Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

22.492 exploits

Referência

CVE-2020-25015

CVE-2020-25015—

A specific router allows changing the Wi-Fi password remotely. Genexis Platinum 4410 V2-1.28, a compact router generally

23RISCO

abrir ↗

Referência

CVE-2021-31762

CVE-2021-31762—

Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privileged user through Webmin's add users fea

23RISCO

abrir ↗

Referência

CVE-2009-4224

CVE-2009-4224—

Multiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and earlier allow remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2013-5954

CVE-2013-5954—

Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.11 and earlier allow remote attackers to hijack

23RISCO

abrir ↗

Referência

CVE-2018-18755

CVE-2018-18755—

K-iwi Framework 1775 has SQL Injection via the admin/user/group/update user_group_id parameter or the admin/user/user/up

23RISCO

abrir ↗

Referência

CVE-2018-18755

CVE-2018-18755—

K-iwi Framework 1775 has SQL Injection via the admin/user/group/update user_group_id parameter or the admin/user/user/up

23RISCO

abrir ↗

Referência✓ VexDay Proof

KDPics 1.11 - 'exif.php?lib_path' Remote File Inclusion

CVE-2006-6516—webappsphp

Multiple PHP remote file inclusion vulnerabilities in KDPics 1.16 and earlier allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

CzarNews 1.14 - 'tpath' Remote File Inclusion

CVE-2005-0859—webappsphp

PHP remote file inclusion vulnerability in CzarNews 1.13b allows remote attackers to execute arbitrary PHP code via the

28RISCO

abrir ↗

Referência✓ VexDay Proof

FlashFXP 3.4.0 build 1145 - Remote Buffer Overflow (Denial of Service) (PoC)

CVE-2007-0825—doswindows

FlashFXP 3.4.0 build 1145 allows remote servers to cause a denial of service (CPU consumption) via a response to a PWD c

23RISCO

abrir ↗

Referência✓ VexDay Proof

TorrentTrader Classic 1.07 - Multiple Vulnerabilities

CVE-2007-5311—webappsphp

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic Edition 1.07 allows remote att

23RISCO

abrir ↗

Referência

CVE-2012-5913

CVE-2012-5913—

Cross-site scripting (XSS) vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allo

38RISCO

abrir ↗

Referência

CVE-2023-23956

CVE-2023-23956MEDIUM

A user can supply malicious HTML and JavaScript code that will be executed in the client browser

33RISCO

abrir ↗

Referência

CVE-2009-2600

CVE-2009-2600—

Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to rea

23RISCO

abrir ↗

Referência

CVE-2016-6664

CVE-2016-6664—

mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server befo

23RISCO

abrir ↗

Referência

CVE-2016-6664

CVE-2016-6664—

mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server befo

23RISCO

abrir ↗

Referência

CVE-2020-7991

CVE-2020-7991—

Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password.

23RISCO

abrir ↗

Referência

CVE-2020-7991

CVE-2020-7991—

Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password.

23RISCO

abrir ↗

Referência

CVE-2021-21466

CVE-2021-21466CRITICAL

SAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA, versions 100, 200, allow

48RISCO

abrir ↗

Referência✓ VexDay Proof

ExBB 0.22 - Local/Remote File Inclusion

CVE-2008-1862—webappsphp

ExBB Italia 0.22 and earlier only checks GET requests that use the QUERY_STRING for certain path manipulations, which al

23RISCO

abrir ↗

Referência

CVE-2009-4234

CVE-2009-4234—

Cross-site scripting (XSS) vulnerability in loginpages/error_user.shtml on the Micronet Network Access Controller SP1910

23RISCO

abrir ↗

Referência

Joomla JS Jobs plugin 1.4.2 - SQL injection

CVE-2025-49484HIGHwebappsphp

Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.1 for Joomla

41RISCO

abrir ↗

Referência✓ VexDay Proof

Mantis Bug Tracker 1.1.1 - Code Execution / Cross-Site Scripting / Cross-Site Request Forgery

CVE-2008-2276—webappsphp

Cross-site request forgery (CSRF) vulnerability in manage_user_create.php in Mantis 1.1.1 allows remote attackers to cre

23RISCO

abrir ↗

Referência✓ VexDay Proof

Observer 0.3.2.1 - Multiple Remote Command Execution Vulnerabilities

CVE-2008-4318—webappsphp

Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query

28RISCO

abrir ↗

Referência

CVE-2013-3525

CVE-2013-3525—

SQL injection vulnerability in Approvals/ in Request Tracker (RT) 4.0.10 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2021-30030

CVE-2021-30030—

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Full Name field on register-patient.php.

23RISCO

abrir ↗

Referência

CVE-2010-4398

CVE-2010-4398HIGHsob ataque

Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Wi

71RISCO

abrir ↗

Referência

CVE-2010-4398

CVE-2010-4398HIGHsob ataque

Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Wi

71RISCO

abrir ↗

Referência

CVE-2026-13400

CVE-2026-13400MEDIUM

Simply Schedule Appointments < 1.6.12.4 - Unauthenticated Stored XSS via Booking Customer Information

33RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 1.0.154.53 - Null Pointer Remote Crash

CVE-2009-1514—doswindows

Google Chrome 1.0.154.53 allows remote attackers to cause a denial of service (NULL pointer dereference and application

23RISCO

abrir ↗

Referência

CVE-2014-3704

CVE-2014-3704—

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.