Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.324exploits catalogados
36.054CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.458Referência 22.721GitHub PoC 14.477VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentespopularesrisco
22.697 exploits
Referência
CVE-2012-6518
CVE-2012-6518—
Cross-site request forgery (CSRF) vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authenti
23RISCO
abrir ↗
Referência
CVE-2010-0365
CVE-2010-0365—
Cross-site scripting (XSS) vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows re
23RISCO
abrir ↗
Referência
CVE-2010-2715
CVE-2010-2715—
Cross-site scripting (XSS) vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arbi
23RISCO
abrir ↗
Referência
CVE-2010-3895
CVE-2010-3895—
esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges by specifying an arbitr
23RISCO
abrir ↗
Referência
CVE-2013-2639
CVE-2013-2639—
Cross-site scripting (XSS) vulnerability in CTERA Cloud Storage OS before 3.2.29.0, 3.2.42.0, and earlier allows remote
23RISCO
abrir ↗
Referência
CVE-2010-3904
CVE-2010-3904HIGHsob ataque
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the
91RISCO
abrir ↗
Referência
CVE-2014-9516
CVE-2014-9516—
Cross-site scripting (XSS) vulnerability in Social Microblogging PRO 1.5 allows remote attackers to inject arbitrary web
23RISCO
abrir ↗
Referência
CVE-2014-100013
CVE-2014-100013—
Multiple cross-site scripting (XSS) vulnerabilities in clientResponse 4.1 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗
Referência✓ VexDay Proof
ASP Stats Generator 2.1.1 - SQL Injection
CVE-2006-3184—webappsasp
Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to
23RISCO
abrir ↗
Referência
CVE-2015-7890
CVE-2015-7890—
Multiple buffer overflows in the esa_write function in /dev/seirenin the Exynos Seiren Audio driver, as used in Samsung
23RISCO
abrir ↗
Referência
CVE-2012-6518
CVE-2012-6518—
Cross-site request forgery (CSRF) vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authenti
23RISCO
abrir ↗
Referência
CVE-2025-34149
CVE-2025-34149CRITICAL
Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WPA2 Key
48RISCO
abrir ↗
Referência
CVE-2023-54339
CVE-2023-54339CRITICAL
Webgrind 1.1 - Remote Command Execution (RCE) via dataFile Parameter
48RISCO
abrir ↗
Referência
CVE-2017-3587
CVE-2017-3587—
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported ve
23RISCO
abrir ↗
Referência
CVE-2015-5602
CVE-2015-5602—
sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is d
23RISCO
abrir ↗
Referência
CVE-2008-6386
CVE-2008-6386—
Cross-site scripting (XSS) vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary we
23RISCO
abrir ↗
Referência
CVE-2014-9632
CVE-2014-9632—
The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protec
23RISCO
abrir ↗
Referência
CVE-2014-9632
CVE-2014-9632—
The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protec
23RISCO
abrir ↗
Referência
CVE-2025-34433
CVE-2025-34433CRITICAL
AVideo < 20.1 Unauthenticated RCE via Predictable Installation Salt
63RISCO
abrir ↗
Referência
CVE-2013-6922
CVE-2013-6922—
Multiple cross-site request forgery (CSRF) vulnerabilities in the Seagate BlackArmor NAS 220 devices with firmware sg200
23RISCO
abrir ↗
Referência
CVE-2025-10432
CVE-2025-10432CRITICAL
Tenda AC1206 HTTP Request AdvSetMacMtuWa check_param_changed stack-based overflow
48RISCO
abrir ↗
Referência
CVE-2010-2439
CVE-2010-2439—
Stack-based buffer overflow in MoreAmp allows remote attackers to execute arbitrary code via a long line in a song list
23RISCO
abrir ↗
Referência
CVE-2015-7894
CVE-2015-7894—
The DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number LRX22G.G925VVRU1AOE2 allow
23RISCO
abrir ↗
Referência
CVE-2009-2594
CVE-2009-2594—
Cross-site scripting (XSS) vulnerability in censura.php in Censura 1.16.04 allows remote attackers to inject arbitrary w
23RISCO
abrir ↗
Referência
CVE-2009-3751
CVE-2009-3751—
Cross-site scripting (XSS) vulnerability in home.php in Opial 1.0 allows remote attackers to inject arbitrary web script
23RISCO
abrir ↗
Referência
CVE-2008-4349
CVE-2008-4349—
Multiple cross-site scripting (XSS) vulnerabilities in news.php in s0nic Paranews 3.4 allow remote attackers to inject a
23RISCO
abrir ↗
Referência
CVE-2010-1746
CVE-2010-1746—
Multiple cross-site scripting (XSS) vulnerabilities in the Table JX (com_grid) component for Joomla! allow remote attack
23RISCO
abrir ↗
Referência
CVE-2010-3972
CVE-2010-3972—
Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0
60RISCO
abrir ↗
Referência
CVE-2008-6385
CVE-2008-6385—
Cross-site scripting (XSS) vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to inject arbitra
23RISCO
abrir ↗
Referência
CVE-2012-1603
CVE-2012-1603—
Multiple SQL injection vulnerabilities in ajaxserver.php in NextBBS 0.6 allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗
← anteriorpágina 688 / 757próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.