Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.151exploits catalogados

35.370CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8.617Nuclei 4.257Metasploit 3.474✓ só verificadosrecentes populares risco

22.233 exploits

Referência

CVE-2015-1515

CVE-2015-1515—

The dwall.sys driver in SoftSphere DefenseWall Personal Firewall 3.24 allows local users to write data to arbitrary memo

23RISCO

abrir ↗

Referência

CVE-2011-5039

CVE-2011-5039—

Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência

CVE-2020-0618

CVE-2020-0618CRITICALsob ataque

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page

100RISCO

abrir ↗

Referência

CVE-2020-0646

CVE-2020-0646CRITICALsob ataque

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.N

100RISCO

abrir ↗

Referência

CVE-2020-0674

CVE-2020-0674HIGHsob ataque

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

93RISCO

abrir ↗

Referência

CVE-2020-0688

CVE-2020-0688HIGHsob ataqueransomware

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o

100RISCO

abrir ↗

Referência

CVE-2020-0688

CVE-2020-0688HIGHsob ataqueransomware

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o

100RISCO

abrir ↗

Referência

CVE-2011-5103

CVE-2011-5103—

SQL injection vulnerability in Alurian Prismotube PHP Video Script allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2011-5110

CVE-2011-5110—

Multiple SQL injection vulnerabilities in Blogs Manager 1.101 and earlier allow remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência

CVE-2011-5130

CVE-2011-5130—

dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers t

50RISCO

abrir ↗

Referência

CVE-2011-5135

CVE-2011-5135—

Multiple SQL injection vulnerabilities in the save_connection function in lib/lib.iotask.php in the iotask module in Doc

23RISCO

abrir ↗

Referência✓ VexDay Proof

VUPlayer 2.49 - '.asx' HREF Local Buffer Overflow (2)

CVE-2009-0174—localwindows

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in th

28RISCO

abrir ↗

Referência

CVE-2020-11108

CVE-2020-11108—

The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abus

60RISCO

abrir ↗

Referência

CVE-2020-11108

CVE-2020-11108—

The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abus

60RISCO

abrir ↗

Referência✓ VexDay Proof

LimeSurvey 4.1.11 - 'File Manager' Path Traversal

CVE-2020-11455—webappsphp

LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileM

60RISCO

abrir ↗

Referência

LimeSurvey 4.1.11 - 'Survey Groups' Persistent Cross-Site Scripting

CVE-2020-11456—webappsphp

LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and applicati

45RISCO

abrir ↗

Referência

CVE-2020-1147

CVE-2020-1147HIGHsob ataque

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the softwar

100RISCO

abrir ↗

Referência

CVE-2026-16228

CVE-2026-16228MEDIUM

SourceCodester Class and Exam Timetabling System edit_schoolyr.php sql injection

33RISCO

abrir ↗

Referência

CVE-2015-1635

CVE-2015-1635CRITICALsob ataque

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an

100RISCO

abrir ↗

Referência

CVE-2015-1635

CVE-2015-1635CRITICALsob ataque

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an

100RISCO

abrir ↗

Referência

CVE-2015-1635

CVE-2015-1635CRITICALsob ataque

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an

100RISCO

abrir ↗

Referência

CVE-2026-8733

CVE-2026-8733MEDIUM

Investintech SlimPDFReader SlimPDFReader.exe sub_3B4610 stack-based overflow

33RISCO

abrir ↗

Referência✓ VexDay Proof

SkaLinks 1.5 - Authentication Bypass

CVE-2009-0451—webappsphp

SQL injection vulnerability in Skalfa SkaLinks 1.5 allows remote attackers to execute arbitrary SQL commands via the Adm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Online Grades 3.2.4 - Authentication Bypass

CVE-2009-0452—webappsphp

Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magic_quotes_gpc is disabled, a

23RISCO

abrir ↗

Referência

CVE-2026-8731

CVE-2026-8731MEDIUM

Open5GS NRF client.c ogs_sbi_client_add denial of service

33RISCO

abrir ↗

Referência

CVE-2026-8730

CVE-2026-8730MEDIUM

Open5GS NRF context.c ogs_sbi_nf_instance_set_id denial of service

33RISCO

abrir ↗

Referência

CVE-2026-8728

CVE-2026-8728MEDIUM

Open5GS NRF conv.c ogs_sbi_discovery_option_parse_plmn_list denial of service

33RISCO

abrir ↗

Referência

CVE-2011-5166

CVE-2011-5166—

Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string

23RISCO

abrir ↗

Referência

CVE-2026-8725

CVE-2026-8725MEDIUM

CoreWorxLab CAAL test-hass Endpoint webhooks.py server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-8724

CVE-2026-8724MEDIUM

Dataease Data Dashboard SqlparserUtils.java SqlparserUtils.transFilter sql injection

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.