Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.107exploits catalogados

34.679CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.692 exploits

Referência

CVE-2014-2340

CVE-2014-2340—

Cross-site request forgery (CSRF) vulnerability in the XCloner plugin before 3.1.1 for WordPress allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2015-7567

CVE-2015-7567—

SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passw

23RISCO

abrir ↗

Referência

CVE-2015-7567

CVE-2015-7567—

SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passw

23RISCO

abrir ↗

Referência✓ VexDay Proof

@lex Guestbook 4.0.2 - Remote Command Execution

CVE-2007-0202—webappsphp

SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magic_quotes_gpc is disabled, allows

23RISCO

abrir ↗

Referência

CVE-2021-21465

CVE-2021-21465CRITICAL

The BW Database Interface allows an attacker with low privileges to execute any crafted database queries, exposing the b

48RISCO

abrir ↗

Referência

CVE-2018-14840

CVE-2018-14840—

uploads/.htaccess in Subrion CMS 4.2.1 allows XSS because it does not block .html file uploads (but does block, for exam

23RISCO

abrir ↗

Referência✓ VexDay Proof

JBlog 1.0 - Create / Delete Admin Authentication Bypass

CVE-2007-3974—webappsphp

admin/ajoutaut.php in JBlog 1.0 does not require authentication, which allows remote attackers to create arbitrary accou

23RISCO

abrir ↗

Referência✓ VexDay Proof

EDraw Flowchart ActiveX Control 2.0 - Insecure Method

CVE-2007-5826—remotewindows

Absolute path traversal vulnerability in the EDraw Flowchart ActiveX control in EDImage.ocx 2.0.2005.1104 allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

bloofox 0.3 - SQL Injection / File Disclosure

CVE-2008-0427—webappsphp

Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers to read arbitrary files via a ..

23RISCO

abrir ↗

Referência✓ VexDay Proof

Acidcat CMS 3.4.1 - Multiple Vulnerabilities

CVE-2008-1993—webappsphp

Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 0.2.149.27 - Inspect Element Denial of Service

CVE-2008-6997—doswindows

Google Chrome 0.2.149.27 allows user-assisted remote attackers to cause a denial of service (browser crash) via an IMG t

23RISCO

abrir ↗

Referência

CVE-2025-10162

CVE-2025-10162HIGH

OrderConvo < 14 - Unauthenticated Arbitrary File Read

56RISCO

abrir ↗

Referência

CVE-2017-17612

CVE-2017-17612—

Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17612

CVE-2017-17612—

Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17612

CVE-2017-17612—

Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter.

23RISCO

abrir ↗

Referência

CVE-2017-0058

CVE-2017-0058—

A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides

23RISCO

abrir ↗

Referência

CVE-2013-6976

CVE-2013-6976—

Cross-site request forgery (CSRF) vulnerability in goform/Quick_setup on Cisco EPC3925 devices allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2013-6976

CVE-2013-6976—

Cross-site request forgery (CSRF) vulnerability in goform/Quick_setup on Cisco EPC3925 devices allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2018-18308

CVE-2018-18308—

In the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax/file-browser/upload/ (ak

23RISCO

abrir ↗

Referência

CVE-2018-18308

CVE-2018-18308—

In the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax/file-browser/upload/ (ak

23RISCO

abrir ↗

Referência✓ VexDay Proof

File Store PRO 3.2 - Multiple Blind SQL Injections

CVE-2006-1278—webappsphp

SQL injection vulnerability in @1 File Store 2006.03.07 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência

CVE-2010-1307

CVE-2010-1307—

Directory traversal vulnerability in the Magic Updater (com_joomlaupdater) component for Joomla! allows remote attackers

43RISCO

abrir ↗

Referência

CVE-2023-33864

CVE-2023-33864CRITICAL

StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It

48RISCO

abrir ↗

Referência

CVE-2023-3843

CVE-2023-3843LOW

mooSocial mooDating URL question cross site scripting

43RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Blue Dragon CMS 2.9 - Remote File Inclusion

CVE-2006-2392—webappsphp

PHP remote file inclusion vulnerability in public_includes/pub_popup/popup_finduser.php in PHP Blue Dragon Platinum 2.8.

23RISCO

abrir ↗

Referência

CVE-2010-1307

CVE-2010-1307—

Directory traversal vulnerability in the Magic Updater (com_joomlaupdater) component for Joomla! allows remote attackers

43RISCO

abrir ↗

Referência✓ VexDay Proof

AuraCMS 2.1 - Remote File Attachment / Local File Inclusion

CVE-2007-4908—webappsphp

Directory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers to include and execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mercury/32 4.52 IMAPD - 'SEARCH' (Authenticated) Overflow

CVE-2007-5018—remotewindows

Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to execute arbitrary code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Weblosninger 4 - Cross-Site Scripting / SQL Injection

CVE-2008-2506—webappsphp

Multiple SQL injection vulnerabilities in Simpel Side Weblosning 1 through 4 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mega File Hosting Script 1.2 - 'fid' SQL Injection

CVE-2008-2521—webappsphp

SQL injection vulnerability in members.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote authe

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.