Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.813exploits catalogados

35.788CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.549 exploits

Referência

CVE-2010-4911

CVE-2010-4911—

SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-0631

CVE-2010-0631—

Multiple SQL injection vulnerabilities in index.php in Eicra Car Rental-Script, when the plugin_id parameter is 4, allow

23RISCO

abrir ↗

Referência

CVE-2025-8550

CVE-2025-8550MEDIUM

atjiu pybbs list cross site scripting

33RISCO

abrir ↗

Referência

CVE-2010-0632

CVE-2010-0632—

SQL injection vulnerability in the Parkview Consultants SimpleFAQ (com_simplefaq) component for Joomla! allows remote at

23RISCO

abrir ↗

Referência

CVE-2021-25160

CVE-2021-25160—

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in v

23RISCO

abrir ↗

Referência

CVE-2013-5639

CVE-2013-5639—

Directory traversal vulnerability in users/login.php in Gnew 2013.1 and earlier allows remote attackers to read arbitrar

23RISCO

abrir ↗

Referência

CVE-2013-5639

CVE-2013-5639—

Directory traversal vulnerability in users/login.php in Gnew 2013.1 and earlier allows remote attackers to read arbitrar

23RISCO

abrir ↗

Referência

CVE-2020-11700

CVE-2020-11700—

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter fname, used on the page certs-x.

23RISCO

abrir ↗

Referência

CVE-2013-1465

CVE-2013-1465—

The Cubecart::_basket method in classes/cubecart.class.php in CubeCart 5.0.0 through 5.2.0 allows remote attackers to un

23RISCO

abrir ↗

Referência

CVE-2015-2315

CVE-2015-2315—

Cross-site scripting (XSS) vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

RealPlayer 10 - '.ra' Remote Denial of Service

CVE-2007-2497—doswindows

RealNetworks RealPlayer 10 Gold allows remote attackers to cause a denial of service (memory consumption) via a certain

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin E-Commerce 3.4 - Arbitrary File Upload

CVE-2008-6811—webappsphp

Unrestricted file upload vulnerability in image_processing.php in the e-Commerce Plugin 3.4 and earlier for Wordpress al

23RISCO

abrir ↗

Referência✓ VexDay Proof

eZip Wizard 3.0 - Local Stack Buffer Overflow (PoC) (SEH)

CVE-2009-1057—doswindows

MicroSmarts Enterprise ZipItFast! 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file that tri

23RISCO

abrir ↗

Referência✓ VexDay Proof

32bit FTP (09.04.24) - 'Banner' Remote Buffer Overflow (PoC)

CVE-2009-1592—doswindows_x86

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPAddressBook 2.11 - 'view.php' SQL Injection

CVE-2008-1847—webappsphp

SQL injection vulnerability in view.php in CoronaMatrix phpAddressBook 2.11 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Multiple Newsletters 2.7 - Local File Inclusion / Cross-Site Scripting

CVE-2008-5566—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in Triangle Solutions PHP Multiple Newsletters 2.7 allows remote a

23RISCO

abrir ↗

Referência

CVE-2015-7897

CVE-2015-7897—

The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6 Edge befo

23RISCO

abrir ↗

Referência

CVE-2015-7897

CVE-2015-7897—

The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6 Edge befo

23RISCO

abrir ↗

Referência

CVE-2018-4240

CVE-2018-4240—

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS b

23RISCO

abrir ↗

Referência

CVE-2015-4593

CVE-2015-4593—

eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserServ

23RISCO

abrir ↗

Referência

CVE-2009-2403

CVE-2009-2403—

Heap-based buffer overflow in SCMPX 1.5.1 allows remote attackers to cause a denial of service (application crash) or ex

23RISCO

abrir ↗

Referência

CVE-2016-7786

CVE-2016-7786—

Sophos Cyberoam UTM CR25iNG 10.6.3 MR-5 allows remote authenticated users to bypass intended access restrictions via dir

23RISCO

abrir ↗

Referência

CVE-2017-17088

CVE-2017-17088—

The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability. The we

23RISCO

abrir ↗

Referência

CVE-2017-17088

CVE-2017-17088—

The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability. The we

23RISCO

abrir ↗

Referência✓ VexDay Proof

Virtual DJ 5.0 - '.m3u' Local Buffer Overflow

CVE-2007-4735—localwindows

Buffer overflow in Next Generation Software Virtual DJ (VDJ) 5.0 allows user-assisted remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2010-4954

CVE-2010-4954—

SQL injection vulnerability in product_reviews_info.php in xt:Commerce Gambio 2008 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2013-1668

CVE-2013-1668—

The uploadFile function in upload/index.php in CosCMS before 1.822 allows remote administrators to execute arbitrary com

23RISCO

abrir ↗

Referência

CVE-2007-2526

CVE-2007-2526—

Heap-based buffer overflow in the ConnectAsyncEx function in VNC Viewer ActiveX control (scvncctrl.dll) in the SmartCode

23RISCO

abrir ↗

Referência

CVE-2016-3220

CVE-2016-3220—

atmfd.dll in the Adobe Type Manager Font Driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Wind

23RISCO

abrir ↗

Referência✓ VexDay Proof

P-Book 1.17 - 'pb_lang' Remote File Inclusion

CVE-2006-5667—webappsphp

Multiple PHP remote file inclusion vulnerabilities in P-Book 1.17 and earlier allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.