Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.589exploits catalogados

34.508CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8.216Nuclei 4.223Metasploit 3.464✓ só verificadosrecentes populares risco

21.554 exploits

Referência

CVE-2010-1089

CVE-2010-1089—

SQL injection vulnerability in vedi_faq.php in PHP Trouble Ticket 2.2 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2025-25038

CVE-2025-25038CRITICAL

MiniDVBLinux Root Command Injection

48RISCO

abrir ↗

Referência

CVE-2025-25038

CVE-2025-25038CRITICAL

MiniDVBLinux Root Command Injection

48RISCO

abrir ↗

Referência

CVE-2025-25038

CVE-2025-25038CRITICAL

MiniDVBLinux Root Command Injection

48RISCO

abrir ↗

Referência

CVE-2025-25038

CVE-2025-25038CRITICAL

MiniDVBLinux Root Command Injection

48RISCO

abrir ↗

Referência

CVE-2016-2417

CVE-2016-2417—

media/libmedia/IOMX.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x befo

23RISCO

abrir ↗

Referência

CVE-2013-7030

CVE-2013-7030HIGH

The TFTP service in Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to obtain sens

41RISCO

abrir ↗

Referência

CVE-2022-22832

CVE-2022-22832—

An issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an unauthenticated /data-service/u

28RISCO

abrir ↗

Referência

CVE-2015-3245

CVE-2015-3245—

Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in t

38RISCO

abrir ↗

Referência

CVE-2019-6804

CVE-2019-6804—

An XSS issue was discovered on the Job Edit page in Rundeck Community Edition before 3.0.13, related to assets/javascrip

23RISCO

abrir ↗

Referência✓ VexDay Proof

JV2 Folder Gallery 3.0 - Remote File Inclusion

CVE-2007-0682—webappsphp

PHP remote file inclusion vulnerability in theme/include_mode/template.php in JV2 Folder Gallery 3.0.2 and earlier allow

23RISCO

abrir ↗

Referência

CVE-2016-5310

CVE-2016-5310—

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP);

23RISCO

abrir ↗

Referência✓ VexDay Proof

wavewoo 0.1.1 - 'loading.php?path_include' Remote File Inclusion

CVE-2007-2273—webappsphp

PHP remote file inclusion vulnerability in include/loading.php in Alessandro Lulli wavewoo 0.1.1 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

TR News 2.1 - 'nb' SQL Injection

CVE-2008-1958—webappsphp

Unrestricted file upload vulnerability in the ajout_cat mode in admin/main.php in Tr Script News 2.1 allows remote authe

23RISCO

abrir ↗

Referência

CVE-2021-27946

CVE-2021-27946—

SQL Injection vulnerability in MyBB before 1.8.26 via poll vote count. (issue 1 of 3).

23RISCO

abrir ↗

Referência

CVE-2012-6290

CVE-2012-6290—

SQL injection vulnerability in ImageCMS before 4.2 allows remote authenticated administrators to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2013-2637

CVE-2013-2637—

A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 a

23RISCO

abrir ↗

Referência

CVE-2017-7221

CVE-2017-7221—

OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote aut

23RISCO

abrir ↗

Referência✓ VexDay Proof

groone's Guestbook 2.0 - Remote File Inclusion

CVE-2009-0464—webappsphp

PHP remote file inclusion vulnerability in includes/header.php in Groone GBook 2.0 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2020-12501

CVE-2020-12501CRITICAL

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

48RISCO

abrir ↗

Referência

CVE-2019-9592

CVE-2019-9592—

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2019-9592

CVE-2019-9592—

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2019-16118

CVE-2019-16118—

Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via admi

23RISCO

abrir ↗

Referência

CVE-2022-41441

CVE-2022-41441MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in ReQlogic v11.3 allow attackers to execute arbitrary web scripts o

48RISCO

abrir ↗

Referência

CVE-2010-1090

CVE-2010-1090—

SQL injection vulnerability in index.php in phpMySite allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2010-1090

CVE-2010-1090—

SQL injection vulnerability in index.php in phpMySite allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2020-2231

CVE-2020-2231—

Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the remote address of the host starting a build via '

23RISCO

abrir ↗

Referência

CVE-2018-6191

CVE-2018-6191—

The js_strtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent v

23RISCO

abrir ↗

Referência

CVE-2017-6516

CVE-2017-6516—

A Local Privilege Escalation Vulnerability in MagniComp's Sysinfo before 10-H64 for Linux and UNIX platforms could allow

38RISCO

abrir ↗

Referência

CVE-2018-2636

CVE-2018-2636—

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Security).

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.