Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados
35.840CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentespopularesrisco
22.600 exploits
Referência
CVE-2009-3174
CVE-2009-3174—
PHP remote file inclusion vulnerability in fonctions_racine.php in OBOphiX 2.7.0 and earlier allows remote attackers to
23RISCO
abrir ↗
Referência
CVE-2009-2633
CVE-2009-2633—
PHP remote file inclusion vulnerability in toolbar_ext.php in the VehicleManager (com_vehiclemanager) component 1.0 Basi
23RISCO
abrir ↗
Referência
CVE-2026-15557
CVE-2026-15557MEDIUM
waooAI waoowaoo Internal Task Header api-auth.ts requireProjectAuthLight improper authentication
33RISCO
abrir ↗
Referência✓ VexDay Proof
MojoJobs - Blind SQL Injection
CVE-2008-3267—webappscgi
SQL injection vulnerability in mojoJobs.cgi in MojoJobs allows remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗
Referência
CVE-2025-34055
CVE-2025-34055CRITICAL
AVTECH IP camera, DVR, and NVR Devices Authenticated Root Command Execution
48RISCO
abrir ↗
Referência
CVE-2019-6979
CVE-2019-6979—
An issue was discovered in the User IP History Logs (aka IP_History_Logs) plugin 1.0.2 for MyBB. There is XSS via the ad
23RISCO
abrir ↗
Referência
CVE-2009-4512
CVE-2009-4512—
Directory traversal vulnerability in index.php in Oscailt 3.3, when Use Friendly URL's is disabled, allows remote attack
23RISCO
abrir ↗
Referência
CVE-2014-9145
CVE-2014-9145—
Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗
Referência
CVE-2005-0413
CVE-2005-0413—
Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (
23RISCO
abrir ↗
Referência
CVE-2009-2306
CVE-2009-2306—
The ARD-9808 DVR card security camera stores sensitive information under the web root with insufficient access control,
23RISCO
abrir ↗
Referência
CVE-2009-3180
CVE-2009-3180—
Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user param
23RISCO
abrir ↗
Referência
CVE-2010-2031
CVE-2010-2031—
KAVSafe.sys 2010.4.14.609 and earlier, as used in Kingsoft Webshield 3.5.1.2 and earlier, allows local users to overwrit
23RISCO
abrir ↗
Referência
CVE-2013-3961
CVE-2013-3961—
SQL injection vulnerability in edit_event.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to exe
23RISCO
abrir ↗
Referência✓ VexDay Proof
FreeStyle Wiki 3.6.2 - 'user.dat' Password Disclosure
CVE-2006-6889—webappsphp
FreeStyle Wiki (fswiki) 3.6.2 and earlier stores sensitive information under the web root with insufficient access contr
23RISCO
abrir ↗
Referência✓ VexDay Proof
Eudora 7.1.0.9 - IMAP FLAGS Remote Overwrite (SEH)
CVE-2007-3166—remotewindows
Buffer overflow in Qualcomm Eudora 7.1.0.9 allows user-assisted, remote IMAP servers to execute arbitrary code via a lon
23RISCO
abrir ↗
Referência
CVE-2023-27350
CVE-2023-27350CRITICALsob ataqueransomware
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui
100RISCO
abrir ↗
Referência
CVE-2009-2340
CVE-2009-2340—
SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗
Referência✓ VexDay Proof
KnowledgeQuest 2.6 - SQL Injection
CVE-2008-1726—webappsphp
Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is disabled, allow remote attackers
23RISCO
abrir ↗
Referência
CVE-2012-1023
CVE-2012-1023—
Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to redirect users to arbitrary
23RISCO
abrir ↗
Referência
CVE-2010-4801
CVE-2010-4801—
Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute
23RISCO
abrir ↗
Referência
CVE-2010-4801
CVE-2010-4801—
Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute
23RISCO
abrir ↗
Referência
CVE-2025-34112
CVE-2025-34112CRITICAL
Riverbed SteelCentral NetProfiler / NetExpress 10.8.7 RCE
63RISCO
abrir ↗
Referência
CVE-2021-22557
CVE-2021-22557MEDIUM
Code execution in SLO Generator via YAML Payload
33RISCO
abrir ↗
Referência
CVE-2023-3526
CVE-2023-3526CRITICAL
PHOENIX CONTACT: Cross-site Scripting vulnerability in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices
48RISCO
abrir ↗
Referência
CVE-2026-14187
CVE-2026-14187LOW
Tutor LMS < 4.0.6 - Instructor+ Cross-Instructor Private Course Disclosure via IDOR
28RISCO
abrir ↗
Referência
CVE-2026-22681
CVE-2026-22681HIGH
OpenViking < 0.3.4 SSRF via /api/v1/resources
41RISCO
abrir ↗
Referência
CVE-2026-49114
CVE-2026-49114MEDIUM
ONNX symlink-following and path-traversal arbitrary file write
33RISCO
abrir ↗
Referência✓ VexDay Proof
PHP Help Agent 1.1 - 'content' Local File Inclusion
CVE-2008-3385—webappsphp
Directory traversal vulnerability in include/head_chat.inc.php in php Help Agent 1.0 and 1.1 Full allows remote attacker
23RISCO
abrir ↗
Referência
CVE-2012-5104
CVE-2012-5104—
Cross-site scripting (XSS) vulnerability in forums/ubbthreads.php in UBB.threads 7.5.6 and earlier allows remote attacke
23RISCO
abrir ↗
Referência
CVE-2014-3992
CVE-2014-3992—
Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote authenticated users to execute arbitrary S
23RISCO
abrir ↗
← anteriorpágina 647 / 754próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.