Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.056exploits catalogados

35.925CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8.755Nuclei 4.333Metasploit 3.478✓ só verificadosrecentes populares risco

22.640 exploits

Referência

CVE-2026-8214

CVE-2026-8214MEDIUM

Industrial Application Software IAS Canias ERP RMI doAction improper authentication

33RISCO

abrir ↗

Referência

CVE-2013-2294

CVE-2013-2294—

Multiple cross-site scripting (XSS) vulnerabilities in ViewGit before 0.0.7 allow remote repository users to inject arbi

23RISCO

abrir ↗

Referência

CVE-2013-2423

CVE-2013-2423LOWsob ataque

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and

95RISCO

abrir ↗

Referência

CVE-2018-25403

CVE-2018-25403HIGH

The Open ISES Project 3.30A SQL Injection via city_graph.php

41RISCO

abrir ↗

Referência

CVE-2018-25402

CVE-2018-25402HIGH

The Open ISES Project 3.30A SQL Injection via inc_types_graph.php

41RISCO

abrir ↗

Referência

CVE-2018-25401

CVE-2018-25401HIGH

The Open ISES Project 3.30A SQL Injection via sever_graph.php

41RISCO

abrir ↗

Referência

CVE-2024-27199

CVE-2024-27199HIGHsob ataqueransomware

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

100RISCO

abrir ↗

Referência

CVE-2022-44877

CVE-2022-44877CRITICALsob ataque

100RISCO

abrir ↗

Referência

CVE-2022-44877

CVE-2022-44877CRITICALsob ataque

100RISCO

abrir ↗

Referência

CVE-2018-25400

CVE-2018-25400HIGH

The Open ISES Project 3.30A SQL Injection via form_post.php

41RISCO

abrir ↗

Referência

CVE-2009-4721

CVE-2009-4721—

Multiple SQL injection vulnerabilities in Admin/index.asp in Andrews-Web (A-W) BannerAd 1.0 allow remote attackers to ex

23RISCO

abrir ↗

Referência

CVE-2015-0313

CVE-2015-0313HIGHsob ataque

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows

100RISCO

abrir ↗

Referência

CVE-2013-3529

CVE-2013-3529—

Multiple cross-site scripting (XSS) vulnerabilities in user/obits.php in the WP FuneralPress plugin before 1.1.7 for Wor

23RISCO

abrir ↗

Referência

CVE-2013-3532

CVE-2013-3532—

SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote

23RISCO

abrir ↗

Referência

CVE-2013-3532

CVE-2013-3532—

SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote

23RISCO

abrir ↗

Referência

CVE-2013-3537

CVE-2013-3537—

Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2024-45519

CVE-2024-45519CRITICALsob ataque

The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9,

100RISCO

abrir ↗

Referência

CVE-2026-9627

CVE-2026-9627HIGH

UTT HiPER 1200GW Web Management setSysAdm strcpy buffer overflow

41RISCO

abrir ↗

Referência

CVE-2025-8730

CVE-2025-8730CRITICAL

Belkin F9K1009/F9K1010 Web Interface hard-coded credentials

48RISCO

abrir ↗

Referência✓ VexDay Proof

Zervit Web Server 0.02 - Remote Buffer Overflow (PoC)

CVE-2009-1353—doswindows

Buffer overflow in the http_parse_hex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause

23RISCO

abrir ↗

Referência✓ VexDay Proof

Elecard AVC HD Player - '.XPL' Stack Buffer Overflow (SEH) (PoC)

CVE-2009-1356—doswindows

Stack-based buffer overflow in Elecard AVC HD Player allows remote attackers to execute arbitrary code via a long MP3 fi

23RISCO

abrir ↗

Referência

CVE-2011-3496

CVE-2011-3496—

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell me

28RISCO

abrir ↗

Referência

CVE-2011-3833

CVE-2011-3833—

Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote

43RISCO

abrir ↗

Referência

CVE-2021-42013

CVE-2021-42013CRITICALsob ataqueransomware

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

abrir ↗

Referência

CVE-2021-42013

CVE-2021-42013CRITICALsob ataqueransomware

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

abrir ↗

Referência

CVE-2021-42013

CVE-2021-42013CRITICALsob ataqueransomware

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

abrir ↗

Referência

CVE-2026-9575

CVE-2026-9575MEDIUM

itsourcecode Student Transcript Processing System index.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9574

CVE-2026-9574MEDIUM

itsourcecode Student Transcript Processing System trans.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9573

CVE-2026-9573MEDIUM

itsourcecode Student Transcript Processing System index.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7293

CVE-2026-7293MEDIUM

SourceCodester Pizzafy Ecommerce System ajax.php delete_category sql injection

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.