Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.836exploits catalogados

32.133CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8.156Nuclei 4.201Metasploit 3.462✓ só verificadosrecentes populares risco

4.201 exploits

Nucleicritical

SDT-CW3B1 1.1.0 - OS Command Injection

CVE-2021-46422—

Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute

60RISCO

abrir ↗

Nucleicritical

Telesquare TLR-2005KSH 1.0.0 - Arbitrary File Delete

CVE-2021-46424—

Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to de

50RISCO

abrir ↗

Nucleicritical

GenieACS => 1.2.8 - OS Command Injection

CVE-2021-46704—

In GenieACS 1.2.x before 1.2.8, the UI interface API is vulnerable to unauthenticated OS command injection via the ping

23RISCO

abrir ↗

Nucleimedium

Keystone 6 Login Page - Open Redirect and Cross-Site Scripting

CVE-2022-0087HIGH

Cross-site Scripting (XSS) - Reflected in keystonejs/keystone

36RISCO

abrir ↗

Nucleimedium

WordPress Visual Form Builder <3.0.8 - Information Disclosure

CVE-2022-0140—

Visual Form Builder < 3.0.6 - Unauthenticated Information Disclosure

18RISCO

abrir ↗

Nucleimedium

WordPress Cookie Information/Free GDPR Consent Solution <2.0.8 - Cross-Site Scripting

CVE-2022-0147—

Cookie Information < 2.0.8 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleimedium

WordPress All-in-one Floating Contact Form <2.0.4 - Cross-Site Scripting

CVE-2022-0148—

All-in-one Floating Contact Form < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)

18RISCO

abrir ↗

Nucleimedium

WooCommerce Stored Exporter WordPress Plugin < 2.7.1 - Cross-Site Scripting

CVE-2022-0149—

WooCommerce – Store Exporter < 2.7.1 - Reflected Cross-Site Scripting (XSS)

18RISCO

abrir ↗

Nucleimedium

WordPress Accessibility Helper <0.6.0.7 - Cross-Site Scripting

CVE-2022-0150—

WP Accessibility Helper (WAH) < 0.6.0.7 - Reflected Cross-Site Scripting (XSS)

18RISCO

abrir ↗

Nucleimedium

WordPress Page Builder KingComposer <=2.9.6 - Open Redirect

CVE-2022-0165—

Page Builder KingComposer <= 2.9.6 - Open Redirect

18RISCO

abrir ↗

Nucleicritical

Photo Gallery by 10Web < 1.6.0 - SQL Injection

CVE-2022-0169—

Photo Gallery by 10Web < 1.6.0 - Unauthenticated SQL Injection

60RISCO

abrir ↗

Nucleimedium

CMP WordPress < 4.0.19 - Broken Access Control

CVE-2022-0188—

Coming Soon & Maintenance Plugin by NiteoThemes < 4.0.19 - Unauthenticated Arbitrary CSS Update

18RISCO

abrir ↗

Nucleimedium

WordPress RSS Aggregator < 4.20 - Authenticated Cross-Site Scripting

CVE-2022-0189—

WP RSS Aggregator < 4.20 - Reflected Cross-Site Scripting (XSS)

18RISCO

abrir ↗

Nucleimedium

WordPress Permalink Manager <2.2.15 - Cross-Site Scripting

CVE-2022-0201—

Permalink Manager < 2.2.15 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleimedium

WordPress NewStatPress <1.3.6 - Cross-Site Scripting

CVE-2022-0206—

NewStatPress < 1.3.6 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleimedium

WordPress Plugin MapPress <2.73.4 - Cross-Site Scripting

CVE-2022-0208—

MapPress Maps for WordPress < 2.73.4 - Reflected Cross-Site scripting

18RISCO

abrir ↗

Nucleimedium

WordPress Spider Calendar <=1.5.65 - Cross-Site Scripting

CVE-2022-0212—

SpiderCalendar <= 1.5.65 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleimedium

HTML Email Template Designer < 3.1 - Missing Authorization on Rest Route

CVE-2022-0218HIGH

WP HTML Mail <= 3.0.9 Missing Authorization on REST-API Route

58RISCO

abrir ↗

Nucleimedium

WordPress GDPR & CCPA <1.9.27 - Cross-Site Scripting

CVE-2022-0220—

WordPress GDPR & CCPA < 1.9.27 - Unauthenticated Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleihigh

Popup Builder < 4.0.7 - SQL Injection

CVE-2022-0228—

Popup Builder < 4.0.7 - Admin+ SQL Injection

18RISCO

abrir ↗

Nucleimedium

WordPress WOOCS < 1.3.7.5 - Cross-Site Scripting

CVE-2022-0234—

WOOCS < 1.3.7.5 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleimedium

Redirection for Contact Form 7 < 2.5.0 - Cross-Site Scripting

CVE-2022-0250—

Redirection for Contact Form 7 < 2.5.0 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleimedium

LearnPress <4.1.6 - Cross-Site Scripting

CVE-2022-0271—

LearnPress < 4.1.6 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleihigh

Microweber Information Disclosure

CVE-2022-0281HIGH

Exposure of Sensitive Information to an Unauthorized Actor in microweber/microweber

41RISCO

abrir ↗

Nucleimedium

WordPress Ad Inserter <2.7.10 - Cross-Site Scripting

CVE-2022-0288—

Ad Inserter < 2.7.10 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleicritical

Zyxel - Authentication Bypass

CVE-2022-0342CRITICAL

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70

65RISCO

abrir ↗

Nucleimedium

WordPress XML Sitemap Generator for Google <2.0.4 - Cross-Site Scripting/Remote Code Execution

CVE-2022-0346—

Google XML Sitemap Generator < 2.0.4 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleicritical

WordPress NotificationX <2.3.9 - SQL Injection

CVE-2022-0349—

NotificationX < 2.3.9 - Unauthenticated Blind SQL Injection

30RISCO

abrir ↗

Nucleimedium

Microweber Cross-Site Scripting

CVE-2022-0378HIGH

Cross-site Scripting (XSS) - Reflected in microweber/microweber

36RISCO

abrir ↗

Nucleimedium

WordPress Embed Swagger <=1.0.0 - Cross-Site Scripting

CVE-2022-0381MEDIUM

Embed Swagger <= 1.0.0 Reflected Cross-Site Scripting

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.