Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.151exploits catalogados

35.370CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8.617Nuclei 4.257Metasploit 3.474✓ só verificadosrecentes populares risco

22.233 exploits

Referência

CVE-2010-5048

CVE-2010-5048—

Cross-site scripting (XSS) vulnerability in admin.jcomments.php in the JoomlaTune JComments (com_jcomments) component 2.

23RISCO

abrir ↗

Referência

CVE-2015-2999

CVE-2015-2999—

Multiple SQL injection vulnerabilities in SysAid Help Desk before 15.2 allow remote administrators to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2023-3897

CVE-2023-3897MEDIUM

Bypassing CAPTCHA & Enumerating Usernames via Password Reset Page

33RISCO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft e-Friends 4.21 - Admin Session Retrieve

CVE-2007-2824—webappsphp

SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2010-2138

CVE-2010-2138—

Multiple directory traversal vulnerabilities in ProMan 0.1.1 and earlier allow remote attackers to include and execute a

23RISCO

abrir ↗

Referência

CVE-2010-2138

CVE-2010-2138—

Multiple directory traversal vulnerabilities in ProMan 0.1.1 and earlier allow remote attackers to include and execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Interact 2.4.1 - Multiple Remote File Inclusions

CVE-2008-2220—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Interact Learning Community Environment Interact 2.4.1, when regis

23RISCO

abrir ↗

Referência

CVE-2017-0145

CVE-2017-0145HIGHsob ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

abrir ↗

Referência

CVE-2017-0145

CVE-2017-0145HIGHsob ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

abrir ↗

Referência

CVE-2017-0145

CVE-2017-0145HIGHsob ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

abrir ↗

Referência✓ VexDay Proof

cmsWorks 2.2 RC4 - 'mod_root' Remote File Inclusion

CVE-2008-2877—webappsphp

PHP remote file inclusion vulnerability in admin/include/lib.module.php in cmsWorks 2.2 RC4, when register_globals is en

23RISCO

abrir ↗

Referência✓ VexDay Proof

Free Hosting Manager 1.2/2.0 - Insecure Cookie Handling

CVE-2008-3557—webappsphp

Free Hosting Manager 1.2 and 2.0 allows remote attackers to bypass authentication and gain administrative access by sett

23RISCO

abrir ↗

Referência

CVE-2010-2142

CVE-2010-2142—

SQL injection vulnerability in default.asp in Cyberhost allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência

CVE-2009-2772

CVE-2009-2772—

Multiple cross-site scripting (XSS) vulnerabilities in PG Roommate Finder Solution allow remote attackers to inject arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Click N Print Coupons 2006.01 - 'key' SQL Injection

CVE-2006-6859—webappsasp

SQL injection vulnerability in coupon_detail.asp in Website Designs For Less Click N' Print Coupons 2005.01 and earlier

23RISCO

abrir ↗

Referência

CVE-2014-8507

CVE-2014-8507—

Multiple SQL injection vulnerabilities in the queryLastApp method in packages/WAPPushManager/src/com/android/smspush/Wap

23RISCO

abrir ↗

Referência

CVE-2022-4774

CVE-2022-4774CRITICAL

Bit Form < 1.9 - RCE via Unauthenticated Arbitrary File Upload

48RISCO

abrir ↗

Referência✓ VexDay Proof

otscms 2.1.5 - SQL Injection / Cross-Site Scripting

CVE-2007-0846—webappsphp

Cross-site scripting (XSS) vulnerability in forum.php in Open Tibia Server CMS (OTSCMS) 2.1.5 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpQuiz 0.1.2 - SQL Injection / Code Execution

CVE-2006-4978—webappsphp

Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2016-9111

CVE-2016-9111—

Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication r

23RISCO

abrir ↗

Referência

CVE-2016-9111

CVE-2016-9111—

Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication r

23RISCO

abrir ↗

Referência★ 7

CVE-2025-0364: BigAnt Server RCE Exploit

CVE-2025-0364CRITICAL

BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE

48RISCO

abrir ↗

Referência

CVE-2010-2143

CVE-2010-2143—

Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to read arbitrary files and

23RISCO

abrir ↗

Referência

CVE-2017-0147

CVE-2017-0147HIGHsob ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

abrir ↗

Referência

CVE-2017-0147

CVE-2017-0147HIGHsob ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

abrir ↗

Referência✓ VexDay Proof

creative Guestbook 1.0 - Multiple Vulnerabilities

CVE-2007-1479—webappsphp

Cross-site scripting (XSS) vulnerability in Guestbook.php in Creative Guestbook 1.0 allows remote attackers to inject ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

k-links directory - SQL Injection / Cross-Site Scripting

CVE-2008-3581—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in Qsoft K-Links allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft Article Manager Pro 1.6 - Authentication Bypass

CVE-2008-5649—webappsphp

SQL injection vulnerability in admin/admin.php in AlstraSoft Article Manager Pro 1.6 allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2018-5282

CVE-2018-5282—

Kentico 9.0 through 11.0 has a stack-based buffer overflow via the SqlName, SqlPswd, Database, UserName, or Password fie

23RISCO

abrir ↗

Referência

CVE-2020-8424

CVE-2020-8424—

Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.php

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.