Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.056exploits catalogados

35.925CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8.755Nuclei 4.333Metasploit 3.478✓ só verificadosrecentes populares risco

22.640 exploits

Referência✓ VexDay Proof

Ipswitch WS_FTP Home/Professional FTP Client - Remote Format String (PoC)

CVE-2008-3795—doswindows

Buffer overflow in Ipswitch WS_FTP Home client allows remote FTP servers to have an unknown impact via a long "message r

28RISCO

abrir ↗

Referência✓ VexDay Proof

skyportal vrc6 - Multiple Vulnerabilities

CVE-2007-6078—webappsphp

Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via uns

23RISCO

abrir ↗

Referência

CVE-2015-6810

CVE-2015-6810—

Cross-site scripting (XSS) vulnerability in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB,

23RISCO

abrir ↗

Referência★ 302

Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable x86_64 Linux kernels v5.10.x.

CVE-2025-38352HIGHsob ataque

posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()

71RISCO

abrir ↗

Referência

CVE-2013-10055

CVE-2013-10055CRITICAL

Havalite CMS Arbitary File Upload RCE

63RISCO

abrir ↗

Referência

CVE-2013-10055

CVE-2013-10055CRITICAL

Havalite CMS Arbitary File Upload RCE

63RISCO

abrir ↗

Referência

CVE-2017-1000408

CVE-2017-1000408—

A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environme

23RISCO

abrir ↗

Referência

CVE-2012-2573

CVE-2012-2573—

Multiple cross-site scripting (XSS) vulnerabilities in T-dah WebMail 3.2.0-2.3 allow remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência

CVE-2016-3653

CVE-2016-3653—

Multiple cross-site request forgery (CSRF) vulnerabilities in management scripts in Symantec Endpoint Protection Manager

23RISCO

abrir ↗

Referência

CVE-2018-13441

CVE-2018-13441—

qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows atta

23RISCO

abrir ↗

Referência

CVE-2015-1364

CVE-2015-1364—

SQL injection vulnerability in the getProfile function in system/profile.functions.php in Free Reprintables ArticleFR 3.

23RISCO

abrir ↗

Referência

CVE-2023-5347

CVE-2023-5347CRITICAL

Unauthenticated Firmware Upgrade

48RISCO

abrir ↗

Referência

SPBAS Business Automation Software 2012 - Multiple Vulnerabilities

CVE-2013-4665—webappsphp

SPBAS Business Automation Software 2012 has CSRF.

23RISCO

abrir ↗

Referência

CVE-2010-3484

CVE-2010-3484—

SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2010-3484

CVE-2010-3484—

SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Acoustica Mixcraft 4.2 Build 98 - 'mx4' Local Buffer Overflow

CVE-2008-3877—localwindows

Stack-based buffer overflow in Acoustica Mixcraft 4.1 Build 96 and 4.2 Build 98 allows user-assisted attackers to execut

23RISCO

abrir ↗

Referência

CVE-2010-2038

CVE-2010-2038—

Cross-site scripting (XSS) vulnerability in include/tool/editing_files.php in gpEasy CMS 1.6.2 allows remote authenticat

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component com_hashcash 1.2.1 - Remote File Inclusion

CVE-2006-3750—webappsphp

PHP remote file inclusion vulnerability in server.php in the Hashcash Component (com_hashcash) 1.2.1 for Joomla! allows

23RISCO

abrir ↗

Referência

CVE-2011-4806

CVE-2011-4806—

Multiple cross-site scripting (XSS) vulnerabilities in main.php in phpAlbum 0.4.1.16 and earlier allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pc4Uploader 9.0 - Blind SQL Injection

CVE-2009-1742—webappsphp

code.php in PC4Arb Pc4 Uploader 9.0 and earlier makes it easier for remote attackers to conduct SQL injection attacks vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Module CBSms 1.0 - Remote File Inclusion

CVE-2006-3294—webappsphp

PHP remote file inclusion vulnerability in mod_cbsms_messages.php in CBSMS Mambo Module 1.0 and earlier, when register_g

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPNS 1.1 - 'shownews.php?id' SQL Injection

CVE-2007-4628—webappsphp

SQL injection vulnerability in shownews.php in phpns 1.1 allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência

CVE-2010-4142

CVE-2010-4142—

Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a

50RISCO

abrir ↗

Referência

CVE-2011-5160

CVE-2011-5160—

Cross-site scripting (XSS) vulnerability in setup.php in OpenEMR 4 allows remote attackers to inject arbitrary web scrip

23RISCO

abrir ↗

Referência

CVE-2014-3246

CVE-2014-3246—

SQL injection vulnerability in Collabtive 1.2 allows remote authenticated users to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência

CVE-2024-8580

CVE-2024-8580CRITICAL

TOTOLINK AC1200 T8 shadow.sample hard-coded password

48RISCO

abrir ↗

Referência

CVE-2016-2288

CVE-2016-2288—

Cogent DataHub before 7.3.10 allows local users to gain privileges by leveraging the user or guest role to modify a file

23RISCO

abrir ↗

Referência

CVE-2014-100011

CVE-2014-100011—

SQL injection vulnerability in /send-to in Sendy 1.1.9.1 allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência

CVE-2012-5367

CVE-2012-5367—

Multiple SQL injection vulnerabilities in OrangeHRM 2.7.1 RC 1 allow remote authenticated administrators to execute arbi

23RISCO

abrir ↗

Referência

CVE-2025-34148

CVE-2025-34148CRITICAL

Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WISP SSID

48RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.