Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.801exploits catalogados

35.788CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.710Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.523 exploits

Referência

CVE-2014-2996

CVE-2014-2996—

XCloner Standalone 3.5 and earlier, when enable_db_backup and sql_mem are enabled, allows remote authenticated administr

23RISCO

abrir ↗

Referência

CVE-2009-2934

CVE-2009-2934—

Multiple stack-based buffer overflows in xaudio.dll in Programmed Integration PIPL 2.5.0 and 2.5.0D allow remote attacke

28RISCO

abrir ↗

Referência

CVE-2019-12922

CVE-2019-12922—

A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page.

28RISCO

abrir ↗

Referência

CVE-2019-11013

CVE-2019-11013—

Nimble Streamer 3.0.2-2 through 3.5.4-9 has a ../ directory traversal vulnerability. Successful exploitation could allow

43RISCO

abrir ↗

Referência

CVE-2021-27878

CVE-2021-27878HIGHsob ataqueransomware

An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires suc

91RISCO

abrir ↗

Referência

CVE-2018-5997

CVE-2018-5997—

An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upload feature and a pa

28RISCO

abrir ↗

Referência

CVE-2009-4871

CVE-2009-4871—

SQL injection vulnerability in globepersonnel_forum.asp in Logoshows BBS 2.0 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2017-15048

CVE-2017-15048—

Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote

28RISCO

abrir ↗

Referência

CVE-2017-15048

CVE-2017-15048—

Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote

28RISCO

abrir ↗

Referência

CVE-2025-10327

CVE-2025-10327MEDIUM

MiczFlor RPi-Jukebox-RFID shuffle.php os command injection

38RISCO

abrir ↗

Referência

CVE-2020-7030

CVE-2020-7030MEDIUM

IPO Information Disclosure

33RISCO

abrir ↗

Referência

CVE-2015-7247

CVE-2015-7247—

D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and

28RISCO

abrir ↗

Referência

CVE-2013-6877

CVE-2013-6877—

Heap-based buffer overflow in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738

28RISCO

abrir ↗

Referência

CVE-2014-8322

CVE-2014-8322—

Stack-based buffer overflow in the tcp_test function in aireplay-ng.c in Aircrack-ng before 1.2 RC 1 allows remote attac

28RISCO

abrir ↗

Referência

CVE-2017-7117

CVE-2017-7117—

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud befor

28RISCO

abrir ↗

Referência

CVE-2016-4340

CVE-2016-4340—

The impersonate feature in Gitlab 8.7.0, 8.6.0 through 8.6.7, 8.5.0 through 8.5.11, 8.4.0 through 8.4.9, 8.3.0 through 8

28RISCO

abrir ↗

Referência

CVE-2016-4340

CVE-2016-4340—

The impersonate feature in Gitlab 8.7.0, 8.6.0 through 8.6.7, 8.5.0 through 8.5.11, 8.4.0 through 8.4.9, 8.3.0 through 8

28RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Internet Explorer 6 / Provideo Camimage - 'ISSCamControl.dll 1.0.1.5' Remote Buffer Overflow

CVE-2007-3111—remotewindows

Buffer overflow in the Provideo Camimage ActiveX control in ISSCamControl.dll 1.0.1.5, when Internet Explorer 6 is used

35RISCO

abrir ↗

Referência

CVE-2009-4892

CVE-2009-4892—

SQL injection vulnerability in Content Management System WEBjump! allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência

CVE-2013-6935

CVE-2013-6935—

Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a

50RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_galeria - SQL Injection

CVE-2008-0833—webappsphp

SQL injection vulnerability in index.php in the com_galeria component for Joomla! allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module myTopics - 'articleId' SQL Injection

CVE-2008-0847—webappsphp

SQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

RunCMS Module MyAnnonces - 'cid' SQL Injection

CVE-2008-0878—webappsphp

SQL injection vulnerability in index.php in the MyAnnonces 1.7 and earlier module for RunCMS allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2020-5260

CVE-2020-5260CRITICAL

malicious URLs may cause Git to present stored credentials to the wrong server

53RISCO

abrir ↗

Referência

CVE-2018-8619

CVE-2018-8619—

A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly rest

35RISCO

abrir ↗

Referência

CVE-2018-12706

CVE-2018-12706—

DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header.

28RISCO

abrir ↗

Referência

CVE-2017-0263

CVE-2017-0263HIGHsob ataque

The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012

76RISCO

abrir ↗

Referência

CVE-2010-2919

CVE-2010-2919—

SQL injection vulnerability in the StaticXT (com_staticxt) component for Joomla! allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2006-0992

CVE-2006-0992—

Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute ar

60RISCO

abrir ↗

Referência

CVE-2017-17999

CVE-2017-17999—

SQL injection vulnerability in RISE Ultimate Project Manager 1.9 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.