Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

72.018exploits catalogados

32.219CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.023GitHub PoC 13.334VulnCheck XDB 8.195Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

20.023 exploits

Referência

CVE-2012-1661

CVE-2012-1661—

ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, wh

28RISCO

abrir ↗

Referência

Monster Top List 1.4.2 - 'functions.php?root_path' Remote File Inclusion

CVE-2006-1781—

PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List (MTL) 1.4 allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2012-1189

CVE-2012-1189—

Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.3

23RISCO

abrir ↗

Referência

CVE-2010-4281

CVE-2010-4281—

Incomplete blacklist vulnerability in the safe_url_extraclean function in ajax.php in Pandora FMS before 3.1.1 allows re

23RISCO

abrir ↗

Referência

CVE-2009-3249

CVE-2009-3249—

Multiple directory traversal vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência

Joomla! 1.5.12 TinyMCE - Remote Code Execution (via Arbitrary File Upload)

CVE-2011-4906—

Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP code execution.

23RISCO

abrir ↗

Referência

CVE-2018-10063

CVE-2018-10063—

The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that

23RISCO

abrir ↗

Referência

Fundanemt 2.2.0 - 'spellcheck.php' Remote Code Execution

CVE-2007-2935—

core/spellcheck/spellcheck.php in Fundanemt before 2.2.0.1 allows remote attackers to execute arbitrary commands via she

23RISCO

abrir ↗

Referência

CVE-2010-3490

CVE-2010-3490—

Directory traversal vulnerability in page.recordings.php in the System Recordings component in the configuration interfa

23RISCO

abrir ↗

Referência

CVE-2013-2576

CVE-2013-2576—

Buffer overflow in Artweaver before 3.1.6 allows remote attackers to cause a denial of service (crash) and possibly exec

23RISCO

abrir ↗

Referência

CVE-2021-43339

CVE-2021-43339—

In Ericsson Network Location before 2021-07-31, it is possible for an authenticated attacker to inject commands via file

23RISCO

abrir ↗

Referência

Ericsson Network Location MPS GMPC21 - Remote Code Execution (RCE) (Metasploit)

CVE-2021-43339—

In Ericsson Network Location before 2021-07-31, it is possible for an authenticated attacker to inject commands via file

23RISCO

abrir ↗

Referência

CVE-2010-4231

CVE-2010-4231—

Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera an

43RISCO

abrir ↗

Referência

CVE-2020-9467

CVE-2020-9467—

Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function.

28RISCO

abrir ↗

Referência

CVE-2017-17876

CVE-2017-17876—

Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a u

23RISCO

abrir ↗

Referência

CVE-2020-14461

CVE-2020-14461—

Zyxel Armor X1 WAP6806 1.00(ABAL.6)C0 devices allow Directory Traversal via the images/eaZy/ URI.

23RISCO

abrir ↗

Referência

CVE-2022-26521

CVE-2022-26521—

Abantecart through 1.3.2 allows remote authenticated administrators to execute arbitrary code by uploading an executable

23RISCO

abrir ↗

Referência

MiniBill 1.22b - config[plugin_dir] Remote File Inclusion

CVE-2006-4489—

Multiple PHP remote file inclusion vulnerabilities in MiniBill 2006-07-14 (1.2.2) allow remote attackers to execute arbi

23RISCO

abrir ↗

Referência

Simple PHP Blog 0.4.7.1 - Remote Command Execution

CVE-2006-1243—

Directory traversal vulnerability in install05.php in Simple PHP Blog (SPB) 0.4.7.1 and earlier allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2016-10043

CVE-2016-10043—

An issue was discovered in Radisys MRF Web Panel (SWMS) 9.0.1. The MSM_MACRO_NAME POST parameter in /swms/ms.cgi was dis

23RISCO

abrir ↗

Referência

Multiple Vendor - PF Null Pointer Dereference

CVE-2009-0687—

The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirO

23RISCO

abrir ↗

Referência

OpenBSD 4.5 - IP datagrams Remote Denial of Service

CVE-2009-0687—

The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirO

23RISCO

abrir ↗

Referência

CVE-2012-1010

CVE-2012-1010—

Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remote

23RISCO

abrir ↗

Referência

CVE-2022-4063

CVE-2022-4063CRITICAL

InPost Gallery < 2.1.4.1 - Unauthenticated LFI to RCE

63RISCO

abrir ↗

Referência

CVE-2026-10812

CVE-2026-10812LOW

zilliztech GPTCache Cache Key pre.py BufferedReader.peek weak hash

28RISCO

abrir ↗

Referência

Shadowed Portal 5.599 - 'root' Remote File Inclusion

CVE-2006-4826—

PHP remote file inclusion vulnerability in bottom.php in Shadowed Portal 5.599 and earlier allows remote attackers to ex

23RISCO

abrir ↗

Referência

Mambo Component Security Images 3.0.5 - Remote File Inclusion

CVE-2006-5048—

Multiple PHP remote file inclusion vulnerabilities in Security Images (com_securityimages) component 3.0.5 and earlier f

23RISCO

abrir ↗

Referência

CVE-2018-18793

CVE-2018-18793—

School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos.

23RISCO

abrir ↗

Referência

CVE-2018-18793

CVE-2018-18793—

School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos.

23RISCO

abrir ↗

Referência

CVE-2017-7041

CVE-2017-7041—

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iClo

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.