Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.020exploits catalogados

35.276CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8.604Nuclei 4.251Metasploit 3.473✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2007-6135

CVE-2007-6135—

Cross-site scripting (XSS) vulnerability in phpslideshow.php in PHPSlideShow 0.9.9.2, and possibly earlier, allows remot

23RISCO

abrir ↗

Referência

CVE-2014-8995

CVE-2014-8995—

SQL injection vulnerability in Maarch LetterBox 2.8 allows remote attackers to execute arbitrary SQL commands via the Us

23RISCO

abrir ↗

Referência

CVE-2017-12970

CVE-2017-12970—

Cross-site request forgery (CSRF) vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authenticati

23RISCO

abrir ↗

Referência

CVE-2017-12970

CVE-2017-12970—

Cross-site request forgery (CSRF) vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authenticati

23RISCO

abrir ↗

Referência

CVE-2009-4961

CVE-2009-4961—

Lanai Core 0.6 allows remote attackers to obtain configuration information via a direct request to info.php, which calls

23RISCO

abrir ↗

Referência

CVE-2009-2329

CVE-2009-2329—

KerviNet Forum 1.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) admin

23RISCO

abrir ↗

Referência

CVE-2017-16513

CVE-2017-16513—

Ipswitch WS_FTP Professional before 12.6.0.3 has buffer overflows in the local search field and the backup locations fie

23RISCO

abrir ↗

Referência

CVE-2017-16570

CVE-2017-16570—

KeystoneJS before 4.0.0-beta.7 allows application-wide CSRF bypass by removing the CSRF parameter and value, aka SecureL

23RISCO

abrir ↗

Referência

CVE-2008-0233

CVE-2008-0233—

Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote attackers to bypass intended acce

23RISCO

abrir ↗

Referência

CVE-2010-5053

CVE-2010-5053—

SQL injection vulnerability in the XOBBIX (com_xobbix) component 1.0.1 for Joomla! allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2010-5053

CVE-2010-5053—

SQL injection vulnerability in the XOBBIX (com_xobbix) component 1.0.1 for Joomla! allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

SPBAS Business Automation Software 2012 - Multiple Vulnerabilities

CVE-2013-4664—webappsphp

SPBAS Business Automation Software 2012 has XSS.

23RISCO

abrir ↗

Referência✓ VexDay Proof

PhShoutBox 1.5 - Insecure Cookie Handling

CVE-2008-1971—webappsphp

phShoutBox Final 1.5 and earlier only checks passwords when specified in $_POST, which allows remote attackers to gain p

23RISCO

abrir ↗

Referência✓ VexDay Proof

DreamPics Builder - 'page' SQL Injection

CVE-2008-3119—webappsphp

SQL injection vulnerability in index.php in DreamPics Builder allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mole Group Real Estate Script 1.1 - SQL Injection

CVE-2008-3123—webappsphp

SQL injection vulnerability in index.php in Mole Group Real Estate Script 1.1 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Referência

CVE-2010-1983

CVE-2010-1983—

Directory traversal vulnerability in the redTWITTER (com_redtwitter) component 1.0.x including 1.0b11 for Joomla! allows

43RISCO

abrir ↗

Referência

CVE-2010-1983

CVE-2010-1983—

Directory traversal vulnerability in the redTWITTER (com_redtwitter) component 1.0.x including 1.0b11 for Joomla! allows

43RISCO

abrir ↗

Referência

CVE-2014-7176

CVE-2014-7176—

SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2014-7176

CVE-2014-7176—

SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2018-25426

CVE-2018-25426HIGH

WinMTR 0.91 Denial of Service via Buffer Overflow

41RISCO

abrir ↗

Referência

CVE-2009-3949

CVE-2009-3949—

cp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative authentication for the donewau

23RISCO

abrir ↗

Referência

CVE-2020-28092

CVE-2020-28092—

PESCMS Team 2.3.2 has multiple reflected XSS via the id parameter:?g=Team&m=Task&a=my&status=3&id=,?g=Team&m=Task&a=my&s

23RISCO

abrir ↗

Referência

CVE-2018-10109

CVE-2018-10109—

Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload

23RISCO

abrir ↗

Referência✓ VexDay Proof

hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities

CVE-2007-6504—webappsasp

Unspecified vulnerability in IIS/iibind.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticate

23RISCO

abrir ↗

Referência

CVE-2025-13188

CVE-2025-13188CRITICAL

D-Link DIR-816L authentication.cgi authenticationcgi_main stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2009-3065

CVE-2009-3065—

PHP remote file inclusion vulnerability in editor/edit_htmlarea.php in Ve-EDIT 0.1.4 allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2015-7714

CVE-2015-7714—

Multiple SQL injection vulnerabilities in the Realtyna RPL (com_rpl) component before 8.9.5 for Joomla! allow remote adm

23RISCO

abrir ↗

Referência

CVE-2015-7714

CVE-2015-7714—

Multiple SQL injection vulnerabilities in the Realtyna RPL (com_rpl) component before 8.9.5 for Joomla! allow remote adm

23RISCO

abrir ↗

Referência✓ VexDay Proof

ContentNow 1.4.1 - Arbitrary File Upload / Cross-Site Scripting

CVE-2008-3180—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in upload/file/language_menu.php in ContentNow CMS 1.4.1 allow remot

23RISCO

abrir ↗

Referência

CVE-2018-1203

CVE-2018-1203—

In Dell EMC Isilon OneFS, the compadmin is able to run tcpdump binary with root privileges. In versions between 8.1.0.0

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.