Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.647exploits catalogados

34.986CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2011-0644

CVE-2011-0644—

SQL injection vulnerability in include/admin/model_field.class.php in PHPCMS 2008 V2 allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2011-0646

CVE-2011-0646—

SQL injection vulnerability in viewfaqs.php in PHP LOW BIDS allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência

CVE-2014-2976

CVE-2014-2976—

Directory traversal vulnerability in Sixnet SixView Manager 2.4.1 allows remote attackers to read arbitrary files via a

23RISCO

abrir ↗

Referência

CVE-2026-67184

CVE-2026-67184HIGH

TinyWeb 0.0.8 Null Pointer Dereference DoS via Malformed HTTP Request

41RISCO

abrir ↗

Referência

CVE-2023-3049

CVE-2023-3049CRITICAL

File Upload in TMT's Lockcell

48RISCO

abrir ↗

Referência

CVE-2015-4631

CVE-2015-4631—

Multiple cross-site scripting (XSS) vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before

23RISCO

abrir ↗

Referência

CVE-2015-4631

CVE-2015-4631—

Multiple cross-site scripting (XSS) vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before

23RISCO

abrir ↗

Referência

CVE-2021-44916

CVE-2021-44916—

Opmantek Open-AudIT Community 4.2.0 (Fixed in 4.3.0) is affected by a Cross Site Scripting (XSS) vulnerability. If a bad

23RISCO

abrir ↗

Referência

CVE-2009-4147

CVE-2009-4147—

The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1 and 8.0 does not clear t

38RISCO

abrir ↗

Referência

CVE-2016-3643

CVE-2016-3643HIGHsob ataque

SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguratio

71RISCO

abrir ↗

Referência

CVE-2016-3643

CVE-2016-3643HIGHsob ataque

SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguratio

71RISCO

abrir ↗

Referência✓ VexDay Proof

TCExam 4.0.011 - 'SessionUserLang' Shell Injection

CVE-2007-2430—webappsphp

shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by

23RISCO

abrir ↗

Referência

CVE-2017-6896

CVE-2017-6896—

Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from

23RISCO

abrir ↗

Referência

CVE-2017-6896

CVE-2017-6896—

Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from

23RISCO

abrir ↗

Referência✓ VexDay Proof

2WIRE Modems/Routers - 'CRLF' Denial of Service

CVE-2006-4523—doshardware

The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote at

23RISCO

abrir ↗

Referência

CVE-2018-20418

CVE-2018-20418—

index.php?p=admin/actions/entries/save-entry in Craft CMS 3.0.25 allows XSS by saving a new title from the console tab.

23RISCO

abrir ↗

Referência

CVE-2018-11091

CVE-2018-11091CRITICAL

An issue was discovered in MyBiz MyProcureNet 5.0.0. A malicious file can be uploaded to the webserver by an attacker. I

48RISCO

abrir ↗

Referência✓ VexDay Proof

eIQnetworks ESA SEARCHREPORT - Remote Overflow (Metasploit)

CVE-2007-5699—remotewindows

Stack-based buffer overflow in eIQNetworks Enterprise Security Analyzer (ESA) 2.5 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2014-9558

CVE-2014-9558—

Multiple SQL injection vulnerabilities in SmartCMS v.2.

23RISCO

abrir ↗

Referência

CVE-2015-7346

CVE-2015-7346—

SQL injection vulnerability in ZCMS 1.1.

23RISCO

abrir ↗

Referência

CVE-2015-7346

CVE-2015-7346—

SQL injection vulnerability in ZCMS 1.1.

23RISCO

abrir ↗

Referência

CVE-2014-9179

CVE-2014-9179—

Cross-site scripting (XSS) vulnerability in the SupportEzzy Ticket System plugin 1.2.5 for WordPress allows remote authe

23RISCO

abrir ↗

Referência

CVE-2008-7010

CVE-2008-7010—

Skalfa Software SkaLinks Exchange Script 1.5 allows remote attackers to add new administrators and gain privileges via a

23RISCO

abrir ↗

Referência

CVE-2023-7304

CVE-2023-7304CRITICAL

Ruijie RG-UAC nmc_sync.php Command Injection

48RISCO

abrir ↗

Referência✓ VexDay Proof

snap - seccomp BBlacklist for TIOCSTI can be Circumvented

CVE-2019-7303MEDIUMdoslinux

Snapd seccomp filter TIOCSTI ioctl bypass

33RISCO

abrir ↗

Referência✓ VexDay Proof

PolDoc CMS 0.96 - 'download_file.php' File Disclosure

CVE-2007-6400—webappsphp

Directory traversal vulnerability in download_file.php in PolDoc CMS (aka PDDMS) 0.96 allows remote attackers to read ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

MX-System 2.7.3 - 'index.php' SQL Injection

CVE-2008-2477—webappsphp

SQL injection vulnerability in index.php in MxBB (aka MX-System) Portal 2.7.3 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

SkaLinks 1.5 - 'register.php' Arbitrary Add Editor

CVE-2008-7010—webappsphp

Skalfa Software SkaLinks Exchange Script 1.5 allows remote attackers to add new administrators and gain privileges via a

23RISCO

abrir ↗

Referência

CVE-2022-29851

CVE-2022-29851CRITICAL

documentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Inj

48RISCO

abrir ↗

Referência

CVE-2017-17721

CVE-2017-17721—

CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, ass

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.