Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.523 exploits

Referência

CVE-2021-42013

CVE-2021-42013CRITICALsob ataqueransomware

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

abrir ↗

Referência

CVE-2026-9575

CVE-2026-9575MEDIUM

itsourcecode Student Transcript Processing System index.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9574

CVE-2026-9574MEDIUM

itsourcecode Student Transcript Processing System trans.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9573

CVE-2026-9573MEDIUM

itsourcecode Student Transcript Processing System index.php sql injection

33RISCO

abrir ↗

Referência

CVE-2013-4692

CVE-2013-4692—

Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS

23RISCO

abrir ↗

Referência

CVE-2013-4694

CVE-2013-4694—

Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial

28RISCO

abrir ↗

Referência

CVE-2013-4863

CVE-2013-4863—

The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute a

28RISCO

abrir ↗

Referência

CVE-2026-7293

CVE-2026-7293MEDIUM

SourceCodester Pizzafy Ecommerce System ajax.php delete_category sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

Teraway LiveHelp 2.0 - Insecure Cookie Handling

CVE-2009-1618—webappsphp

Teraway LiveHelp 2.0 allows remote attackers to bypass authentication and gain administrative access via a pwd=&lvl=1&us

23RISCO

abrir ↗

Referência

CVE-2015-1059

CVE-2015-1059—

Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute

23RISCO

abrir ↗

Referência

CVE-2015-1060

CVE-2015-1060—

Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect

23RISCO

abrir ↗

Referência✓ VexDay Proof

Teraway FileStream 1.0 - Insecure Cookie Handling

CVE-2009-1619—webappsphp

Teraway FileStream 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the tw

23RISCO

abrir ↗

Referência✓ VexDay Proof

SDP Downloader 2.3.0 - '.asx' Local Heap Overflow (PoC)

CVE-2009-1627—doswindows

Stack-based buffer overflow in Streaming Download Project (SDP) Downloader 2.3.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

SDP Downloader 2.3.0 - '.asx' Local Buffer Overflow (SEH) (1)

CVE-2009-1627—localwindows

Stack-based buffer overflow in Streaming Download Project (SDP) Downloader 2.3.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mini-stream Ripper 3.0.1.1 - '.RAM' Local Buffer Overflow

CVE-2009-1641—localwindows

Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via

50RISCO

abrir ↗

Referência✓ VexDay Proof

Mini-stream ASX to MP3 Converter 3.0.0.7 - '.asx HREF' Local Buffer Overflow

CVE-2009-1642—localwindows

Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2013-5121

CVE-2013-5121—

SQL injection vulnerability in PHPFox before 3.6.0 (build6) allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência

CVE-2022-41040

CVE-2022-41040HIGHsob ataqueransomware

Microsoft Exchange Server Elevation of Privilege Vulnerability

100RISCO

abrir ↗

Referência✓ VexDay Proof

DB Top Sites 1.0 - 'index.php?u' Local File Inclusion

CVE-2009-2110—webappsphp

Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic_quotes_gpc is disabled, allow remote attack

23RISCO

abrir ↗

Referência

CVE-2015-1479

CVE-2015-1479—

SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 buil

23RISCO

abrir ↗

Referência

CVE-2009-2123

CVE-2009-2123—

Multiple SQL injection vulnerabilities in Elvin 1.2.0 allow remote attackers to execute arbitrary SQL commands via the (

23RISCO

abrir ↗

Referência

CVE-2026-9434

CVE-2026-9434CRITICAL

Totolink A8000RU Web Management cstecgi.cgi setWiFiWpsCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-9431

CVE-2026-9431HIGH

Tenda F1202 PptpUserAdd fromPptpUserAdd stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2013-6987

CVE-2013-6987—

Multiple directory traversal vulnerabilities in the FileBrowser components in Synology DiskStation Manager (DSM) before

28RISCO

abrir ↗

Referência

CVE-2013-7025

CVE-2013-7025—

Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell So

23RISCO

abrir ↗

Referência

CVE-2013-7186

CVE-2013-7186—

Buffer overflow in Steinberg MyMp3PRO 5.0 (Build 5.1.0.21) allows remote attackers to execute arbitrary code via a long

28RISCO

abrir ↗

Referência

CVE-2013-7186

CVE-2013-7186—

Buffer overflow in Steinberg MyMp3PRO 5.0 (Build 5.1.0.21) allows remote attackers to execute arbitrary code via a long

28RISCO

abrir ↗

Referência

CVE-2013-7186

CVE-2013-7186—

Buffer overflow in Steinberg MyMp3PRO 5.0 (Build 5.1.0.21) allows remote attackers to execute arbitrary code via a long

28RISCO

abrir ↗

Referência

CVE-2026-2441

CVE-2026-2441HIGHsob ataque

Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside

76RISCO

abrir ↗

Referência

CVE-2018-25354

CVE-2018-25354MEDIUM

Joomla Component jomres 9.11.2 Cross-Site Request Forgery

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.