Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.533exploits catalogados

35.607CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8.663Nuclei 4.287Metasploit 3.474✓ só verificadosrecentes populares risco

22.367 exploits

Referência

CVE-2014-8799

CVE-2014-8799—

Directory traversal vulnerability in the dp_img_resize function in php/dp-functions.php in the DukaPress plugin before 2

50RISCO

abrir ↗

Referência

CVE-2015-7645

CVE-2015-7645HIGHsob ataqueransomware

Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535

83RISCO

abrir ↗

Referência

CVE-2015-7645

CVE-2015-7645HIGHsob ataqueransomware

Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535

83RISCO

abrir ↗

Referência✓ VexDay Proof

pastelcms 0.8.0 - Local File Inclusion / SQL Injection

CVE-2009-1404—webappsphp

SQL injection vulnerability in admin.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled, allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2018-8355

CVE-2018-8355—

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft brow

35RISCO

abrir ↗

Referência

CVE-2017-12477

CVE-2017-12477—

It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xin

50RISCO

abrir ↗

Referência✓ VexDay Proof

PHPVID 0.9.9 - 'categories_type.php' SQL Injection

CVE-2007-3610—webappsphp

SQL injection vulnerability in categories_type.php in phpVID 0.9.9 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2017-6077

CVE-2017-6077CRITICALsob ataque

ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitra

90RISCO

abrir ↗

Referência

CVE-2009-3023

CVE-2009-3023—

Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authen

60RISCO

abrir ↗

Referência

CVE-2011-0654

CVE-2011-0654—

Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in

50RISCO

abrir ↗

Referência

CVE-2017-11809

CVE-2017-11809—

ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker

35RISCO

abrir ↗

Referência

CVE-2008-5180

CVE-2008-5180MEDIUM

Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of ser

45RISCO

abrir ↗

Referência

CVE-2016-3088

CVE-2016-3088CRITICALsob ataque

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr

100RISCO

abrir ↗

Referência

CVE-2013-7409

CVE-2013-7409—

Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possib

50RISCO

abrir ↗

Referência✓ VexDay Proof

TotalCalendar 2.4 - 'Include' Local File Inclusion

CVE-2009-1406—webappsphp

Directory traversal vulnerability in cms_detect.php in TotalCalendar 2.4 allows remote attackers to include and execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

SerWeb 0.9.4 - 'load_lang.php' Remote File Inclusion

CVE-2007-3358—webappsphp

PHP remote file inclusion vulnerability in html/load_lang.php in SerWeb 0.9.6 and earlier allows remote attackers to exe

35RISCO

abrir ↗

Referência

CVE-2025-2747

CVE-2025-2747CRITICALsob ataque

Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass

100RISCO

abrir ↗

Referência

CVE-2013-7409

CVE-2013-7409—

Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possib

50RISCO

abrir ↗

Referência

CVE-2013-7409

CVE-2013-7409—

Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possib

50RISCO

abrir ↗

Referência

CVE-2012-6430

CVE-2012-6430—

Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded befor

23RISCO

abrir ↗

Referência

CVE-2025-2747

CVE-2025-2747CRITICALsob ataque

Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass

100RISCO

abrir ↗

Referência✓ VexDay Proof

e107 < 0.7.15 - 'extended_user_fields' Blind SQL Injection

CVE-2009-1409—webappsphp

SQL injection vulnerability in usersettings.php in e107 0.7.15 and earlier, when "Extended User Fields" is enabled and m

23RISCO

abrir ↗

Referência

CVE-2018-0775

CVE-2018-0775—

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due t

35RISCO

abrir ↗

Referência

CVE-2018-0774

CVE-2018-0774—

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due t

35RISCO

abrir ↗

Referência

CVE-2019-18426

CVE-2019-18426HIGHsob ataque

A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.

83RISCO

abrir ↗

Referência

CVE-2009-3052

CVE-2009-3052—

SQL injection vulnerability in root/includes/prime_quick_style.php in the Prime Quick Style addon before 1.2.3 for phpBB

23RISCO

abrir ↗

Referência

CVE-2010-1554

CVE-2010-1554—

Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows r

50RISCO

abrir ↗

Referência

CVE-2016-6662

CVE-2016-6662—

Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.2

35RISCO

abrir ↗

Referência✓ VexDay Proof

Quick.CMS.Lite 0.5 - 'id' SQL Injection

CVE-2009-1410—webappsphp

SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2009-3058

CVE-2009-3058—

Stack-based buffer overflow in akPlayer 1.9.0 allows remote attackers to execute arbitrary code via a long string in a .

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.