Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.589exploits catalogados

34.508CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8.216Nuclei 4.223Metasploit 3.464✓ só verificadosrecentes populares risco

21.554 exploits

Referência✓ VexDay Proof

SyndeoCMS 2.6.0 - Local File Inclusion / Cross-Site Scripting

CVE-2008-5272—webappsphp

Multiple directory traversal vulnerabilities in Fred Stuurman SyndeoCMS 2.6.0 allow remote authenticated users to read a

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS 2.3.1 - Multiple Local File Inclusions

CVE-2008-6884—webappsphp

Multiple directory traversal vulnerabilities in XOOPS 2.3.1, when register_globals is enabled, allow remote attackers to

23RISCO

abrir ↗

Referência

CVE-2015-4665

CVE-2015-4665—

Cross-site scripting (XSS) vulnerability in ajax_cmd.php in Xceedium Xsuite 2.4.4.1 and earlier allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2015-4665

CVE-2015-4665—

Cross-site scripting (XSS) vulnerability in ajax_cmd.php in Xceedium Xsuite 2.4.4.1 and earlier allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2018-5359

CVE-2018-5359—

The server in Flexense SysGauge 3.6.18 operating on port 9221 can be exploited remotely with the attacker gaining system

23RISCO

abrir ↗

Referência

CVE-2018-5359

CVE-2018-5359—

The server in Flexense SysGauge 3.6.18 operating on port 9221 can be exploited remotely with the attacker gaining system

23RISCO

abrir ↗

Referência

CVE-2009-2564

CVE-2009-2564—

NOS Microsystems getPlus Download Manager, as used in Adobe Reader 1.6.2.36 and possibly other versions, Corel getPlus D

23RISCO

abrir ↗

Referência

Tatsu 3.3.11 - Unauthenticated RCE

CVE-2021-25094—webappsphp

Tatsu < 3.3.12 - Unauthenticated RCE

60RISCO

abrir ↗

Referência

CVE-2021-25155

CVE-2021-25155—

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in v

28RISCO

abrir ↗

Referência

CVE-2013-4091

CVE-2013-4091—

The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 does not have an off autocom

23RISCO

abrir ↗

Referência

CVE-2007-4734

CVE-2007-4734—

Buffer overflow in Ots Labs OTSTurntables 1.00 allows user-assisted remote attackers to execute arbitrary code via a lon

23RISCO

abrir ↗

Referência

CVE-2025-15500

CVE-2025-15500CRITICAL

Sangfor Operation and Maintenance Management System HTTP POST Request getHis os command injection

48RISCO

abrir ↗

Referência

CVE-2017-13056

CVE-2017-13056—

The launchURL function in PDF-XChange Viewer 2.5 (Build 314.0) might allow remote attackers to execute arbitrary code vi

23RISCO

abrir ↗

Referência

CVE-2009-4836

CVE-2009-4836—

Eval injection vulnerability in system/services/init.php in Movie PHP Script 2.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2017-0167

CVE-2017-0167—

An information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and W

23RISCO

abrir ↗

Referência

CVE-2009-4668

CVE-2009-4668—

Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2009-2896

CVE-2009-2896—

Buffer overflow in KMplayer 2.9.4.1433 and earlier allows remote attackers to cause a denial of service (application cra

23RISCO

abrir ↗

Referência

CVE-2010-2440

CVE-2010-2440—

Stack-based buffer overflow in st-wizard.exe in Subtitle Translation Wizard 3.0 allows user-assisted remote attackers to

23RISCO

abrir ↗

Referência

CVE-2010-2331

CVE-2010-2331—

Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to execute arbitrary code via a

23RISCO

abrir ↗

Referência

CVE-2006-7127

CVE-2006-7127—

Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2010-1049

CVE-2010-1049—

Multiple SQL injection vulnerabilities in Uiga Business Portal allow remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2015-5529

CVE-2015-5529—

Multiple cross-site scripting (XSS) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to injec

23RISCO

abrir ↗

Referência

CVE-2010-1050

CVE-2010-1050—

SQL injection vulnerability in index.php in AudiStat 1.3 allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência✓ VexDay Proof

OtsTurntables 1.00 - '.m3u' Local Buffer Overflow

CVE-2007-4734—localwindows

Buffer overflow in Ots Labs OTSTurntables 1.00 allows user-assisted remote attackers to execute arbitrary code via a lon

23RISCO

abrir ↗

Referência✓ VexDay Proof

Firefly Media Server 0.2.4 - Remote Denial of Service

CVE-2007-5824—doslinux

webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service (

23RISCO

abrir ↗

Referência✓ VexDay Proof

DesignWorks Professional 4.3.1 - '.CCT' File Local Stack Buffer Overflow (PoC)

CVE-2008-6363—doswindows

Stack-based buffer overflow in DesignWorks Professional 4.3.1 and 5.0.7 allows remote attackers to execute arbitrary cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

MW6 Barcode - ActiveX 'Barcode.dll' Remote Heap Overflow (PoC)

CVE-2009-0298—doswindows

Heap-based buffer overflow in MW6 Technologies Barcode ActiveX control (Barcode.MW6Barcode.1, Barcode.dll) 3.0.0.1 allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

Elecard AVC HD player - '.m3u' / '.xpl' Local Stack Overflow (PoC)

CVE-2009-0443—doswindows

Stack-based buffer overflow in Elecard AVC HD PLAYER 5.5.90116 allows remote attackers to execute arbitrary code via an

23RISCO

abrir ↗

Referência

CVE-2015-5529

CVE-2015-5529—

Multiple cross-site scripting (XSS) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to injec

23RISCO

abrir ↗

Referência

CVE-2019-25707

CVE-2019-25707HIGH

eBrigade ERP 4.5 SQL Injection via pdf.php

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.