Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2009-4093

CVE-2009-4093—

Multiple cross-site scripting (XSS) vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

wget 1.10.2 - Unchecked Boundary Condition Denial of Service

CVE-2006-6719—dosmultiple

The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause

23RISCO

abrir ↗

Referência✓ VexDay Proof

IP Reg 0.3 - Multiple SQL Injections

CVE-2007-6579—webappsphp

Multiple SQL injection vulnerabilities in Ip Reg 0.3 allow remote attackers to execute arbitrary SQL commands via the vl

23RISCO

abrir ↗

Referência

CVE-2010-4989

CVE-2010-4989—

SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2023-0037

CVE-2023-0037CRITICAL

10WebMapBuilder < 1.0.73 - Unauthenticated SQLi

63RISCO

abrir ↗

Referência

CVE-2014-1636

CVE-2014-1636—

Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Freelance Auction Script 1.0 - 'browseproject.php' SQL Injection

CVE-2008-2278—webappsphp

SQL injection vulnerability in browseproject.php in Freelance Auction Script 1.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2015-1375

CVE-2015-1375—

pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not properly restrict access to the upload

28RISCO

abrir ↗

Referência

CVE-2010-2042

CVE-2010-2042—

SQL injection vulnerability in search.php in ECShop 2.7.2 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2019-1642

CVE-2019-1642MEDIUM

Cisco Firepower Management Center Cross-Site Scripting Vulnerability

33RISCO

abrir ↗

Referência

CVE-2018-20503

CVE-2018-20503—

Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask parameter.

23RISCO

abrir ↗

Referência

CVE-2012-10060

CVE-2012-10060CRITICAL

Sysax Multi Server < 5.55 SSH Username Buffer Overflow

63RISCO

abrir ↗

Referência

CVE-2012-10060

CVE-2012-10060CRITICAL

Sysax Multi Server < 5.55 SSH Username Buffer Overflow

63RISCO

abrir ↗

Referência

CVE-2009-4146

CVE-2009-4146—

The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1, 7.2, and 8.0 does not c

38RISCO

abrir ↗

Referência

CVE-2012-5388

CVE-2012-5388—

Cross-site scripting (XSS) vulnerability in wlcms-plugin.php in the White Label CMS plugin 1.5 for WordPress allows remo

23RISCO

abrir ↗

Referência

CVE-2010-1266

CVE-2010-1266—

Multiple PHP remote file inclusion vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to execu

23RISCO

abrir ↗

Referência

CVE-2026-9060

CVE-2026-9060LOW

Agile Store Locator < 1.6.6 - Admin+ Stored XSS via map_style

28RISCO

abrir ↗

Referência

CVE-2010-1266

CVE-2010-1266—

Multiple PHP remote file inclusion vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Internet Explorer - MDAC Remote Code Execution (MS06-014)

CVE-2006-0003—remotewindows

Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and dis

60RISCO

abrir ↗

Referência✓ VexDay Proof

Etomite CMS 0.6.1 - 'rfiles.php' Remote Command Execution

CVE-2006-7070—webappsphp

Unrestricted file upload vulnerability in manager/media/ibrowser/scripts/rfiles.php in Etomite CMS 0.6.1 and earlier all

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Stats 0.1.9.2 - Multiple Vulnerabilities

CVE-2007-5453—webappsphp

Multiple eval injection vulnerabilities in Php-Stats 0.1.9.2 allow remote authenticated administrators to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2010-4993

CVE-2010-4993—

SQL injection vulnerability in the eventcal (com_eventcal) component 1.6.4 for Joomla! allows remote attackers to execut

23RISCO

abrir ↗

Referência

CVE-2010-4993

CVE-2010-4993—

SQL injection vulnerability in the eventcal (com_eventcal) component 1.6.4 for Joomla! allows remote attackers to execut

23RISCO

abrir ↗

Referência

CVE-2019-10349

CVE-2019-10349—

A stored cross site scripting vulnerability in Jenkins Dependency Graph Viewer Plugin 0.13 and earlier allowed attackers

23RISCO

abrir ↗

Referência

CVE-2025-34073

CVE-2025-34073CRITICAL

stamparm/maltrail <=0.54 Remote Command Execution

63RISCO

abrir ↗

Referência

CVE-2025-34073

CVE-2025-34073CRITICAL

stamparm/maltrail <=0.54 Remote Command Execution

63RISCO

abrir ↗

Referência

CVE-2017-13754

CVE-2017-13754—

Cross-site scripting (XSS) vulnerability in the "advanced settings - time server" module in Wibu-Systems CodeMeter befor

23RISCO

abrir ↗

Referência

CVE-2009-5137

CVE-2009-5137—

Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a lo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Web Wiz NewsPad 1.02 - 'sub' Directory Traversal

CVE-2008-0479—webappsasp

Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbitr

23RISCO

abrir ↗

Referência

CVE-2020-26820

CVE-2020-26820CRITICAL

SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is authenticated as an administra

48RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.