Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.313exploits catalogados

34.834CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentes populares risco

21.797 exploits

Referência✓ VexDay Proof

News Rover 12.1 Rev 1 - Stack Overflow (1)

CVE-2007-1041—localwindows

Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2023-5204

CVE-2023-5204CRITICAL

AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response

63RISCO

abrir ↗

Referência

CVE-2013-4093

CVE-2013-4093—

The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote attackers to o

23RISCO

abrir ↗

Referência

CVE-2016-1013

CVE-2016-1013—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows

28RISCO

abrir ↗

Referência

CVE-2016-0075

CVE-2016-0075—

The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 160

23RISCO

abrir ↗

Referência

CVE-2016-5309

CVE-2016-5309—

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP);

23RISCO

abrir ↗

Referência

CVE-2010-2329

CVE-2010-2329—

Buffer overflow in Rosoft Audio Converter 4.4.4 allows remote attackers to execute arbitrary code via a long playlist en

23RISCO

abrir ↗

Referência

CVE-2010-2329

CVE-2010-2329—

Buffer overflow in Rosoft Audio Converter 4.4.4 allows remote attackers to execute arbitrary code via a long playlist en

23RISCO

abrir ↗

Referência

CVE-2025-34102

CVE-2025-34102CRITICAL

CryptoLog Unauthenticated RCE via SQL Injection and Command Injection

63RISCO

abrir ↗

Referência

CVE-2016-7387

CVE-2016-7387—

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3

23RISCO

abrir ↗

Referência

CVE-2025-34102

CVE-2025-34102CRITICAL

CryptoLog Unauthenticated RCE via SQL Injection and Command Injection

63RISCO

abrir ↗

Referência

CVE-2025-34102

CVE-2025-34102CRITICAL

CryptoLog Unauthenticated RCE via SQL Injection and Command Injection

63RISCO

abrir ↗

Referência

CVE-2017-2454

CVE-2017-2454—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef

23RISCO

abrir ↗

Referência

CVE-2017-2455

CVE-2017-2455—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef

23RISCO

abrir ↗

Referência

CVE-2020-2229

CVE-2020-2229—

Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the tooltip content of help icons, resulting in a sto

23RISCO

abrir ↗

Referência

CVE-2014-8657

CVE-2014-8657—

The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows r

23RISCO

abrir ↗

Referência

CVE-2009-4755

CVE-2009-4755—

Multiple stack-based buffer overflows in Mercury Audio Player 1.21 allow remote attackers to execute arbitrary code via

23RISCO

abrir ↗

Referência

CVE-2009-4755

CVE-2009-4755—

Multiple stack-based buffer overflows in Mercury Audio Player 1.21 allow remote attackers to execute arbitrary code via

23RISCO

abrir ↗

Referência

CVE-2016-7644

CVE-2016-7644—

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchO

23RISCO

abrir ↗

Referência

CVE-2026-11434

CVE-2026-11434MEDIUM

FluentCMS Blocks Plugin blocks cross site scripting

33RISCO

abrir ↗

Referência

CVE-2015-4040

CVE-2015-4040—

Directory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and Enterprise Manager 3.0.0 t

23RISCO

abrir ↗

Referência

CVE-2012-4334

CVE-2012-4334—

The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2) STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i v

23RISCO

abrir ↗

Referência✓ VexDay Proof

GOM Player 2.1.16.6134 - Subtitle Local Buffer Overflow (PoC)

CVE-2009-1497—doswindows

Stack-based buffer overflow in srt2smi.exe in Gretech Online Movie Player (GOM Player) 2.1.16.4635 allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2014-6308

CVE-2014-6308—

Directory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read arbitrary files via a .. (dot

43RISCO

abrir ↗

Referência✓ VexDay Proof

WebED 0.0.9 - 'index.php' Remote File Disclosure

CVE-2007-6213—webappsphp

Multiple directory traversal vulnerabilities in mod/chat/index.php in WebED 0.0.9 allow remote attackers to read arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Friendly Technologies - Read/Write Registry/Read Files

CVE-2008-4050—remotewindows

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remot

23RISCO

abrir ↗

Referência

CVE-2010-0691

CVE-2010-0691—

SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2015-7257

CVE-2015-7257—

ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrato

23RISCO

abrir ↗

Referência

CVE-2013-6234

CVE-2013-6234—

Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users

23RISCO

abrir ↗

Referência

CVE-2021-4436

CVE-2021-4436CRITICAL

3DPrint Lite < 1.9.1.5 - Unauthenticated Arbitrary File Upload

63RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.