Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.496exploits catalogados

34.964CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8.510Nuclei 4.239Metasploit 3.468✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2016-8016

CVE-2016-8016—

Information exposure in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote

23RISCO

abrir ↗

Referência

CVE-2021-24169

CVE-2021-24169—

Advanced Order Export For WooCommerce < 3.1.8 - Reflected Cross-Site Scripting (XSS)

43RISCO

abrir ↗

Referência

CVE-2014-0683

CVE-2014-0683—

The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware

28RISCO

abrir ↗

Referência

CVE-2014-7289

CVE-2014-7289—

SQL injection vulnerability in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and

23RISCO

abrir ↗

Referência

CVE-2026-13609

CVE-2026-13609HIGH

Frontend Admin by DynamiApps < 3.29.9 - Unauthenticated Stored Cross-Site Scripting via Form Field

41RISCO

abrir ↗

Referência

In4Suit ERP 3.2.74.1370 - 'txtLoginId' SQL injection

CVE-2021-27828—webappsmultiple

SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the a

28RISCO

abrir ↗

Referência

CVE-2000-1196

CVE-2000-1196—

PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying

23RISCO

abrir ↗

Referência

CVE-2021-27885

CVE-2021-27885—

usersettings.php in e107 through 2.3.0 lacks a certain e_TOKEN protection mechanism.

23RISCO

abrir ↗

Referência

CVE-2018-0749

CVE-2018-0749—

The Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2

23RISCO

abrir ↗

Referência✓ VexDay Proof

WikkiTikkiTavi 1.11 - Arbitrary '.PHP' File Upload

CVE-2009-0602—webappsphp

Unrestricted file upload vulnerability in upload.php in WikkiTikkiTavi 1.11 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2013-10060

CVE-2013-10060CRITICAL

Netgear Routers pppoe.cgi RCE

63RISCO

abrir ↗

Referência

CVE-2013-10060

CVE-2013-10060CRITICAL

Netgear Routers pppoe.cgi RCE

63RISCO

abrir ↗

Referência

CVE-2013-10060

CVE-2013-10060CRITICAL

Netgear Routers pppoe.cgi RCE

63RISCO

abrir ↗

Referência

CVE-2013-10060

CVE-2013-10060CRITICAL

Netgear Routers pppoe.cgi RCE

63RISCO

abrir ↗

Referência

CVE-2013-1409

CVE-2013-1409—

Cross-site scripting (XSS) vulnerability in the CommentLuv plugin before 2.92.4 for WordPress allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2020-8819

CVE-2020-8819—

An issue was discovered in the CardGate Payments plugin through 3.1.15 for WooCommerce. Lack of origin authentication in

23RISCO

abrir ↗

Referência

CVE-2015-4084

CVE-2015-4084—

Cross-site scripting (XSS) vulnerability in the Free Counter plugin 1.1 for WordPress allows remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2015-4084

CVE-2015-4084—

Cross-site scripting (XSS) vulnerability in the Free Counter plugin 1.1 for WordPress allows remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2023-24217

CVE-2023-24217HIGH

AgileBio Electronic Lab Notebook v4.234 was discovered to contain a local file inclusion vulnerability.

41RISCO

abrir ↗

Referência✓ VexDay Proof

Gigaset SE461 WiMAX Router - Remote Denial of Service

CVE-2009-1152—doshardware

Siemens Gigaset SE461 WiMAX router 1.5-BL024.9.6401, and possibly other versions, allows remote attackers to cause a den

23RISCO

abrir ↗

Referência✓ VexDay Proof

TR Forum 2.0 - SQL Injection / Bypass Security Restriction

CVE-2006-4584—webappsphp

Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and passwo

23RISCO

abrir ↗

Referência

CVE-2009-4059

CVE-2009-4059—

SQL injection vulnerability in the JoomClip (com_joomclip) component for Joomla! allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2010-1494

CVE-2010-1494—

Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to re

43RISCO

abrir ↗

Referência

CVE-2010-1494

CVE-2010-1494—

Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to re

43RISCO

abrir ↗

Referência

CVE-2015-6811

CVE-2015-6811—

SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlie

23RISCO

abrir ↗

Referência

CVE-2015-6811

CVE-2015-6811—

SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlie

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quicksilver Forums 1.4.2 (Windows) - Remote Code Execution

CVE-2008-7064—webappsphp

Directory traversal vulnerability in the get_lang function in global.php in Quicksilver Forums 1.4.2 and earlier, as use

23RISCO

abrir ↗

Referência

CVE-2015-2789

CVE-2015-2789—

Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.

23RISCO

abrir ↗

Referência

CVE-2015-2789

CVE-2015-2789—

Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.

23RISCO

abrir ↗

Referência

CVE-2020-18724

CVE-2020-18724—

Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.