Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados
35.420CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentespopularesrisco
22.266 exploits
Referência
CVE-2017-8478
CVE-2017-8478—
The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,
23RISCO
abrir ↗
Referência
CVE-2023-27372
CVE-2023-27372CRITICAL
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T
85RISCO
abrir ↗
Referência
CVE-2023-27372
CVE-2023-27372CRITICAL
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T
85RISCO
abrir ↗
Referência
CVE-2023-27372
CVE-2023-27372CRITICAL
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T
85RISCO
abrir ↗
Referência
CVE-2023-27372
CVE-2023-27372CRITICAL
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T
85RISCO
abrir ↗
Referência
Microsoft Windows Server 2016 - Win32k Elevation of Privilege
CVE-2023-29336HIGHsob ataquelocalwindows
Win32k Elevation of Privilege Vulnerability
83RISCO
abrir ↗
Referência
CVE-2017-8917
CVE-2017-8917—
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci
60RISCO
abrir ↗
Referência
CVE-2017-9128
CVE-2017-9128—
The quicktime_video_width function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of
23RISCO
abrir ↗
Referência
CVE-2023-4115
CVE-2023-4115MEDIUM
PHP Jabbers Cleaning Business index.php cross site scripting
48RISCO
abrir ↗
Referência
CVE-2018-0296
CVE-2018-0296HIGHsob ataque
A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remo
100RISCO
abrir ↗
Referência
CVE-2018-10079
CVE-2018-10079—
Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users
23RISCO
abrir ↗
Referência
CVE-2018-10079
CVE-2018-10079—
Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users
23RISCO
abrir ↗
Referência
CVE-2018-10256
CVE-2018-10256—
A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privile
23RISCO
abrir ↗
Referência
Microsoft Windows 11 - Kernel Privilege Escalation
CVE-2024-21338HIGHsob ataqueransomwarelocalwindows
Windows Kernel Elevation of Privilege Vulnerability
83RISCO
abrir ↗
Referência
CVE-2024-22318
CVE-2024-22318MEDIUM
IBM i Access Client Solutions information disclosure
33RISCO
abrir ↗
Referência
Litespeed Cache WordPress Plugin 6.3.0.1 - Privilege Escalation
CVE-2024-28000CRITICALwebappsphp
WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability
75RISCO
abrir ↗
Referência
CVE-2018-11784
CVE-2018-11784—
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a r
60RISCO
abrir ↗
Referência
CVE-2018-12055
CVE-2018-12055—
Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contact_us.ph
23RISCO
abrir ↗
Referência
CVE-2018-12523
CVE-2018-12523—
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /etc/ provi
23RISCO
abrir ↗
Referência
CVE-2018-17394
CVE-2018-17394—
SQL Injection exists in the Timetable Schedule 3.6.8 component for Joomla! via the eid parameter.
23RISCO
abrir ↗
Referência
CVE-2018-17394
CVE-2018-17394—
SQL Injection exists in the Timetable Schedule 3.6.8 component for Joomla! via the eid parameter.
23RISCO
abrir ↗
Referência
CVE-2018-17397
CVE-2018-17397—
SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter.
23RISCO
abrir ↗
Referência
CVE-2018-17397
CVE-2018-17397—
SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter.
23RISCO
abrir ↗
Referência
OpenSSH server (sshd) 9.8p1 - Race Condition
CVE-2024-6387HIGHremotelinux
Openssh: regresshion - race condition in ssh allows rce/dos
63RISCO
abrir ↗
Referência★ 50
PoC for CVE-2025-0282: A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways
CVE-2025-0282CRITICALsob ataqueransomware
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7
100RISCO
abrir ↗
Referência
RPi-Jukebox-RFID 2.8.0 - Remote Command Execution
CVE-2025-10327MEDIUMwebappsmultiple
MiczFlor RPi-Jukebox-RFID shuffle.php os command injection
38RISCO
abrir ↗
Referência
CVE-2025-10370
CVE-2025-10370MEDIUM
MiczFlor RPi-Jukebox-RFID userScripts.php cross site scripting
33RISCO
abrir ↗
Referência
CVE-2026-14239
CVE-2026-14239HIGH
Tourmaster < 5.4.8 - Stored XSS via CSRF
41RISCO
abrir ↗
Referência
CVE-2026-13395
CVE-2026-13395HIGH
Bookly < 27.8 - Unauthenticated SQL Injection via staff_id
41RISCO
abrir ↗
Referência
CVE-2026-13345
CVE-2026-13345MEDIUM
Essential Addons for Elementor - Lite < 6.6.10 - Unauthenticated Draft/Private WooCommerce Product Disclosure via Compare Table
33RISCO
abrir ↗
← anteriorpágina 460 / 743próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.