Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.533exploits catalogados

35.607CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8.663Nuclei 4.287Metasploit 3.474✓ só verificadosrecentes populares risco

22.407 exploits

Referência

CVE-2017-17932

CVE-2017-17932—

A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow

50RISCO

abrir ↗

Referência

CVE-2017-17932

CVE-2017-17932—

A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow

50RISCO

abrir ↗

Referência

CVE-2017-17932

CVE-2017-17932—

A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow

50RISCO

abrir ↗

Referência

CVE-2013-0742

CVE-2013-0742—

Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial

23RISCO

abrir ↗

Referência

CVE-2010-2343

CVE-2010-2343—

Stack-based buffer overflow in D.R. Software Audio Converter 8.1, 2007, and 8.05 allows remote attackers to execute arbi

50RISCO

abrir ↗

Referência

CVE-2018-17379

CVE-2018-17379—

SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filter_order_Dir or filter_order paramete

23RISCO

abrir ↗

Referência

CVE-2018-17379

CVE-2018-17379—

SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filter_order_Dir or filter_order paramete

23RISCO

abrir ↗

Referência✓ VexDay Proof

SimpCMS - 'keyword' SQL Injection

CVE-2007-4953—webappsphp

SQL injection vulnerability in index.php in SimpCMS allows remote attackers to execute arbitrary SQL commands via the ke

23RISCO

abrir ↗

Referência

CVE-2016-0710

CVE-2016-0710—

Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attacker

50RISCO

abrir ↗

Referência

CVE-2019-8953

CVE-2019-8953—

The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, re

35RISCO

abrir ↗

Referência

CVE-2019-13272

CVE-2019-13272HIGHsob ataque

In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce

98RISCO

abrir ↗

Referência

CVE-2017-1000486

CVE-2017-1000486CRITICALsob ataque

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

100RISCO

abrir ↗

Referência

CVE-2022-31470

CVE-2022-31470—

An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12

50RISCO

abrir ↗

Referência

CVE-2009-3446

CVE-2009-3446—

SQL injection vulnerability in the MyRemote Video Gallery (com_mytube) component 1.0 Beta for Joomla! allows remote atta

23RISCO

abrir ↗

Referência

CVE-2010-1622

CVE-2010-1622—

SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote at

35RISCO

abrir ↗

Referência

CVE-2019-13068

CVE-2019-13068—

public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the

35RISCO

abrir ↗

Referência

CVE-2011-4075

CVE-2011-4075—

The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary

50RISCO

abrir ↗

Referência

CVE-2025-40552

CVE-2025-40552CRITICAL

SolarWinds Web Help Desk Authentication Bypass Vulnerability

75RISCO

abrir ↗

Referência

CVE-2011-0522

CVE-2011-0522—

The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/code

35RISCO

abrir ↗

Referência

CVE-2014-9308

CVE-2014-9308—

Unrestricted file upload vulnerability in inc/amfphp/administration/banneruploaderscript.php in the WP EasyCart (aka Wor

50RISCO

abrir ↗

Referência

CVE-2014-9308

CVE-2014-9308—

Unrestricted file upload vulnerability in inc/amfphp/administration/banneruploaderscript.php in the WP EasyCart (aka Wor

50RISCO

abrir ↗

Referência

CVE-2013-1408

CVE-2013-1408—

Multiple SQL injection vulnerabilities in the Wysija Newsletters plugin before 2.2.1 for WordPress allow remote authenti

23RISCO

abrir ↗

Referência

CVE-2017-8731

CVE-2017-8731—

Microsoft Edge in Microsoft Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the

35RISCO

abrir ↗

Referência

CVE-2016-2388

CVE-2016-2388MEDIUMsob ataque

The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user infor

75RISCO

abrir ↗

Referência

CVE-2016-2388

CVE-2016-2388MEDIUMsob ataque

The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user infor

75RISCO

abrir ↗

Referência

CVE-2016-2388

CVE-2016-2388MEDIUMsob ataque

The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user infor

75RISCO

abrir ↗

Referência

CVE-2016-2388

CVE-2016-2388MEDIUMsob ataque

The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user infor

75RISCO

abrir ↗

Referência

CVE-2016-8740

CVE-2016-8740—

The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2

45RISCO

abrir ↗

Referência

CVE-2009-2638

CVE-2009-2638—

SQL injection vulnerability in the AkoBook (com_akobook) component 2.3 for Joomla! allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

eLitius 1.0 - Remote Command Execution

CVE-2009-1659—webappsphp

Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote attackers to bypass intende

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.