Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.957exploits catalogados

32.195CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8.182Nuclei 4.217Metasploit 3.462✓ só verificadosrecentes populares risco

4.217 exploits

Nucleimedium

WordPress BackupBuddy <8.8.3 - Cross Site Scripting

CVE-2022-4897MEDIUM

BackupBuddy < 8.8.3 - Multiple Reflected Cross-Site Scripting

28RISCO

abrir ↗

Nucleihigh

WCFM Membership <= 2.10.0 - Broken Access Control

CVE-2022-4940HIGH

WCFM Membership <= 2.10.0 - Missing Authorization

36RISCO

abrir ↗

Nucleimedium

Sassy Social Share <= 3.3.3 - Cross-Site Scripting

CVE-2022-4971MEDIUM

Sassy Social Share <= 3.3.3 - Reflected Cross-Site Scripting

33RISCO

abrir ↗

Nucleicritical

WordPress 10Web Map Builder < 1.0.73 - Unauthenticated SQL Injection

CVE-2023-0037CRITICAL

10WebMapBuilder < 1.0.73 - Unauthenticated SQLi

63RISCO

abrir ↗

Nucleimedium

Simple URLs < 115 - Cross Site Scripting

CVE-2023-0099—

Simple URLs < 115 - Multiple Reflected XSS

18RISCO

abrir ↗

Nucleihigh

SonicWall SMA1000 LFI

CVE-2023-0126HIGH

Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated atta

58RISCO

abrir ↗

Nucleihigh

Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE

CVE-2023-0159—

Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE

50RISCO

abrir ↗

Nucleimedium

WordPress Tutor LMS <2.0.10 - Cross Site Scripting

CVE-2023-0236MEDIUM

Tutor LMS < 2.0.10 - Reflected Cross-Site Scripting

28RISCO

abrir ↗

Nucleihigh

WordPress WP TripAdvisor Review Slider <10.8 - Authenticated SQL Injection

CVE-2023-0261HIGH

WP TripAdvisor Review Slider < 10.8 - Subscriber+ SQLi

36RISCO

abrir ↗

Nucleicritical

PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE)

CVE-2023-0297CRITICAL

Code Injection in pyload/pyload

85RISCO

abrir ↗

Nucleimedium

ShortPixel Adaptive Images < 3.6.3 - Cross Site Scripting

CVE-2023-0334MEDIUM

ShortPixel Adaptive Images < 3.6.3 - Reflected XSS

28RISCO

abrir ↗

Nucleimedium

WP Helper Lite < 4.3 - Cross-Site Scripting

CVE-2023-0448MEDIUM

The WP Helper Lite WordPress plugin, in versions < 4.3, returns all GET parameters unsanitized in the response, resultin

40RISCO

abrir ↗

Nucleimedium

Membership Database <= 1.0 - Cross-Site Scripting

CVE-2023-0514MEDIUM

Membership Database <= 1.0 - Reflected XSS

28RISCO

abrir ↗

Nucleimedium

Online Security Guards Hiring System - Cross-Site Scripting

CVE-2023-0527LOW

PHPGurukul Online Security Guards Hiring System search-request.php cross site scripting

43RISCO

abrir ↗

Nucleimedium

WordPress Pie Register <3.8.2.3 - Open Redirect

CVE-2023-0552MEDIUM

Pie Register < 3.8.2.3 - Open Redirect

33RISCO

abrir ↗

Nucleicritical

Bank Locker Management System v1.0 - SQL Injection

CVE-2023-0562HIGH

PHPGurukul Bank Locker Management System Login index.php sql injection

48RISCO

abrir ↗

Nucleimedium

Bank Locker Management System - Cross-Site Scripting

CVE-2023-0563LOW

PHPGurukul Bank Locker Management System Assign Locker add-locker-form.php cross site scripting

35RISCO

abrir ↗

Nucleicritical

WP Visitor Statistics (Real Time Traffic) < 6.9 - SQL Injection

CVE-2023-0600CRITICAL

WP Visitor Statistics (Real Time Traffic) < 6.9 - Unauthenticated SQLi

63RISCO

abrir ↗

Nucleimedium

Twittee Text Tweet <= 1.0.8 - Cross-Site Scripting

CVE-2023-0602—

Twittee Text Tweet <= 1.0.8 - Reflected XSS

18RISCO

abrir ↗

Nucleihigh

Slimstat Analytics < 4.9.3.3 Subscriber - SQL Injection

CVE-2023-0630—

Slimstat Analytics < 4.9.3.3 - Subscriber+ SQL Injection

18RISCO

abrir ↗

Nucleihigh

Fortra GoAnywhere MFT - Remote Code Execution

CVE-2023-0669HIGHsob ataqueransomware

Fortra GoAnywhere MFT License Response Servlet Command Injection

100RISCO

abrir ↗

Nucleimedium

phpIPAM 1.5.1 - Cross-site Scripting

CVE-2023-0676LOW

Cross-site Scripting (XSS) - Reflected in phpipam/phpipam

23RISCO

abrir ↗

Nucleimedium

PHPIPAM <v1.5.1 - Missing Authorization

CVE-2023-0678HIGH

Missing Authorization in phpipam/phpipam

48RISCO

abrir ↗

Nucleicritical

modoboa 2.0.4 - Admin TakeOver

CVE-2023-0777HIGH

Authentication Bypass by Primary Weakness in modoboa/modoboa

61RISCO

abrir ↗

Nucleimedium

WordPress Meta SEO <= 4.5.2 - Open Redirect

CVE-2023-0876MEDIUM

WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect

28RISCO

abrir ↗

Nucleicritical

Purchase Order Management v1.0 - SQL Injection

CVE-2023-2130MEDIUM

SourceCodester Purchase Order Management System GET Parameter view_details.php sql injection

28RISCO

abrir ↗

Nucleimedium

Aajoda Testimonials < 2.2.2 - Cross-Site Scripting

CVE-2023-2178—

Aajoda Testimonials < 2.2.2 - Admin+ Stored XSS

18RISCO

abrir ↗

Nucleihigh

Oracle Peoplesoft - Unauthenticated File Read

CVE-2023-22047HIGH

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported vers

58RISCO

abrir ↗

Nucleimedium

Adobe Connect < 12.1.5 - Local File Disclosure

CVE-2023-22232MEDIUM

Adobe Connect Improper Access Control Security feature bypass

70RISCO

abrir ↗

Nucleimedium

Seo By 10Web < 1.2.7 - Cross-Site Scripting

CVE-2023-2224MEDIUM

Seo By 10Web < 1.2.7 - Admin+ Stored XSS

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.