CVE-2022-24562—

In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary

35RISCO

abrir ↗

Referência

CVE-2017-8480

CVE-2017-8480—

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,

23RISCO

abrir ↗

Referência

CVE-2008-6264

CVE-2008-6264—

SQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2017-9430

CVE-2017-9430—

Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) o

28RISCO

abrir ↗

Referência

CVE-2017-9430

CVE-2017-9430—

Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) o

28RISCO

abrir ↗

Referência

CVE-2010-2020

CVE-2010-2020—

sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is

23RISCO

abrir ↗

Referência

CVE-2007-2583

CVE-2007-2583—

The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-depen

28RISCO

abrir ↗

Referência

CVE-2010-2028

CVE-2010-2028—

Buffer overflow in k23productions TFTPUtil GUI (aka TFTPGUI) 1.4.5 allows remote attackers to cause a denial of service

28RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin st_newsletter - SQL Injection

CVE-2008-0683—webappsphp

SQL injection vulnerability in shiftthis-preview.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress al

23RISCO

abrir ↗

Referência✓ VexDay Proof

Oracle Internet Directory 10.1.4 - Remote Denial of Service

CVE-2008-2595—dosmultiple

Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and

28RISCO

abrir ↗

Referência

CVE-2009-2885

CVE-2009-2885—

SQL injection vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2013-6221

CVE-2013-6221—

Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoP

60RISCO

abrir ↗

Referência

CVE-2018-0946

CVE-2018-0946—

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

35RISCO

abrir ↗

Referência

CVE-2015-4632

CVE-2015-4632—

Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08

50RISCO

abrir ↗

Referência

CVE-2015-4632

CVE-2015-4632—

Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08

50RISCO

abrir ↗

Referência

CVE-2016-3288

CVE-2016-3288—

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page, aka "Internet E

35RISCO

abrir ↗

Referência

CVE-2014-5468

CVE-2014-5468—

A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cf

50RISCO

abrir ↗

Referência

CVE-2026-14749

CVE-2026-14749MEDIUM

mjperpinosa stumasy calculate.php eval code injection

33RISCO

abrir ↗

Referência

CVE-2026-14748

CVE-2026-14748MEDIUM

AIAnytime Awesome-MCP-Server mcp-wiki/wiki-summary server.py server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2015-2097

CVE-2015-2097—

Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary c

28RISCO

abrir ↗

Referência

CVE-2015-2097

CVE-2015-2097—

Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary c

28RISCO

abrir ↗

Referência

CVE-2020-15261

CVE-2020-15261HIGH

Unquoted service path vulnerability on Veyon

46RISCO

abrir ↗

Referência

CVE-2013-4625

CVE-2013-4625—

Cross-site scripting (XSS) vulnerability in files/installer.cleanup.php in the Duplicator plugin before 0.4.5 for WordPr

43RISCO

abrir ↗

Referência

CVE-2016-8020

CVE-2016-8020—

Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earl

28RISCO

abrir ↗

Referência

CVE-2011-1761

CVE-2011-1761—

Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions in src/load_abc.cpp in l

28RISCO

abrir ↗

Referência

CVE-2017-6320

CVE-2017-6320—

A remote command injection vulnerability exists in the Barracuda Load Balancer product line (confirmed on v5.4.0.004 (20

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.