Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.445exploits catalogados

34.432CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

21.497 exploits

Referência

CVE-2010-4399

CVE-2010-4399—

Directory traversal vulnerability in languages.inc.php in DynPG CMS 4.1.1 and 4.2.0, when magic_quotes_gpc is disabled,

23RISCO

abrir ↗

Referência

CVE-2019-7400

CVE-2019-7400—

Rukovoditel before 2.4.1 allows XSS.

23RISCO

abrir ↗

Referência

CVE-2019-7400

CVE-2019-7400—

Rukovoditel before 2.4.1 allows XSS.

23RISCO

abrir ↗

Referência

CVE-2017-16543

CVE-2017-16543—

Zoho ManageEngine Applications Manager 13 before build 13500 allows SQL injection via GraphicalView.do, as demonstrated

23RISCO

abrir ↗

Referência

CVE-2012-6307

CVE-2012-6307—

A vulnerability exists in JPEGsnoop 1.5.2 due to an unspecified issue in JPEG file handling, which could let a malicious

23RISCO

abrir ↗

Referência✓ VexDay Proof

Snort 2.6.1.1/2.6.1.2/2.7.0 - 'fragementation' Remote Denial of Service

CVE-2007-1398—dosmultiple

The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the ip

23RISCO

abrir ↗

Referência✓ VexDay Proof

db Software Laboratory VImpX - 'VImpX.ocx' Multiple Vulnerabilities

CVE-2008-4750—remotewindows

Stack-based buffer overflow in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laboratory VImp X, po

23RISCO

abrir ↗

Referência✓ VexDay Proof

MP3 TrackMaker 1.5 - '.mp3' Local Heap Overflow (PoC)

CVE-2009-0175—doswindows

Heap-based buffer overflow in Heathco Software MP3 TrackMaker 1.5 allows remote attackers to cause a denial of service (

23RISCO

abrir ↗

Referência

CVE-2018-8214

CVE-2018-8214—

An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual regis

23RISCO

abrir ↗

Referência

CVE-2010-1060

CVE-2010-1060—

Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01, when magic_quotes_gpc is disabl

23RISCO

abrir ↗

Referência

CVE-2010-1062

CVE-2010-1062—

Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when magi

23RISCO

abrir ↗

Referência

CVE-2022-0492

CVE-2022-0492HIGHsob ataque

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. Th

86RISCO

abrir ↗

Referência

CVE-2022-0492

CVE-2022-0492HIGHsob ataque

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. Th

86RISCO

abrir ↗

Referência

CVE-2022-0492

CVE-2022-0492HIGHsob ataque

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. Th

86RISCO

abrir ↗

Referência

CVE-2021-24299

CVE-2021-24299—

ReDi Restaurant Reservations < 21.0426 - Unauthenticated Stored Cross-Site Scripting (XSS)

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Module HTMLArea3 1.5 - Remote File Inclusion

CVE-2006-3751—webappsphp

PHP remote file inclusion vulnerability in popups/ImageManager/config.inc.php in the HTMLArea3 Addon Component (com_html

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hospital Management System 4.0 - Persistent Cross-Site Scripting

CVE-2020-5191—webappsphp

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities.

38RISCO

abrir ↗

Referência

CVE-2023-30198

CVE-2023-30198HIGH

Prestashop winbizpayment <= 1.0.2 is vulnerable to Incorrect Access Control via modules/winbizpayment/downloads/download

41RISCO

abrir ↗

Referência

CVE-2023-30198

CVE-2023-30198HIGH

Prestashop winbizpayment <= 1.0.2 is vulnerable to Incorrect Access Control via modules/winbizpayment/downloads/download

41RISCO

abrir ↗

Referência✓ VexDay Proof

DM Guestbook 0.4.1 - Multiple Local File Inclusions

CVE-2007-5821—webappsphp

Multiple directory traversal vulnerabilities in DM Guestbook 0.4.1 and earlier allow remote attackers to include and exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

U-Mail Webmail 4.91 - 'edit.php' Arbitrary File Write

CVE-2008-4932—webappsphp

webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 allows remote attackers to overwrite arbitrary files v

23RISCO

abrir ↗

Referência

CVE-2019-25706

CVE-2019-25706HIGH

Across DR-810 ROM-0 Unauthenticated File Disclosure

41RISCO

abrir ↗

Referência

CVE-2014-0866

CVE-2014-0866—

RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics sends cleartext c

23RISCO

abrir ↗

Referência

CVE-2026-9427

CVE-2026-9427HIGH

Edimax EW-7438RPn webs formWlSiteSurvey stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-9426

CVE-2026-9426HIGH

Edimax EW-7438RPn formHwSet stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2017-18016

CVE-2017-18016—

Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive informat

23RISCO

abrir ↗

Referência

CVE-2026-9425

CVE-2026-9425HIGH

Edimax EW-7438RPn formWlanMP stack-based overflow

41RISCO

abrir ↗

Referência✓ VexDay Proof

SQuery 4.5 - 'libpath' Remote File Inclusion

CVE-2006-1610—webappsphp

PHP remote file inclusion vulnerability in lib/armygame.php in SQuery 4.5 and earlier, as used in products such as Auton

23RISCO

abrir ↗

Referência

CVE-2026-9424

CVE-2026-9424MEDIUM

Edimax EW-7438RPn Content-Type formWlanMP os command injection

33RISCO

abrir ↗

Referência

CVE-2015-8285

CVE-2015-8285—

The webssx.sys driver in QuickHeal 16.00 allows remote attackers to cause a denial of service.

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.