Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2016-1252

CVE-2016-1252—

The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu 14.04 LTS before 1.0.1

23RISCO

abrir ↗

Referência

CVE-2016-1252

CVE-2016-1252—

The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu 14.04 LTS before 1.0.1

23RISCO

abrir ↗

Referência

CVE-2015-1726

CVE-2015-1726—

Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista S

23RISCO

abrir ↗

Referência

CVE-2009-1561

CVE-2009-1561—

Cross-site request forgery (CSRF) vulnerability in administration.cgi on the Cisco Linksys WRT54GC router with firmware

23RISCO

abrir ↗

Referência

CVE-2010-0459

CVE-2010-0459—

SQL injection vulnerability in the Mochigames (com_mochigames) component 0.51 and possibly other versions for Joomla! al

23RISCO

abrir ↗

Referência

CVE-2023-33440

CVE-2023-33440HIGH

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_u

61RISCO

abrir ↗

Referência

CVE-2025-2594

CVE-2025-2594HIGH

User Registration & Membership < 4.1.3 - Authentication Bypass

41RISCO

abrir ↗

Referência

CVE-2020-24219

CVE-2020-24219—

An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97. Attackers can send crafted unauthentic

28RISCO

abrir ↗

Referência

CVE-2019-7646

CVE-2019-7646—

CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.763 is vulnerable to Stored/Persistent XSS for the "Package

23RISCO

abrir ↗

Referência

CVE-2019-7646

CVE-2019-7646—

CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.763 is vulnerable to Stored/Persistent XSS for the "Package

23RISCO

abrir ↗

Referência✓ VexDay Proof

My Gaming Ladder 7.5 - 'ladderid' SQL Injection

CVE-2008-1791—webappsphp

SQL injection vulnerability in ladder.php in My Gaming Ladder 7.5 and earlier allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2014-0379

CVE-2014-0379—

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0

23RISCO

abrir ↗

Referência

CVE-2010-0942

CVE-2010-0942—

Directory traversal vulnerability in the jVideoDirect (com_jvideodirect) component for Joomla! allows remote attackers t

38RISCO

abrir ↗

Referência

CVE-2018-7691

CVE-2018-7691MEDIUM

MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access

33RISCO

abrir ↗

Referência

CVE-2017-6427

CVE-2017-6427—

A Buffer Overflow was discovered in EvoStream Media Server 1.7.1. A crafted HTTP request with a malicious header will ca

23RISCO

abrir ↗

Referência

CVE-2017-0118

CVE-2017-0118—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server

28RISCO

abrir ↗

Referência

CVE-2009-2362

CVE-2009-2362—

Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.0.0.215 allows remote attackers to execute arbitrary code via a long

23RISCO

abrir ↗

Referência

CVE-2009-2362

CVE-2009-2362—

Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.0.0.215 allows remote attackers to execute arbitrary code via a long

23RISCO

abrir ↗

Referência

CVE-2009-4221

CVE-2009-4221—

SQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

VMware 'IntraProcessLogging.dll' 5.5.3.42958 - Arbitrary Data Write

CVE-2007-4059—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in IntraProcessLogging.dll 5.5.3.42958 in EMC VMware

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple HTTPd 1.41 - '/aux' Remote Denial of Service

CVE-2007-6326—doswindows

Sergey Lyubka Simple HTTPD (shttpd) 1.3 on Windows allows remote attackers to cause a denial of service via a request th

23RISCO

abrir ↗

Referência

Thruk Monitoring Web Interface 3.06 - Path Traversal

CVE-2023-34096MEDIUMwebappsperl

Thruk has Path Traversal Vulnerability in panorama.pm

45RISCO

abrir ↗

Referência

CVE-2015-5353

CVE-2015-5353—

Directory traversal vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to include and execute arbitrary lo

23RISCO

abrir ↗

Referência

CVE-2023-34581

CVE-2023-34581—

Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/

23RISCO

abrir ↗

Referência

CVE-2014-2477

CVE-2014-2477—

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.2

38RISCO

abrir ↗

Referência

CVE-2018-4087

CVE-2018-4087—

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. tvOS before 11.2.5 is affected. watchO

23RISCO

abrir ↗

Referência✓ VexDay Proof

HydraIrc 0.3.164 - Remote Denial of Service

CVE-2008-3578—doswindows

HydraIRC 0.3.164 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and applicat

23RISCO

abrir ↗

Referência

CVE-2017-6192

CVE-2017-6192—

Buffer overflow in APNGDis 2.8 and earlier allows a remote attackers to cause denial of service and possibly execute arb

23RISCO

abrir ↗

Referência

CVE-2017-6192

CVE-2017-6192—

Buffer overflow in APNGDis 2.8 and earlier allows a remote attackers to cause denial of service and possibly execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quantum Game Library 0.7.2c - Remote File Inclusion

CVE-2008-1069—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Quantum Game Library 0.7.2c allow remote attackers to execute arbi

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.