Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

19.978 exploits

Referência

CVE-2019-18634

CVE-2019-18634—

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the

28RISCO

abrir ↗

Referência

CVE-2021-26599

CVE-2021-26599—

ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection.

43RISCO

abrir ↗

Referência

CVE-2020-6507

CVE-2020-6507—

Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap

28RISCO

abrir ↗

Referência

CVE-2020-6507

CVE-2020-6507—

Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap

28RISCO

abrir ↗

Referência

CVE-2018-9021

CVE-2018-9021—

An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to exec

28RISCO

abrir ↗

Referência

CVE-2011-1568

CVE-2011-1568—

Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11

28RISCO

abrir ↗

Referência

CVE-2017-8636

CVE-2017-8636—

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve

45RISCO

abrir ↗

Referência

cTorrent/DTorrent - '.torrent' Local Buffer Overflow

CVE-2009-1759—

Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent)

28RISCO

abrir ↗

Referência

CVE-2017-7285

CVE-2017-7285—

A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remot

28RISCO

abrir ↗

Referência

CVE-2017-7997

CVE-2017-7997—

Multiple SQL injection vulnerabilities in Gespage before 7.4.9 allow remote attackers to execute arbitrary SQL commands

28RISCO

abrir ↗

Referência

CVE-2016-3116

CVE-2016-3116—

CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to bypass intended shell-c

28RISCO

abrir ↗

Referência

CVE-2018-15139

CVE-2018-15139—

Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote

28RISCO

abrir ↗

Referência

CVE-2018-15139

CVE-2018-15139—

Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote

28RISCO

abrir ↗

Referência

CVE-2017-8740

CVE-2017-8740—

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current u

45RISCO

abrir ↗

Referência

CVE-2017-8636

CVE-2017-8636—

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve

45RISCO

abrir ↗

Referência

CVE-2017-8636

CVE-2017-8636—

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve

45RISCO

abrir ↗

Referência

CVE-2017-8636

CVE-2017-8636—

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve

45RISCO

abrir ↗

Referência

CVE-2019-2215

CVE-2019-2215HIGHsob ataque

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RISCO

abrir ↗

Referência

CVE-2019-2215

CVE-2019-2215HIGHsob ataque

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RISCO

abrir ↗

Referência

CVE-2019-2215

CVE-2019-2215HIGHsob ataque

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RISCO

abrir ↗

Referência

CVE-2019-19208

CVE-2019-19208—

Codiad Web IDE through 2.8.4 allows PHP Code injection.

28RISCO

abrir ↗

Referência

Codiad 2.8.4 - Remote Code Execution (Authenticated) (2)

CVE-2019-19208—

Codiad Web IDE through 2.8.4 allows PHP Code injection.

28RISCO

abrir ↗

Referência

CVE-2023-22809

CVE-2023-22809HIGH

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen

68RISCO

abrir ↗

Referência

CVE-2025-9501

CVE-2025-9501CRITICAL

W3 Total Cache < 2.8.13 - Unauthenticated Command Injection

53RISCO

abrir ↗

Referência

CVE-2018-20556

CVE-2018-20556—

SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary

28RISCO

abrir ↗

Referência

CVE-2018-20556

CVE-2018-20556—

SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary

28RISCO

abrir ↗

Referência

CVE-2019-1322

CVE-2019-1322HIGHsob ataqueransomware

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft W

91RISCO

abrir ↗

Referência

CVE-2017-8683

CVE-2017-8683—

Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold a

28RISCO

abrir ↗

Referência

CVE-2017-14627

CVE-2017-14627—

Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) au

43RISCO

abrir ↗

Referência

CVE-2017-14627

CVE-2017-14627—

Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) au

43RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.