Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.951exploits catalogados

34.636CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.736VulnCheck XDB 8.410Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.624 exploits

Referência

CVE-2025-34187

CVE-2025-34187CRITICAL

Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell

48RISCO

abrir ↗

Referência

CVE-2025-34187

CVE-2025-34187CRITICAL

Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell

48RISCO

abrir ↗

Referência

CVE-2018-13989

CVE-2018-13989—

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable

23RISCO

abrir ↗

Referência

CVE-2018-13989

CVE-2018-13989—

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable

23RISCO

abrir ↗

Referência

CVE-2012-10059

CVE-2012-10059CRITICAL

Dolibarr ERP/CRM Post-Auth OS Command Injection

63RISCO

abrir ↗

Referência

CVE-2018-7318

CVE-2018-7318—

SQL Injection exists in the CheckList 1.1.1 component for Joomla! via the title_search, tag_search, name_search, descrip

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quicksilver Forums 1.4.2 (Windows) - Remote Code Execution

CVE-2008-7064—webappsphp

Directory traversal vulnerability in the get_lang function in global.php in Quicksilver Forums 1.4.2 and earlier, as use

23RISCO

abrir ↗

Referência✓ VexDay Proof

webSPELL 4.2.0e - 'page' Blind SQL Injection

CVE-2009-1912—webappsphp

Directory traversal vulnerability in src/func/language.php in webSPELL 4.2.0e and earlier allows remote attackers to inc

23RISCO

abrir ↗

Referência

CVE-2012-10059

CVE-2012-10059CRITICAL

Dolibarr ERP/CRM Post-Auth OS Command Injection

63RISCO

abrir ↗

Referência

CVE-2012-10059

CVE-2012-10059CRITICAL

Dolibarr ERP/CRM Post-Auth OS Command Injection

63RISCO

abrir ↗

Referência

CVE-2012-10059

CVE-2012-10059CRITICAL

Dolibarr ERP/CRM Post-Auth OS Command Injection

63RISCO

abrir ↗

Referência

CVE-2018-0880

CVE-2018-0880—

The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an el

23RISCO

abrir ↗

Referência

CVE-2011-5040

CVE-2011-5040—

Multiple cross-site scripting (XSS) vulnerabilities in Infoproject Biznis Heroj allow remote attackers to inject arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

TorrentTrader Classic 1.09 - Multiple Vulnerabilities

CVE-2009-2158—webappsphp

account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes

23RISCO

abrir ↗

Referência

CVE-2025-35028

CVE-2025-35028CRITICAL

HexStrike AI MCP Server Command Injection

48RISCO

abrir ↗

Referência

CVE-2012-3524

CVE-2012-3524—

libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows

23RISCO

abrir ↗

Referência

CVE-2019-19032

CVE-2019-19032—

XMLBlueprint through 16.191112 is affected by XML External Entity Injection. The impact is: Arbitrary File Read when an

23RISCO

abrir ↗

Referência✓ VexDay Proof

Download-Engine 1.4.2 - 'spaw' Remote File Inclusion

CVE-2006-5291—webappsphp

PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in Download-Engine 1.4.2 allows re

23RISCO

abrir ↗

Referência

CVE-2018-13457

CVE-2018-13457—

qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to

23RISCO

abrir ↗

Referência

CVE-2014-1906

CVE-2014-1906—

Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5

23RISCO

abrir ↗

Referência

CVE-2020-7680

CVE-2020-7680—

docsify prior to 4.11.4 is susceptible to Cross-site Scripting (XSS). Docsify.js uses fragment identifiers (parameters a

23RISCO

abrir ↗

Referência

CVE-2020-7680

CVE-2020-7680—

docsify prior to 4.11.4 is susceptible to Cross-site Scripting (XSS). Docsify.js uses fragment identifiers (parameters a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PPC Search Engine 1.61 - 'INC' Multiple Remote File Inclusions

CVE-2007-0167—webappsphp

Multiple PHP file inclusion vulnerabilities in WGS-PPC (aka PPC Search Engine), as distributed with other aliases, allow

28RISCO

abrir ↗

Referência✓ VexDay Proof

fresh email script 1.0 - Multiple Vulnerabilities

CVE-2008-7043—webappsphp

Cross-site scripting (XSS) vulnerability in register.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remo

23RISCO

abrir ↗

Referência

CVE-2022-3982

CVE-2022-3982CRITICAL

Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload

63RISCO

abrir ↗

Referência

CVE-2014-2045

CVE-2014-2045—

Multiple cross-site scripting (XSS) vulnerabilities in the old and new interfaces in Viprinet Multichannel VPN Router 30

23RISCO

abrir ↗

Referência

CVE-2014-2045

CVE-2014-2045—

Multiple cross-site scripting (XSS) vulnerabilities in the old and new interfaces in Viprinet Multichannel VPN Router 30

23RISCO

abrir ↗

Referência

CVE-2010-1528

CVE-2010-1528—

PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when register_globals is enabled, allows

23RISCO

abrir ↗

Referência

CVE-2009-4823

CVE-2009-4823—

Cross-site scripting (XSS) vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote a

23RISCO

abrir ↗

Referência

CVE-2019-10849

CVE-2019-10849—

Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.