Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.058exploits catalogados

35.300CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.175GitHub PoC 14.096VulnCheck XDB 8.607Nuclei 4.255Metasploit 3.474✓ só verificadosrecentes populares risco

22.175 exploits

Referência

CVE-2009-3362

CVE-2009-3362—

PHP remote file inclusion vulnerability in printnews.php3 in SZNews 2.7 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência

CVE-2012-0902

CVE-2012-0902—

AirTies Air 4450 1.1.2.18 allows remote attackers to cause a denial of service (reboot) via a direct request to cgi-bin/

23RISCO

abrir ↗

Referência

CVE-2017-6089

CVE-2017-6089—

SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2013-3728

CVE-2013-3728—

Cross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users with permissio

23RISCO

abrir ↗

Referência

CVE-2016-3986

CVE-2016-3986—

Avast allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a

23RISCO

abrir ↗

Referência

CVE-2011-4670

CVE-2011-4670—

Multiple cross-site scripting (XSS) vulnerabilities in vTiger CRM 5.2.1 and earlier allow remote attackers to inject arb

23RISCO

abrir ↗

Referência

CVE-2011-4670

CVE-2011-4670—

Multiple cross-site scripting (XSS) vulnerabilities in vTiger CRM 5.2.1 and earlier allow remote attackers to inject arb

23RISCO

abrir ↗

Referência

CVE-2018-11508

CVE-2018-11508—

The compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensitiv

23RISCO

abrir ↗

Referência

CVE-2010-4792

CVE-2010-4792—

Cross-site scripting (XSS) vulnerability in title.php in OPEN IT OverLook 5.0 allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência

CVE-2010-5042

CVE-2010-5042—

Cross-site scripting (XSS) vulnerability in the DJ-ArtGallery (com_djartgallery) component 0.9.1 for Joomla! allows remo

23RISCO

abrir ↗

Referência

CVE-2014-4113

CVE-2014-4113HIGHsob ataque

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

100RISCO

abrir ↗

Referência

CVE-2014-4113

CVE-2014-4113HIGHsob ataque

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

100RISCO

abrir ↗

Referência

CVE-2018-1002001

CVE-2018-1002001—

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability re

23RISCO

abrir ↗

Referência

CVE-2014-4113

CVE-2014-4113HIGHsob ataque

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

100RISCO

abrir ↗

Referência

CVE-2009-4154

CVE-2009-4154—

Directory traversal vulnerability in includes/feedcreator.class.php in Elxis CMS allows remote attackers to read arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

eNdonesia 8.4 - '/mod.php/friend.php/admin.php' Multiple Vulnerabilities

CVE-2006-6872—webappsphp

Directory traversal vulnerability in mod.php in eNdonesia 8.4 allows remote attackers to read arbitrary files via a .. (

23RISCO

abrir ↗

Referência✓ VexDay Proof

Open Azimyt CMS 0.22 - 'lang' Local File Inclusion

CVE-2008-2820—webappsphp

Directory traversal vulnerability in lang/lang-system.php in Open Azimyt CMS 0.22 minimal and 0.21 stable allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

RoseOnlineCMS 3 beta2 - 'op' Local File Inclusion

CVE-2007-1636—webappsphp

Directory traversal vulnerability in index.php in RoseOnlineCMS 3 B1 allows remote attackers to include arbitrary files

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sepcity Classified - 'ID' SQL Injection

CVE-2008-6157—webappsasp

SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which allows context-dependent at

23RISCO

abrir ↗

Referência

CVE-2018-1002002

CVE-2018-1002002—

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability re

23RISCO

abrir ↗

Referência

CVE-2009-2397

CVE-2009-2397—

Directory traversal vulnerability in download.php in Audio Article Directory allows remote attackers to read arbitrary f

23RISCO

abrir ↗

Referência

CVE-2026-15715

CVE-2026-15715MEDIUM

SourceCodester Class and Exam Timetabling System exam.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2014-4114

CVE-2014-4114HIGHsob ataque

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2

100RISCO

abrir ↗

Referência

CVE-2009-3425

CVE-2009-3425—

Directory traversal vulnerability in includes/inc.thcms_admin_dirtree.php in MaxCMS 3.11.20b allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2006-4631

CVE-2006-4631—

Direct static code injection vulnerability in admin/save_opt.php in SoftBB 0.1, and possibly earlier, allows remote auth

23RISCO

abrir ↗

Referência

CVE-2012-10041

CVE-2012-10041CRITICAL

WAN Emulator v2.3 Command Execution

63RISCO

abrir ↗

Referência

CVE-2012-10041

CVE-2012-10041CRITICAL

WAN Emulator v2.3 Command Execution

63RISCO

abrir ↗

Referência

CVE-2017-7004

CVE-2017-7004—

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The

23RISCO

abrir ↗

Referência✓ VexDay Proof

Eudora 7.1 - SMTP ResponseRemote Remote Buffer Overflow

CVE-2007-2770—remotewindows

Stack-based buffer overflow in Eudora 7.1 allows user-assisted, remote SMTP servers to execute arbitrary code via a long

23RISCO

abrir ↗

Referência

CVE-2018-0882

CVE-2018-0882—

The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an el

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.