Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.101exploits catalogados

35.950CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.406VulnCheck XDB 8.755Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2025-25037

CVE-2025-25037CRITICAL

Aquatronica Controller System Complete Information Disclosure

63RISCO

abrir ↗

Referência

CVE-2025-25037

CVE-2025-25037CRITICAL

Aquatronica Controller System Complete Information Disclosure

63RISCO

abrir ↗

Referência

CVE-2022-50796

CVE-2022-50796CRITICAL

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Remote Code Execution via upload.cgi

48RISCO

abrir ↗

Referência

CVE-2012-10037

CVE-2012-10037CRITICAL

PhpTax pfilez Parameter Exec Remote Code Injection

63RISCO

abrir ↗

Referência

CVE-2012-10037

CVE-2012-10037CRITICAL

PhpTax pfilez Parameter Exec Remote Code Injection

63RISCO

abrir ↗

Referência

CVE-2012-10037

CVE-2012-10037CRITICAL

PhpTax pfilez Parameter Exec Remote Code Injection

63RISCO

abrir ↗

Referência

CVE-2008-5971

CVE-2008-5971—

Cross-site scripting (XSS) vulnerability in profile_social.php in i-Net Solution Orkut Clone allows remote authenticated

23RISCO

abrir ↗

Referência

CVE-2013-6162

CVE-2013-6162—

Cross-site scripting (XSS) vulnerability in Code-Crafters Ability Mail Server 3.1.1 allows remote attackers to inject ar

23RISCO

abrir ↗

Referência

CVE-2017-3575

CVE-2017-3575—

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th

23RISCO

abrir ↗

Referência

CVE-2012-1017

CVE-2012-1017—

Multiple SQL injection vulnerabilities in base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allow rem

23RISCO

abrir ↗

Referência

CVE-2012-3834

CVE-2012-3834—

SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security Information Management (OS

23RISCO

abrir ↗

Referência

CVE-2013-10066

CVE-2013-10066CRITICAL

Kordil EDMS v2.2.60rc3 Unauthenticated Arbitrary File Upload

63RISCO

abrir ↗

Referência

CVE-2013-10066

CVE-2013-10066CRITICAL

Kordil EDMS v2.2.60rc3 Unauthenticated Arbitrary File Upload

63RISCO

abrir ↗

Referência

CVE-2013-2713

CVE-2013-2713—

Cross-site request forgery (CSRF) vulnerability in users_maint.html in KrisonAV CMS before 3.0.2 allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-2458

CVE-2010-2458—

Cross-site scripting (XSS) vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2009-2228

CVE-2009-2228—

Cross-site scripting (XSS) vulnerability in engine.php in Kasseler CMS allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Referência

CVE-2009-4446

CVE-2009-4446—

Cross-site scripting (XSS) vulnerability in admin.php in phpInstantGallery 1.1 allows remote attackers to inject arbitra

23RISCO

abrir ↗

Referência

CVE-2009-4468

CVE-2009-4468—

Cross-site scripting (XSS) vulnerability in misc.php in DeluxeBB 1.3 allows remote attackers to inject arbitrary web scr

23RISCO

abrir ↗

Referência

CVE-2009-4682

CVE-2009-4682—

Cross-site scripting (XSS) vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência

CVE-2020-14946

CVE-2020-14946—

downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and e

23RISCO

abrir ↗

Referência

CVE-2015-8103

CVE-2015-8103—

The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary co

60RISCO

abrir ↗

Referência✓ VexDay Proof

THoRCMS 1.3.1 - 'phpbb_root_path' Remote File Inclusion

CVE-2006-3269—webappsphp

PHP remote file inclusion vulnerability in includes/functions_cms.php in THoRCMS 1.3.1 allows remote attackers to execut

23RISCO

abrir ↗

Referência

CVE-2026-8275

CVE-2026-8275MEDIUM

bettercap zerogod IPP Service zerogod_ipp_primitives.go ippReadChunkedBody integer coercion

33RISCO

abrir ↗

Referência

CVE-2018-10828

CVE-2018-10828—

An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and wri

23RISCO

abrir ↗

Referência

CVE-2017-1000366

CVE-2017-1000366—

glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causin

23RISCO

abrir ↗

Referência

CVE-2013-10070

CVE-2013-10070CRITICAL

PHP-Charts v1.0 PHP Code Execution

63RISCO

abrir ↗

Referência

CVE-2013-10070

CVE-2013-10070CRITICAL

PHP-Charts v1.0 PHP Code Execution

63RISCO

abrir ↗

Referência

CVE-2013-10070

CVE-2013-10070CRITICAL

PHP-Charts v1.0 PHP Code Execution

63RISCO

abrir ↗

Referência

CVE-2012-10038

CVE-2012-10038CRITICAL

Auxilium RateMyPet Arbitrary File Upload RCE

63RISCO

abrir ↗

Referência

CVE-2025-34089

CVE-2025-34089CRITICAL

Remote for Mac Unauthenticated Remote Code Execution via AppleScript Injection

63RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.