Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.302exploits catalogados

35.469CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8.646Nuclei 4.289Metasploit 3.474✓ só verificadosrecentes populares risco

22.301 exploits

Referência

CVE-2021-27964

CVE-2021-27964—

SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send a POST request to /Con

50RISCO

abrir ↗

Referência

CVE-2009-3597

CVE-2009-3597—

Digitaldesign CMS 0.1 stores sensitive information under the web root with insufficient access control, which allows rem

23RISCO

abrir ↗

Referência

CVE-2012-4362

CVE-2012-4362—

hydra.exe in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance has a hardcoded password of L0CAlu53R for the global$a

23RISCO

abrir ↗

Referência

CVE-2012-4362

CVE-2012-4362—

hydra.exe in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance has a hardcoded password of L0CAlu53R for the global$a

23RISCO

abrir ↗

Referência✓ VexDay Proof

b1gbb 2.24.0 - SQL Injection / Cross-Site Scripting

CVE-2007-3590—webappsphp

Cross-site scripting (XSS) vulnerability in visitenkarte.php in b1gBB 2.24.0 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Ring Webring System 0.9.1 - Insecure Cookie Handling

CVE-2008-3602—webappsphp

admin/wr_admin.php in PHP-Ring Webring System (aka uPHP_ring_website) 0.9.1 allows remote attackers to bypass authentica

23RISCO

abrir ↗

Referência

CVE-2023-38951

CVE-2023-38951CRITICAL

ZKTeco BioTime 8.5.5 through 9.x before 9.0.1 (20240617.19506) allows authenticated attackers to create or overwrite arb

48RISCO

abrir ↗

Referência

CVE-2007-1524

CVE-2007-1524—

Directory traversal vulnerability in themes/default/ in ZomPlog 3.7.6 and earlier allows remote attackers to include arb

23RISCO

abrir ↗

Referência

CVE-2013-6233

CVE-2013-6233—

Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2013-6233

CVE-2013-6233—

Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2014-2962

CVE-2014-2962—

Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware befor

50RISCO

abrir ↗

Referência

CVE-2010-1494

CVE-2010-1494—

Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to re

43RISCO

abrir ↗

Referência

CVE-2010-1494

CVE-2010-1494—

Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to re

43RISCO

abrir ↗

Referência

CVE-2015-6811

CVE-2015-6811—

SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlie

23RISCO

abrir ↗

Referência

CVE-2015-6811

CVE-2015-6811—

SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlie

23RISCO

abrir ↗

Referência

CVE-2015-2789

CVE-2015-2789—

Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.

23RISCO

abrir ↗

Referência

CVE-2020-18724

CVE-2020-18724—

Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19

23RISCO

abrir ↗

Referência

CVE-2024-10811

CVE-2024-10811CRITICAL

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up

48RISCO

abrir ↗

Referência

CVE-2023-0905

CVE-2023-0905HIGH

SourceCodester Employee Task Management System changePasswordForEmployee.php improper authentication

41RISCO

abrir ↗

Referência

CVE-2025-34187

CVE-2025-34187CRITICAL

Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell

48RISCO

abrir ↗

Referência

CVE-2025-34187

CVE-2025-34187CRITICAL

Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell

48RISCO

abrir ↗

Referência

CVE-2018-13989

CVE-2018-13989—

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable

23RISCO

abrir ↗

Referência

CVE-2018-13989

CVE-2018-13989—

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable

23RISCO

abrir ↗

Referência

CVE-2012-10059

CVE-2012-10059CRITICAL

Dolibarr ERP/CRM Post-Auth OS Command Injection

63RISCO

abrir ↗

Referência

CVE-2018-7318

CVE-2018-7318—

SQL Injection exists in the CheckList 1.1.1 component for Joomla! via the title_search, tag_search, name_search, descrip

23RISCO

abrir ↗

Referência✓ VexDay Proof

webSPELL 4.2.0e - 'page' Blind SQL Injection

CVE-2009-1912—webappsphp

Directory traversal vulnerability in src/func/language.php in webSPELL 4.2.0e and earlier allows remote attackers to inc

23RISCO

abrir ↗

Referência

CVE-2012-10059

CVE-2012-10059CRITICAL

Dolibarr ERP/CRM Post-Auth OS Command Injection

63RISCO

abrir ↗

Referência

CVE-2012-10059

CVE-2012-10059CRITICAL

Dolibarr ERP/CRM Post-Auth OS Command Injection

63RISCO

abrir ↗

Referência

CVE-2012-10059

CVE-2012-10059CRITICAL

Dolibarr ERP/CRM Post-Auth OS Command Injection

63RISCO

abrir ↗

Referência

CVE-2018-0880

CVE-2018-0880—

The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an el

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.