Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.836exploits catalogados

32.133CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8.156Nuclei 4.201Metasploit 3.462✓ só verificadosrecentes populares risco

4.201 exploits

Nucleihigh

WordPress Competition Form Plugin <= 2.0 - Cross-Site Scripting

CVE-2024-12749HIGH

Competition Form <= 2.0 - Reflected XSS

36RISCO

abrir ↗

Nucleimedium

BentoML v1.3.9 - Open Redirect

CVE-2024-12760—

15RISCO

abrir ↗

Nucleicritical

Nokri – Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Change

CVE-2024-12824CRITICAL

Nokri – Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Change

43RISCO

abrir ↗

Nucleihigh

Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Arbitrary File Read

CVE-2024-12849HIGH

Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Unauthenticated Arbitrary File Read

48RISCO

abrir ↗

Nucleimedium

Custom Field Manager WordPress - Cross-Site Scripting

CVE-2024-12873MEDIUM

Custom Field Manager <= 1.0 - Reflected XSS Vulnerability

28RISCO

abrir ↗

Nucleimedium

Lazy Blocks <= 3.8.2 - Cross-Site Scripting

CVE-2024-12878HIGH

Custom Block Builder – Lazy Blocks < 3.8.3 - Reflected XSS

36RISCO

abrir ↗

Nucleicritical

DrayTek Vigor - Command Injection

CVE-2024-12987MEDIUMsob ataque

DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection

100RISCO

abrir ↗

Nucleihigh

Dyn Business Panel Plugin <= 1.0.0 - Cross-Site Scripting

CVE-2024-13055HIGH

Dyn Business Panel <= 1.0.0 - Reflected XSS

36RISCO

abrir ↗

Nucleihigh

WP Triggers Lite - Cross-Site Scripting

CVE-2024-13094HIGH

WP Triggers Lite <= 2.5.3 - Reflected XSS

36RISCO

abrir ↗

Nucleimedium

WP Finance Plugin <= 1.3.6 - Cross-Site Scripting

CVE-2024-13097MEDIUM

WP Finance <= 1.3.6 - Reflected XSS

28RISCO

abrir ↗

Nucleimedium

WordPress Email Newsletter - Reflected XSS

CVE-2024-13098MEDIUM

WP Email Newsletter <= 1.1 - Reflected XSS

28RISCO

abrir ↗

Nucleimedium

Widget4Call WordPress - Cross-Site Scripting

CVE-2024-13099MEDIUM

Widget4call <= 1.0.7 - Reflected XSS

28RISCO

abrir ↗

Nucleimedium

WP MediaTagger <= 4.1.1 - Cross-Site Scripting

CVE-2024-13112MEDIUM

WP MediaTagger <= 4.1.1 - Reflected XSS

28RISCO

abrir ↗

Nucleimedium

WP Projects Portfolio <= 3.0 - Cross-Site Scripting

CVE-2024-13114MEDIUM

WP Projects Portfolio with Client Testimonials <= 3.0 - Reflected XSS

28RISCO

abrir ↗

Nucleimedium

WordPress Download Manager < 3.3.07 - Unauthenticated Data Exposure

CVE-2024-13126MEDIUM

Download Manager < 3.3.07 - Unauthenticated Data Exposure

28RISCO

abrir ↗

Nucleicritical

Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcardRecursive

CVE-2024-13159CRITICALsob ataque

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up

100RISCO

abrir ↗

Nucleicritical

Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcard

CVE-2024-13160CRITICALsob ataque

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up

100RISCO

abrir ↗

Nucleicritical

Ivanti EPM - Credential Coercion Vulnerability in GetHashForSingleFile

CVE-2024-13161CRITICALsob ataque

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up

100RISCO

abrir ↗

Nucleimedium

CVE-2024-13219MEDIUM

Policy Genius <= 2.0.4 - Reflected XSS

28RISCO

abrir ↗

Nucleimedium

WordPress Google Map Professional - Cross-Site Scripting

CVE-2024-13220MEDIUM

Google Map Professional <= 1.0 - Reflected XSS

28RISCO

abrir ↗

Nucleimedium

Fantastic ElasticSearch Plugin <= 4.1.0 - Cross-Site Scripting

CVE-2024-13221MEDIUM

Fantastic Elasticsearch <= 4.1.0 - Reflected XSS

28RISCO

abrir ↗

Nucleimedium

WordPress User Messages <= 1.2.4 - Reflected XSS

CVE-2024-13222MEDIUM

User Messages <= 1.2.4 - Reflected XSS

28RISCO

abrir ↗

Nucleimedium

SlideDeck 1 Lite Content Slider - Cross-Site Scripting

CVE-2024-13224MEDIUM

SlideDeck 1 Lite Content Slider <= 1.4.8 - Reflected XSS

28RISCO

abrir ↗

Nucleimedium

ECT Home Page Products - Reflected XSS

CVE-2024-13225MEDIUM

ECT Home Page Products <= 1.9 - Reflected XSS

28RISCO

abrir ↗

Nucleimedium

A5 Custom Login Page - Reflected XSS

CVE-2024-13226MEDIUM

A5 Custom Login Page <= 2.8.1 - Reflected XSS

28RISCO

abrir ↗

Nucleihigh

Ads Pro Plugin <= 4.88 - Unauthenticated SQL Injection

CVE-2024-13322HIGH

Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.88 - Unauthenticated SQL Injection

36RISCO

abrir ↗

Nucleimedium

Glossy WordPress - Reflected XSS

CVE-2024-13325MEDIUM

Glossy <= 2.3.5 - Reflected XSS

28RISCO

abrir ↗

Nucleimedium

iBuildApp <= 0.2.0 - Reflected Cross-Site Scripting

CVE-2024-13326MEDIUM

iBuildApp <= 0.2.0 - Reflected XSS

28RISCO

abrir ↗

Nucleimedium

Musicbox WordPress - Reflected XSS

CVE-2024-13327MEDIUM

Musicbox <= 2.0.3 - Reflected XSS

28RISCO

abrir ↗

Nucleimedium

Giga Messenger WordPress - Cross-Site Scripting

CVE-2024-13328MEDIUM

Giga Messenger Bots <= 2.3.1 - Reflected XSS

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.