Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.445exploits catalogados

34.432CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

21.497 exploits

Referência

CVE-2021-24862

CVE-2021-24862—

RegistrationMagic < 5.0.1.6 - Admin+ SQL Injection

60RISCO

abrir ↗

Referência

CVE-2018-17443

CVE-2018-17443—

An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'sitename' parameter of the UpdateS

23RISCO

abrir ↗

Referência

CVE-2010-1045

CVE-2010-1045—

SQL injection vulnerability in the Productbook (com_productbook) component 1.0.4 for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2017-14085

CVE-2017-14085—

Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can acc

23RISCO

abrir ↗

Referência

CVE-2017-14085

CVE-2017-14085—

Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can acc

23RISCO

abrir ↗

Referência

CVE-2021-24931

CVE-2021-24931—

Secure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injection

60RISCO

abrir ↗

Referência

CVE-2026-28517

CVE-2026-28517CRITICAL

openDCIM <= 23.04 OS Command Injection via dot Configuration Parameter

63RISCO

abrir ↗

Referência

CVE-2026-28517

CVE-2026-28517CRITICAL

openDCIM <= 23.04 OS Command Injection via dot Configuration Parameter

63RISCO

abrir ↗

Referência

CVE-2008-4157

CVE-2008-4157—

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2008-4157

CVE-2008-4157—

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2008-4157

CVE-2008-4157—

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2017-6095

CVE-2017-6095—

A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/list

23RISCO

abrir ↗

Referência

CVE-2020-6318

CVE-2020-6318CRITICAL

A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (>

48RISCO

abrir ↗

Referência

CVE-2017-2483

CVE-2017-2483—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b

23RISCO

abrir ↗

Referência✓ VexDay Proof

IBM Rational ClearQuest - Web Authentication Bypass / SQL Injection

CVE-2007-4368—webappscgi

SQL injection vulnerability in /main in IBM Rational ClearQuest (CQ) Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

MikroTik RouterOS 3.13 - SNMP write (Set request)

CVE-2008-6976—remotehardware

MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System (N

23RISCO

abrir ↗

Referência

CVE-2021-25094

CVE-2021-25094—

Tatsu < 3.3.12 - Unauthenticated RCE

60RISCO

abrir ↗

Referência

CVE-2015-2679

CVE-2015-2679—

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2015-2679

CVE-2015-2679—

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2010-3906

CVE-2010-3906—

Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Referência

CVE-2010-4401

CVE-2010-4401—

languages.inc.php in DynPG CMS 4.2.0 allows remote attackers to obtain sensitive information via a direct request, which

23RISCO

abrir ↗

Referência

CVE-2009-4775

CVE-2009-4775—

Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of

23RISCO

abrir ↗

Referência

CVE-2009-4775

CVE-2009-4775—

Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of

23RISCO

abrir ↗

Referência

CVE-2017-15035

CVE-2017-15035—

EmTec PyroBatchFTP before 3.18 allows remote servers to cause a denial of service (application crash).

23RISCO

abrir ↗

Referência

CVE-2016-1415

CVE-2016-1415—

Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to cause a denial of servi

23RISCO

abrir ↗

Referência

CVE-2009-4216

CVE-2009-4216—

Directory traversal vulnerability in funzioni/lib/menulast.php in klinza professional cms 5.0.1 and earlier allows remot

23RISCO

abrir ↗

Referência

CVE-2014-3139

CVE-2014-3139—

recoveryconsole/bpl/snmpd.php in Unitrends Enterprise Backup 7.3.0 allows remote attackers to bypass authentication by s

23RISCO

abrir ↗

Referência✓ VexDay Proof

Python 2.4.2 - 'realpath()' Local Stack Overflow

CVE-2006-1542—locallinux

Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ultra Crypto Component - 'CryptoX.dll 2.0 SaveToFile()' Insecure Method

CVE-2007-4902—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Co

23RISCO

abrir ↗

Referência✓ VexDay Proof

idmos-phoenix CMS - 'aural.php' Remote File Inclusion

CVE-2007-5294—webappsphp

PHP remote file inclusion vulnerability in core/aural.php in IDMOS 1.0-beta (aka Phoenix) allows remote attackers to exe

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.