Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.056exploits catalogados

35.925CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8.755Nuclei 4.333Metasploit 3.478✓ só verificadosrecentes populares risco

22.600 exploits

Referência

CVE-2021-47956

CVE-2021-47956HIGH

EgavilanMedia PHPCRUD 1.0 SQL Injection via firstname

41RISCO

abrir ↗

Referência

CVE-2020-37242

CVE-2020-37242HIGH

WordPress Plugin Supsystic Ultimate Maps 1.1.12 SQL Injection via sidx

41RISCO

abrir ↗

Referência

CVE-2009-3187

CVE-2009-3187—

Cross-site scripting (XSS) vulnerability in gamelist.php in Stand Alone Arcade 1.1 allows remote attackers to inject arb

23RISCO

abrir ↗

Referência

CVE-2009-3189

CVE-2009-3189—

Cross-site scripting (XSS) vulnerability in search.php in DigiOz Guestbook 1.7.2 allows remote attackers to inject arbit

23RISCO

abrir ↗

Referência

CVE-2015-7601

CVE-2015-7601—

Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ..//

50RISCO

abrir ↗

Referência

CVE-2009-4685

CVE-2009-4685—

Cross-site scripting (XSS) vulnerability in celebrities.php in PHP Scripts Now Astrology allows remote attackers to inje

23RISCO

abrir ↗

Referência

CVE-2009-4684

CVE-2009-4684—

Cross-site scripting (XSS) vulnerability in index.php in EZodiak allows remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Referência

CVE-2009-4464

CVE-2009-4464—

Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2026-75877

CVE-2026-75877CRITICAL

TRENDnet TV-IP751WIC alphapd FUN_0043372C stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2008-6924

CVE-2008-6924—

Multiple cross-site scripting (XSS) vulnerabilities in register.php in eSyndiCat Directory 2.2 allow remote attackers to

23RISCO

abrir ↗

Referência

CVE-2009-4575

CVE-2009-4575—

Cross-site scripting (XSS) vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 RC2 for Joomla! allows remote

23RISCO

abrir ↗

Referência

CVE-2010-2317

CVE-2010-2317—

Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2010-2319

CVE-2010-2319—

SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência

CVE-2015-7714

CVE-2015-7714—

Multiple SQL injection vulnerabilities in the Realtyna RPL (com_rpl) component before 8.9.5 for Joomla! allow remote adm

23RISCO

abrir ↗

Referência

CVE-2026-75783

CVE-2026-75783CRITICAL

TRENDnet TEW-WLC100P DHCP blobmsg netifd stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2009-3562

CVE-2009-3562—

Cross-site scripting (XSS) vulnerability in Xerver HTTP Server 4.32 allows remote attackers to inject arbitrary web scri

23RISCO

abrir ↗

Referência

CVE-2011-10010

CVE-2011-10010CRITICAL

QuickShare File Server 1.2.1 Path Traversal RCE

63RISCO

abrir ↗

Referência

CVE-2011-10010

CVE-2011-10010CRITICAL

QuickShare File Server 1.2.1 Path Traversal RCE

63RISCO

abrir ↗

Referência

CVE-2011-10010

CVE-2011-10010CRITICAL

QuickShare File Server 1.2.1 Path Traversal RCE

63RISCO

abrir ↗

Referência

CVE-2011-10010

CVE-2011-10010CRITICAL

QuickShare File Server 1.2.1 Path Traversal RCE

63RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Fusion 6.01.14 - Blind SQL Injection

CVE-2008-1918—webappsphp

SQL injection vulnerability in submit.php in PHP-Fusion 6.01.14 and 6.00.307, when magic_quotes_gpc is disabled and the

23RISCO

abrir ↗

Referência

CVE-2009-4857

CVE-2009-4857—

Cross-site scripting (XSS) vulnerability in login.php in PHP Photo Vote 1.3F allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2009-4523

CVE-2009-4523—

Cross-site scripting (XSS) vulnerability in index.php in Zainu 1.0 allows remote attackers to inject arbitrary web scrip

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPAuctionSystem - Cross-Site Scripting / SQL Injection

CVE-2009-0107—webappsphp

Cross-site scripting (XSS) vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2009-4681

CVE-2009-4681—

Cross-site scripting (XSS) vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to inject arbit

23RISCO

abrir ↗

Referência

CVE-2009-4681

CVE-2009-4681—

Cross-site scripting (XSS) vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to inject arbit

23RISCO

abrir ↗

Referência

CVE-2007-5647

CVE-2007-5647—

Multiple cross-site scripting (XSS) vulnerabilities in SocketKB 1.1.5 allow remote attackers to inject arbitrary web scr

23RISCO

abrir ↗

Referência

CVE-2009-4601

CVE-2009-4601—

Cross-site scripting (XSS) vulnerability in basic_search_result.php in Zeeways ZeeJobsite 3x allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2023-23059

CVE-2023-23059CRITICAL

An issue was discovered in GeoVision GV-Edge Recording Manager 2.2.3.0 for windows, which contains improper permissions

48RISCO

abrir ↗

Referência

CVE-2009-3202

CVE-2009-3202—

Cross-site scripting (XSS) vulnerability in search.php in ULoKI PHP Forum 2.1 allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.