Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados
35.420CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentespopularesrisco
22.266 exploits
Referência
CVE-2014-2364
CVE-2014-2364—
Advantech WebAccess Stack-Based Buffer Overflow
68RISCO
abrir ↗
Referência
CVE-2014-2399
CVE-2014-2399—
Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attacker
23RISCO
abrir ↗
Referência
CVE-2025-71326
CVE-2025-71326HIGH
AVAST Antivirus 25.11 Unquoted Service Path Privilege Escalation
41RISCO
abrir ↗
Referência✓ VexDay Proof
F-PROT AntiVirus 6.2.1.4252 - Malformed Archive Infinite Loop Denial of Service
CVE-2008-3447—dosmultiple
The scanning engine in F-Prot Antivirus 6.2.1 4252 allows remote attackers to cause a denial of service (infinite loop)
23RISCO
abrir ↗
Referência
CVE-2014-2424
CVE-2014-2424—
Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote
50RISCO
abrir ↗
Referência✓ VexDay Proof
eNdonesia 8.4 (Calendar Module) - SQL Injection
CVE-2008-3452—webappsphp
SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗
Referência
CVE-2019-13272
CVE-2019-13272HIGHsob ataque
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce
98RISCO
abrir ↗
Referência
CVE-2019-13272
CVE-2019-13272HIGHsob ataque
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce
98RISCO
abrir ↗
Referência✓ VexDay Proof
PHP Hosting Directory 2.0 - Insecure Cookie Handling
CVE-2008-3454—webappsphp
JnSHosts PHP Hosting Directory 2.0 allows remote attackers to bypass authentication and gain administrative access by se
23RISCO
abrir ↗
Referência
CVE-2019-13272
CVE-2019-13272HIGHsob ataque
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce
98RISCO
abrir ↗
Referência✓ VexDay Proof
PHP Hosting Directory 2.0 - Remote File Inclusion
CVE-2008-3455—webappsphp
PHP remote file inclusion vulnerability in include/admin.php in JnSHosts PHP Hosting Directory 2.0 allows remote attacke
23RISCO
abrir ↗
Referência
CVE-2026-46331
CVE-2026-46331HIGH
net/sched: fix pedit partial COW leading to page cache corruption
41RISCO
abrir ↗
Referência
CVE-2026-12210
CVE-2026-12210MEDIUM
universal-tool-calling-protocol python-utcp utcp-gql/utcp-websocket server-side request forgery
33RISCO
abrir ↗
Referência
CVE-2026-12209
CVE-2026-12209MEDIUM
RubyLouvre avalon Template Filter index.js prototype pollution
33RISCO
abrir ↗
Referência
CVE-2019-13272
CVE-2019-13272HIGHsob ataque
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce
98RISCO
abrir ↗
Referência✓ VexDay Proof
Anzio Web Print Object 3.2.30 - ActiveX Buffer Overflow
CVE-2008-3480—remotewindows
Stack-based buffer overflow in the Anzio Web Print Object (WePO) ActiveX control 3.2.19 and 3.2.24, as used in Anzio Pri
28RISCO
abrir ↗
Referência
CVE-2019-13272
CVE-2019-13272HIGHsob ataque
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce
98RISCO
abrir ↗
Referência✓ VexDay Proof
eStoreAff 0.1 - 'cid' SQL Injection
CVE-2008-3484—webappsphp
SQL injection vulnerability in eStoreAff 0.1 allows remote attackers to execute arbitrary SQL commands via the cid param
23RISCO
abrir ↗
Referência
CVE-2024-58349
CVE-2024-58349CRITICAL
WordPress Theme Travelscape 1.0.3 Arbitrary File Upload
48RISCO
abrir ↗
Referência
CVE-2024-58348
CVE-2024-58348CRITICAL
WordPress Background Image Cropper 1.2 Remote Code Execution
48RISCO
abrir ↗
Referência
CVE-2023-54352
CVE-2023-54352CRITICAL
WordPress Seotheme Remote Code Execution Unauthenticated
48RISCO
abrir ↗
Referência
CVE-2014-3704
CVE-2014-3704—
The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct
60RISCO
abrir ↗
Referência
CVE-2019-1652
CVE-2019-1652HIGHsob ataque
Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability
100RISCO
abrir ↗
Referência
CVE-2019-1652
CVE-2019-1652HIGHsob ataque
Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability
100RISCO
abrir ↗
Referência
CVE-2019-1652
CVE-2019-1652HIGHsob ataque
Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability
100RISCO
abrir ↗
Referência
CVE-2019-1652
CVE-2019-1652HIGHsob ataque
Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability
100RISCO
abrir ↗
Referência
CVE-2019-1653
CVE-2019-1653HIGHsob ataque
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
100RISCO
abrir ↗
Referência
CVE-2019-1653
CVE-2019-1653HIGHsob ataque
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
100RISCO
abrir ↗
Referência
CVE-2019-1653
CVE-2019-1653HIGHsob ataque
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
100RISCO
abrir ↗
Referência
CVE-2011-2841
CVE-2011-2841—
Google Chrome before 14.0.835.163 does not properly perform garbage collection during the processing of PDF documents, w
23RISCO
abrir ↗
← anteriorpágina 454 / 743próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.