Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.647exploits catalogados

34.986CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2010-4269

CVE-2010-4269—

SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2010-4272

CVE-2010-4272—

SQL injection vulnerability in the Pulse Infotech Sponsor Wall (com_sponsorwall) component 1.1 for Joomla! allows remote

23RISCO

abrir ↗

Referência

CVE-2010-4633

CVE-2010-4633—

SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2016-1960

CVE-2016-1960—

Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox

35RISCO

abrir ↗

Referência

CVE-2010-1062

CVE-2010-1062—

Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when magi

23RISCO

abrir ↗

Referência

CVE-2016-2004

CVE-2016-2004—

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary cod

60RISCO

abrir ↗

Referência

CVE-2010-1066

CVE-2010-1066—

AR Web Content Manager (AWCM) 2.1 stores sensitive information under the web root with insufficient access control, whic

23RISCO

abrir ↗

Referência

CVE-2020-6207

CVE-2020-6207CRITICALsob ataque

SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform an

100RISCO

abrir ↗

Referência

CVE-2020-6207

CVE-2020-6207CRITICALsob ataque

SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform an

100RISCO

abrir ↗

Referência

CVE-2020-6207

CVE-2020-6207CRITICALsob ataque

SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform an

100RISCO

abrir ↗

Referência

CVE-2022-21587

CVE-2022-21587CRITICALsob ataqueransomware

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload).

100RISCO

abrir ↗

Referência

CVE-2010-4895

CVE-2010-4895—

Cross-site scripting (XSS) vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbit

23RISCO

abrir ↗

Referência

CVE-2010-4898

CVE-2010-4898—

SQL injection vulnerability in the Gantry (com_gantry) component 3.0.10 for Joomla! allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2010-4902

CVE-2010-4902—

Multiple SQL injection vulnerabilities in the Clantools (com_clantools) component 1.2.3 for Joomla! allow remote attacke

23RISCO

abrir ↗

Referência

CVE-2010-4910

CVE-2010-4910—

SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2010-4910

CVE-2010-4910—

SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2010-4911

CVE-2010-4911—

SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-4912

CVE-2010-4912—

SQL injection vulnerability in shop.php in UCenter Home 2.0 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência

CVE-2010-4912

CVE-2010-4912—

SQL injection vulnerability in shop.php in UCenter Home 2.0 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência

CVE-2010-4913

CVE-2010-4913—

Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2013-5978

CVE-2013-5978—

Multiple cross-site scripting (XSS) vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPr

23RISCO

abrir ↗

Referência

CVE-2013-5219

CVE-2013-5219—

Directory traversal vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to read arbitrar

23RISCO

abrir ↗

Referência

CVE-2007-3340

CVE-2007-3340—

BugHunter HTTP SERVER (httpsv.exe) 1.6.2 allows remote attackers to cause a denial of service (application crash) via a

23RISCO

abrir ↗

Referência

CVE-2012-5861

CVE-2012-5861—

Sinapsi eSolar SQL Injection

41RISCO

abrir ↗

Referência

CVE-2026-14938

CVE-2026-14938MEDIUM

FluentBoards < 1.95.3 - Subscriber+ Cross-Board Task Disclosure via IDOR

33RISCO

abrir ↗

Referência

CVE-2015-1318

CVE-2015-1318—

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a craf

38RISCO

abrir ↗

Referência

CVE-2015-1318

CVE-2015-1318—

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a craf

38RISCO

abrir ↗

Referência

CVE-2018-0746

CVE-2018-0746—

The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Wi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ksemail - Local File Inclusion

CVE-2008-1751—webappsphp

Multiple directory traversal vulnerabilities in index.php in Ksemail allow remote attackers to read arbitrary local file

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vlbook 1.21 - Cross-Site Scripting / Local File Inclusion

CVE-2008-2073—webappsphp

Directory traversal vulnerability in include/global.inc.php in Virtual Design Studio vlbook 1.21 allows remote attackers

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.