Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados

35.840CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.600 exploits

Referência

CVE-2008-4648

CVE-2008-4648—

Cross-site scripting (XSS) vulnerability in index.php in Elxis CMS 2008.1 revision 2204 allows remote attackers to injec

23RISCO

abrir ↗

Referência

CVE-2012-10053

CVE-2012-10053CRITICAL

Simple Web Server Connection Header Buffer Overflow

63RISCO

abrir ↗

Referência

CVE-2012-10053

CVE-2012-10053CRITICAL

Simple Web Server Connection Header Buffer Overflow

63RISCO

abrir ↗

Referência

CVE-2012-10053

CVE-2012-10053CRITICAL

Simple Web Server Connection Header Buffer Overflow

63RISCO

abrir ↗

Referência

CVE-2012-10053

CVE-2012-10053CRITICAL

Simple Web Server Connection Header Buffer Overflow

63RISCO

abrir ↗

Referência

CVE-2009-4822

CVE-2009-4822—

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2015-7891

CVE-2015-7891—

Race condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in Samsung devices with A

23RISCO

abrir ↗

Referência

CVE-2015-7891

CVE-2015-7891—

Race condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in Samsung devices with A

23RISCO

abrir ↗

Referência

CVE-2020-14882

CVE-2020-14882CRITICALsob ataque

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RISCO

abrir ↗

Referência

CVE-2012-6518

CVE-2012-6518—

Cross-site request forgery (CSRF) vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authenti

23RISCO

abrir ↗

Referência

CVE-2026-19613

CVE-2026-19613MEDIUM

ECS < 4.3.10 - Contributor+ Arbitrary Post Meta Disclosure via Dynamic Repeater ACF Source

33RISCO

abrir ↗

Referência

CVE-2025-34149

CVE-2025-34149CRITICAL

Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WPA2 Key

48RISCO

abrir ↗

Referência

CVE-2023-54339

CVE-2023-54339CRITICAL

Webgrind 1.1 - Remote Command Execution (RCE) via dataFile Parameter

48RISCO

abrir ↗

Referência

CVE-2017-3587

CVE-2017-3587—

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported ve

23RISCO

abrir ↗

Referência

CVE-2015-5602

CVE-2015-5602—

sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is d

23RISCO

abrir ↗

Referência

CVE-2008-6386

CVE-2008-6386—

Cross-site scripting (XSS) vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary we

23RISCO

abrir ↗

Referência

CVE-2014-9632

CVE-2014-9632—

The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protec

23RISCO

abrir ↗

Referência

CVE-2014-9632

CVE-2014-9632—

The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protec

23RISCO

abrir ↗

Referência

CVE-2025-34433

CVE-2025-34433CRITICAL

AVideo < 20.1 Unauthenticated RCE via Predictable Installation Salt

63RISCO

abrir ↗

Referência

CVE-2013-6922

CVE-2013-6922—

Multiple cross-site request forgery (CSRF) vulnerabilities in the Seagate BlackArmor NAS 220 devices with firmware sg200

23RISCO

abrir ↗

Referência

CVE-2025-10432

CVE-2025-10432CRITICAL

Tenda AC1206 HTTP Request AdvSetMacMtuWa check_param_changed stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2010-2439

CVE-2010-2439—

Stack-based buffer overflow in MoreAmp allows remote attackers to execute arbitrary code via a long line in a song list

23RISCO

abrir ↗

Referência

CVE-2015-7894

CVE-2015-7894—

The DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number LRX22G.G925VVRU1AOE2 allow

23RISCO

abrir ↗

Referência

CVE-2026-18653

CVE-2026-18653HIGH

WP Directory Kit < 1.5.7 - Admin+ SQL Injection via section Parameter

41RISCO

abrir ↗

Referência

CVE-2012-6434

CVE-2012-6434—

Multiple cross-site request forgery (CSRF) vulnerabilities in e107_admin/download.php in e107 1.0.2 allow remote attacke

23RISCO

abrir ↗

Referência

CVE-2017-7952

CVE-2017-7952—

INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.

23RISCO

abrir ↗

Referência

CVE-2025-25037

CVE-2025-25037CRITICAL

Aquatronica Controller System Complete Information Disclosure

63RISCO

abrir ↗

Referência

CVE-2025-25037

CVE-2025-25037CRITICAL

Aquatronica Controller System Complete Information Disclosure

63RISCO

abrir ↗

Referência

CVE-2022-50796

CVE-2022-50796CRITICAL

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Remote Code Execution via upload.cgi

48RISCO

abrir ↗

Referência

CVE-2012-10037

CVE-2012-10037CRITICAL

PhpTax pfilez Parameter Exec Remote Code Injection

63RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.