Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

84.149exploits catalogados

39.601CVEs com exploração pública

24.695testados em laboratório

Todos Referência 25.629Exploit-DB 24.485GitHub PoC 16.342VulnCheck XDB 9.680Nuclei 4.488Metasploit 3.525✓ só verificadosrecentes populares risco

25.557 exploits

Referência

CVE-2011-5005

CVE-2011-5005—

Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code b

23RISCO

abrir ↗

Referência✓ VexDay Proof

MemHT Portal 3.9.0 - Remote Create Shell

CVE-2008-4164—webappsphp

cron.php in MemHT Portal 3.9.0 and earlier allows remote attackers to obtain sensitive information via a direct request,

23RISCO

abrir ↗

Referência

CVE-2022-2992

CVE-2022-2992CRITICAL

A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows

85RISCO

abrir ↗

Referência

CVE-2021-1675

CVE-2021-1675HIGHsob ataqueransomware

Windows Print Spooler Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2021-1675

CVE-2021-1675HIGHsob ataqueransomware

Windows Print Spooler Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2021-1675

CVE-2021-1675HIGHsob ataqueransomware

Windows Print Spooler Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência✓ VexDay Proof

dBpowerAMP Audio Player 2 - '.m3u' Remote Buffer Overflow

CVE-2008-0661—remotewindows

Buffer overflow in dBpowerAMP Audio Player Release 2 allows remote attackers to execute arbitrary code via a .M3U file w

23RISCO

abrir ↗

Referência

CVE-2026-1731

CVE-2026-1731CRITICALsob ataqueransomware

Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

100RISCO

abrir ↗

Referência✓ VexDay Proof

barcodegen 2.0.0 - Local File Inclusion

CVE-2008-5993—webappsphp

Directory traversal vulnerability in image.php in Barcode Generator 1D (barcodegen) 2.0.0 and earlier allows remote atta

23RISCO

abrir ↗

Referência

CVE-2018-25415

CVE-2018-25415HIGH

AiOPMSD Final 1.0.0 SQL Injection via director Parameter

41RISCO

abrir ↗

Referência

CVE-2009-2786

CVE-2009-2786—

SQL injection vulnerability in reputation.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB allows

23RISCO

abrir ↗

Referência

CVE-2018-25414

CVE-2018-25414HIGH

AiOPMSD Final 1.0.0 SQL Injection via actor.php

41RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_noticias 1.0 - SQL Injection

CVE-2008-0670—webappsphp

SQL injection vulnerability in index.php in the Noticias (com_noticias) 1.0 component for Joomla! allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

BookMarks Favourites Script - 'id' SQL Injection

CVE-2008-6007—webappsphp

SQL injection vulnerability in view_group.php in QuidaScript BookMarks Favourites Script (APB) allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2011-5049

CVE-2011-5049—

MySQL 5.5.8, when running on Windows, allows remote attackers to cause a denial of service (NULL pointer dereference) vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

SG Real Estate Portal 2.0 - Blind SQL Injection / Local File Inclusion

CVE-2008-6011—webappsphp

SQL injection vulnerability in index.php in SG Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2009-2890

CVE-2009-2890—

Cross-site scripting (XSS) vulnerability in results.php in PHP Scripts Now Riddles allows remote attackers to inject arb

23RISCO

abrir ↗

Referência

CVE-2009-3023

CVE-2009-3023—

Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authen

60RISCO

abrir ↗

Referência

CVE-2026-108856

CVE-2026-108856LOW

UnicomAI Wanwu through 0.6.5 Authorization Bypass via /v1/appspace/app/key AppKey Minting

28RISCO

abrir ↗

Referência

CVE-2012-2590

CVE-2012-2590—

Multiple cross-site scripting (XSS) vulnerabilities in ESCON SupportPortal Professional Edition 3.0 allow remote attacke

23RISCO

abrir ↗

Referência

CVE-2020-8654

CVE-2020-8654—

An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoD

60RISCO

abrir ↗

Referência

CVE-2026-97183

CVE-2026-97183MEDIUM

WP-Invoice <= 4.3.1 - Subscriber+ User PII Disclosure via Unprotected AJAX Handlers

33RISCO

abrir ↗

Referência

CVE-2026-107694

CVE-2026-107694LOW

Dokan < 5.2.0 - Vendor+ Cross-Vendor Commission Settings Disclosure via Commission REST Endpoint

28RISCO

abrir ↗

Referência

CVE-2012-0276

CVE-2012-0276—

Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (applicat

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-revista 1.1.2 - Remote File Inclusion / SQL Injection / Authentication Bypass / Cross-Site Scripting

CVE-2006-4607—webappsphp

admin/index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to bypass authentication controls by setting

23RISCO

abrir ↗

Referência✓ VexDay Proof

Thecus N5200Pro NAS Server Control Panel - Remote File Inclusion

CVE-2008-0804—remotehardware

PHP remote file inclusion vulnerability in usrgetform.html in Thecus N5200Pro NAS Server allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component astatsPRO 1.0 - 'refer.php' SQL Injection

CVE-2008-0839—webappsphp

SQL injection vulnerability in refer.php in the astatsPRO (com_astatspro) 1.0 component for Joomla! allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

AvailScript Article Script - 'articles.php' Multiple Vulnerabilities

CVE-2008-4371—webappsphp

SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2025-34037

CVE-2025-34037CRITICAL

Linksys Routers E/WAG/WAP/WES/WET/WRT-Series

85RISCO

abrir ↗

Referência

CVE-2023-28343

CVE-2023-28343—

OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/managemen

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.