Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.902exploits catalogados
34.597CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentespopularesrisco
21.624 exploits
Referência
CVE-2010-1944
CVE-2010-1944—
Multiple PHP remote file inclusion vulnerabilities in openMairie openCimetiere 2.01, when register_globals is enabled, a
23RISCO
abrir ↗
Referência
CVE-2020-12500
CVE-2020-12500CRITICAL
Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
48RISCO
abrir ↗
Referência
CVE-2020-12500
CVE-2020-12500CRITICAL
Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
48RISCO
abrir ↗
Referência
1CRM On-Premise Software 8.5.7 - Persistent Cross-Site Scripting
CVE-2019-14221—webappsphp
1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation.
23RISCO
abrir ↗
Referência
CVE-2013-3212
CVE-2013-3212—
vtiger CRM 5.4.0 and earlier contain local file-include vulnerabilities in 'customerportal.php' which allows remote atta
23RISCO
abrir ↗
Referência
Shopizer 2.16.0 - 'Multiple' Cross-Site Scripting (XSS)
CVE-2021-33561—webappsjava
A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary
23RISCO
abrir ↗
Referência
CVE-2023-31068
CVE-2023-31068—
An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on so
23RISCO
abrir ↗
Referência
TSplus 16.0.0.0 - Remote Work Insecure Files and Folders
CVE-2023-31068—remotewindows
An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on so
23RISCO
abrir ↗
Referência
CVE-2012-2209
CVE-2012-2209—
Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Piwigo before 2.3.4 allow remote attackers to inject
23RISCO
abrir ↗
Referência
CVE-2019-0796
CVE-2019-0796—
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak
23RISCO
abrir ↗
Referência
CVE-2021-34473
CVE-2021-34473CRITICALsob ataqueransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
Referência
CVE-2023-1389
CVE-2023-1389HIGHsob ataque
TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability i
100RISCO
abrir ↗
Referência✓ VexDay Proof
Nitrotech 0.0.3a - Remote Code Execution
CVE-2006-6938—webappsphp
Directory traversal vulnerability in includes/common.php in NitroTech 0.0.3a, as distributed before 2006, allows remote
23RISCO
abrir ↗
Referência✓ VexDay Proof
SiteDepth CMS 3.44 - 'ShowImage.php?name' File Disclosure
CVE-2007-3404—webappsphp
Directory traversal vulnerability in ShowImage.php in SiteDepth CMS 3.44 allows remote attackers to read arbitrary files
23RISCO
abrir ↗
Referência✓ VexDay Proof
LeadTools Raster Thumbnail Object Library - 'LTRTM14e.dll' Remote Buffer Overflow
CVE-2007-2787—remotewindows
Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in Lea
23RISCO
abrir ↗
Referência✓ VexDay Proof
WordPress Plugin WassUp 1.4.3 - 'to_date' SQL Injection
CVE-2008-0520—webappsphp
Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote att
23RISCO
abrir ↗
Referência✓ VexDay Proof
Pligg CMS 9.9.0 - Cross-Site Scripting / Local File Inclusion / SQL Injection
CVE-2008-7089—webappsphp
Cross-site scripting (XSS) vulnerability in Pligg 9.9 and earlier allows remote attackers to inject arbitrary web script
23RISCO
abrir ↗
Referência✓ VexDay Proof
ASP AutoDealer - Remote Database Disclosure
CVE-2008-5608—webappsasp
ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote att
23RISCO
abrir ↗
Referência✓ VexDay Proof
Easy Scripts Answer and Question Script - Multiple Vulnerabilities
CVE-2009-1663—webappsphp
Unrestricted file upload vulnerability in myaccount.php in Easy Scripts Answer and Question Script allows remote attacke
23RISCO
abrir ↗
Referência
CVE-2021-21985
CVE-2021-21985CRITICALsob ataqueransomware
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual
100RISCO
abrir ↗
Referência
CVE-2021-21985
CVE-2021-21985CRITICALsob ataqueransomware
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual
100RISCO
abrir ↗
Referência
CVE-2024-21887
CVE-2024-21887CRITICALsob ataqueransomware
A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x,
100RISCO
abrir ↗
Referência
CVE-2021-40964
CVE-2021-40964—
A Path Traversal vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to
23RISCO
abrir ↗
Referência
CVE-2021-41318
CVE-2021-41318—
In Progress WhatsUp Gold prior to version 21.1.0, an application endpoint failed to adequately sanitize malicious input.
23RISCO
abrir ↗
Referência
CVE-2021-41773
CVE-2021-41773HIGHsob ataqueransomware
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
Referência
CVE-2022-29464
CVE-2022-29464CRITICALsob ataqueransomware
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RISCO
abrir ↗
Referência
CVE-2023-4966
CVE-2023-4966CRITICALsob ataqueransomware
Unauthenticated sensitive information disclosure
100RISCO
abrir ↗
Referência
CVE-2022-26134
CVE-2022-26134CRITICALsob ataqueransomware
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir ↗
Referência
CVE-2023-22518
CVE-2023-22518CRITICALsob ataqueransomware
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz
100RISCO
abrir ↗
Referência
CVE-2021-1498
CVE-2021-1498CRITICALsob ataque
Cisco HyperFlex HX Command Injection Vulnerabilities
100RISCO
abrir ↗
← anteriorpágina 246 / 721próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.