Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.526exploits catalogados

34.478CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.534GitHub PoC 13.654VulnCheck XDB 8.213Nuclei 4.218Metasploit 3.464✓ só verificadosrecentes populares risco

21.534 exploits

Referência

CVE-2017-13796

CVE-2017-13796—

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud

23RISCO

abrir ↗

Referência

CVE-2017-13783

CVE-2017-13783—

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud

23RISCO

abrir ↗

Referência✓ VexDay Proof

ViPlay3 < 3.00 - '.vpl' Local Stack Overflow (PoC)

CVE-2009-1660—doswindows

Stack-based buffer overflow in URUWorks ViPlay3 3.0 and earlier allows remote attackers to cause a denial of service (cr

23RISCO

abrir ↗

Referência

CVE-2018-6092

CVE-2018-6092—

An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker t

23RISCO

abrir ↗

Referência

CVE-2017-13791

CVE-2017-13791—

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud

23RISCO

abrir ↗

Referência

CVE-2019-13656

CVE-2019-13656CRITICAL

An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.

48RISCO

abrir ↗

Referência

CVE-2019-10887

CVE-2019-10887—

A reflected HTML injection vulnerability on Salicru SLC-20-cube3(5) devices running firmware version cs121-SNMP v4.54.82

23RISCO

abrir ↗

Referência

CVE-2019-10887

CVE-2019-10887—

A reflected HTML injection vulnerability on Salicru SLC-20-cube3(5) devices running firmware version cs121-SNMP v4.54.82

23RISCO

abrir ↗

Referência

CVE-2010-0970

CVE-2010-0970—

SQL injection vulnerability in phpmylogon.php in PhpMyLogon 2 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2010-0972

CVE-2010-0972—

Directory traversal vulnerability in the GCalendar (com_gcalendar) component 2.1.5 for Joomla! allows remote attackers t

43RISCO

abrir ↗

Referência

CVE-2010-0973

CVE-2010-0973—

SQL injection vulnerability in index.php in phppool media Domain Verkaus and Auktions Portal allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2010-2439

CVE-2010-2439—

Stack-based buffer overflow in MoreAmp allows remote attackers to execute arbitrary code via a long line in a song list

23RISCO

abrir ↗

Referência

CVE-2009-3221

CVE-2009-3221—

Stack-based buffer overflow in Audio Lib Player (ALP) allows remote attackers to execute arbitrary code via a long URL i

23RISCO

abrir ↗

Referência

CVE-2020-5509

CVE-2020-5509—

PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile ima

23RISCO

abrir ↗

Referência

CVE-2010-3125

CVE-2010-3125—

Untrusted search path vulnerability in TeamMate Audit Management Software Suite 8.0 patch 2 allows local users, and poss

23RISCO

abrir ↗

Referência

CVE-2025-4094

CVE-2025-4094CRITICAL

Digits < 8.4.6.1 - Auth Bypass via OTP Bruteforcing

53RISCO

abrir ↗

Referência

CVE-2014-3961

CVE-2014-3961—

SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allo

23RISCO

abrir ↗

Referência

CVE-2014-3961

CVE-2014-3961—

SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin Page Flip Image Gallery 0.2.2 - Remote File Disclosure

CVE-2008-5752—webappsphp

Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPress

23RISCO

abrir ↗

Referência✓ VexDay Proof

EasyMail - ActiveX 'emmailstore.dll 6.5.0.3' Remote Buffer Overflow

CVE-2008-6447—remotewindows

Buffer overflow in emmailstore.dll 6.5.0.3 in the QuikSoft EasyMail MailStore ActiveX control allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

MLdonkey 2.9.7 - Arbitrary File Disclosure

CVE-2009-0753—remotemultiple

Absolute path traversal vulnerability in MLDonkey 2.8.4 through 2.9.7 allows remote attackers to read arbitrary files vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Soritong MP3 Player 1.0 - Local Buffer Overflow (SEH)

CVE-2009-1643—localwindows

Stack-based buffer overflow in Sorinara Soritong MP3 Player 1.0 allows remote attackers to execute arbitrary code via a

23RISCO

abrir ↗

Referência

CVE-2022-26982

CVE-2022-26982—

SimpleMachinesForum 2.1.1 and earlier allows remote authenticated administrators to execute arbitrary code by inserting

23RISCO

abrir ↗

Referência

CVE-2021-3394

CVE-2021-3394—

Millennium Millewin (also known as "Cartella clinica") 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder per

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component SMF Forum 1.3.1.3 - Remote File Inclusion

CVE-2006-3773—webappsphp

PHP remote file inclusion vulnerability in smf.php in the SMF-Forum 1.3.1.3 Bridge Component (com_smf) For Joomla! and M

23RISCO

abrir ↗

Referência

CVE-2021-24499

CVE-2021-24499—

Workreap theme < 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution

50RISCO

abrir ↗

Referência

CVE-2012-4751

CVE-2012-4751—

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.15, 3.0.x befor

23RISCO

abrir ↗

Referência

CVE-2013-5692

CVE-2013-5692—

Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated administrators to include and

23RISCO

abrir ↗

Referência

CVE-2009-4964

CVE-2009-4964—

Stack-based buffer overflow in KSP 2006 FINAL allows remote attackers to execute arbitrary code via a long string in a .

23RISCO

abrir ↗

Referência

CVE-2009-3338

CVE-2009-3338—

Stack-based buffer overflow in EffectMatrix (E.M.) Magic Morph 1.95b allows remote attackers to execute arbitrary code v

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.