Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados

35.840CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.600 exploits

Referência

CVE-2022-4117

CVE-2022-4117CRITICAL

IWS - Geo Form Fields <= 1.0 - Unauthenticated SQLi

63RISCO

abrir ↗

Referência

CVE-2017-4916

CVE-2017-4916—

VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Succes

23RISCO

abrir ↗

Referência

CVE-2014-9261

CVE-2014-9261—

The sanitize function in Codoforum 2.5.1 does not properly implement filtering for directory traversal sequences, which

23RISCO

abrir ↗

Referência

CVE-2014-9261

CVE-2014-9261—

The sanitize function in Codoforum 2.5.1 does not properly implement filtering for directory traversal sequences, which

23RISCO

abrir ↗

Referência

CVE-2010-3155

CVE-2010-3155—

Untrusted search path vulnerability in Adobe ExtendScript Toolkit (ESTK) CS5 3.5.0.52 allows local users, and possibly r

28RISCO

abrir ↗

Referência

CVE-2017-15014

CVE-2017-15014—

OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design ga

23RISCO

abrir ↗

Referência

CVE-2022-37255

CVE-2022-37255HIGH

TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL07552646

41RISCO

abrir ↗

Referência✓ VexDay Proof

Pluck CMS 4.5.3 - 'g_pcltar_lib_dir' Local File Inclusion

CVE-2008-6253—webappsphp

Directory traversal vulnerability in data/inc/lib/pcltar.lib.php in Pluck 4.5.3, when register_globals is enabled, allow

23RISCO

abrir ↗

Referência

CVE-2014-2090

CVE-2014-2090—

Multiple cross-site scripting (XSS) vulnerabilities in ilias.php in ILIAS 4.4.1 allow remote authenticated users to inje

23RISCO

abrir ↗

Referência✓ VexDay Proof

ICQ 6.5 - URL Search Hook (Windows Explorer) Remote Buffer Overflow (PoC)

CVE-2009-1915—doswindows

Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to cause a denial

23RISCO

abrir ↗

Referência

CVE-2016-9566

CVE-2016-9566—

base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root

23RISCO

abrir ↗

Referência

CVE-2018-7704

CVE-2018-7704—

SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via the option1

23RISCO

abrir ↗

Referência

CVE-2026-18645

CVE-2026-18645MEDIUM

danpros HTMLy Admin Content Endpoint admin.php add_content path traversal

33RISCO

abrir ↗

Referência

CVE-2026-18644

CVE-2026-18644MEDIUM

danpros HTMLy Delete Username Endpoint htmly.php unlink path traversal

33RISCO

abrir ↗

Referência

CVE-2011-5148

CVE-2011-5148—

Multiple incomplete blacklist vulnerabilities in the Simple File Upload (mod_simplefileuploadv1.3) module before 1.3.5 f

23RISCO

abrir ↗

Referência

CVE-2018-9128

CVE-2018-9128—

DVD X Player Standard 5.5.3.9 has a Buffer Overflow via a crafted .plf file, a related issue to CVE-2007-3068.

23RISCO

abrir ↗

Referência

CVE-2018-9128

CVE-2018-9128—

DVD X Player Standard 5.5.3.9 has a Buffer Overflow via a crafted .plf file, a related issue to CVE-2007-3068.

23RISCO

abrir ↗

Referência

CVE-2009-3213

CVE-2009-3213—

Stack-based buffer overflow in broid 1.0 Beta 3a allows remote attackers to cause a denial of service (application crash

23RISCO

abrir ↗

Referência

CVE-2013-2577

CVE-2013-2577—

Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.

28RISCO

abrir ↗

Referência

CVE-2025-5623

CVE-2025-5623CRITICAL

D-Link DIR-816 qosClassifier stack-based overflow

53RISCO

abrir ↗

Referência

CVE-2010-3591

CVE-2010-3591—

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 all

28RISCO

abrir ↗

Referência

CVE-2019-8925

CVE-2019-8925—

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. An Absolute Path Traversal vulnerabi

28RISCO

abrir ↗

Referência

CVE-2019-8925

CVE-2019-8925—

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. An Absolute Path Traversal vulnerabi

28RISCO

abrir ↗

Referência

CVE-2014-2424

CVE-2014-2424—

Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote

50RISCO

abrir ↗

Referência

CVE-2023-6553

CVE-2023-6553CRITICAL

Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

85RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component com_loudmouth 4.0j - Remote File Inclusion

CVE-2006-3748—webappsphp

PHP remote file inclusion vulnerability in includes/abbc/abbc.class.php in the LoudMouth Component for Mambo 4.0j, and p

23RISCO

abrir ↗

Referência

CVE-2012-6505

CVE-2012-6505—

Cross-site scripting (XSS) vulnerability in mods/hours/data/get_hours.php in PHP Volunteer Management 1.0.2 allows remot

23RISCO

abrir ↗

Referência

CVE-2017-16951

CVE-2017-16951—

Winamp Pro 5.66 Build 3512 allows remote attackers to cause a denial of service via a crafted WAV, WMV, AU, ASF, AIFF, o

23RISCO

abrir ↗

Referência

CVE-2017-3133

CVE-2017-3133—

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthor

43RISCO

abrir ↗

Referência

CVE-2013-5693

CVE-2013-5693—

Cross-site scripting (XSS) vulnerability in X2Engine X2CRM before 3.5 allows remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.