Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.589exploits catalogados

34.508CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8.216Nuclei 4.223Metasploit 3.464✓ só verificadosrecentes populares risco

21.554 exploits

Referência

Webrun 3.6.0.42 - 'P_0' SQL Injection

CVE-2021-43650—webappsmultiple

WebRun 3.6.0.42 is vulnerable to SQL Injection via the P_0 parameter used to set the username during the login process.

23RISCO

abrir ↗

Referência✓ VexDay Proof

moziloCMS 1.11 - Local File Inclusion / Full Path Disclosure / Cross-Site Scripting

CVE-2009-1368—webappsphp

Directory traversal vulnerability in index.php in moziloCMS 1.11 allows remote attackers to read arbitrary files via a .

23RISCO

abrir ↗

Referência

CVE-2017-2442

CVE-2017-2442—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issu

23RISCO

abrir ↗

Referência

CVE-2017-2367

CVE-2017-2367—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef

23RISCO

abrir ↗

Referência

CVE-2022-4047

CVE-2022-4047CRITICAL

Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload

48RISCO

abrir ↗

Referência

CVE-2017-9259

CVE-2017-9259—

The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote atta

23RISCO

abrir ↗

Referência

CVE-2026-6142

CVE-2026-6142MEDIUM

tushar-2223 Hotel Management System roomdelete.php sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

pc4 Uploader 10.0 - Remote File Disclosure

CVE-2009-2180—webappsphp

Multiple directory traversal vulnerabilities in upfiles/index.php in Pc4 Uploader 10.0 and earlier allow remote attacker

23RISCO

abrir ↗

Referência

CVE-2010-3147

CVE-2010-3147—

Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP

28RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component pc_cookbook 0.3 - Remote File Inclusion

CVE-2006-3530—webappsphp

PHP remote file inclusion vulnerability in com_pccookbook/pccookbook.php in the PccookBook Component for Mambo and Jooml

23RISCO

abrir ↗

Referência

CVE-2018-5751

CVE-2018-5751—

The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev4

23RISCO

abrir ↗

Referência

CVE-2015-1481

CVE-2015-1481—

Ansible Tower (aka Ansible UI) before 2.0.5 allows remote organization administrators to gain privileges by creating a s

23RISCO

abrir ↗

Referência

CVE-2025-34067

CVE-2025-34067CRITICAL

Hikvision Integrated Security Management Platform Remote Command Execution via applyCT Fastjson

53RISCO

abrir ↗

Referência

CVE-2011-1564

CVE-2011-1564—

Multiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remo

28RISCO

abrir ↗

Referência

CVE-2018-15740

CVE-2018-15740—

Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the "Workflow Delegation" "Requester Roles" screen.

23RISCO

abrir ↗

Referência

CVE-2018-15740

CVE-2018-15740—

Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the "Workflow Delegation" "Requester Roles" screen.

23RISCO

abrir ↗

Referência

CVE-2015-4063

CVE-2015-4063—

Cross-site scripting (XSS) vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPres

38RISCO

abrir ↗

Referência

CVE-2015-4063

CVE-2015-4063—

Cross-site scripting (XSS) vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPres

38RISCO

abrir ↗

Referência

CVE-2015-1366

CVE-2015-1366—

Cross-site scripting (XSS) vulnerability in pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress all

23RISCO

abrir ↗

Referência

CVE-2015-1366

CVE-2015-1366—

Cross-site scripting (XSS) vulnerability in pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress all

23RISCO

abrir ↗

Referência

CVE-2016-3219

CVE-2016-3219—

The kernel-mode driver in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted applica

23RISCO

abrir ↗

Referência

CVE-2019-12562

CVE-2019-12562—

Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the mali

23RISCO

abrir ↗

Referência✓ VexDay Proof

dotProject 2.0.4 - 'baseDir' Remote File Inclusion

CVE-2006-4234—webappsphp

PHP remote file inclusion vulnerability in classes/query.class.php in dotProject 2.0.4 and earlier allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

DBImageGallery 1.2.2 - 'donsimg_base_path' Remote File Inclusion

CVE-2007-1164—webappsphp

Multiple PHP remote file inclusion vulnerabilities in DBImageGallery 1.2.2 allow remote attackers to execute arbitrary P

23RISCO

abrir ↗

Referência✓ VexDay Proof

MagicISO 5.4 (build239) - '.cue' Heap Overflow (PoC)

CVE-2007-2761—doslinux

Stack-based buffer overflow in MagicISO 5.4 build 239 and earlier allows remote attackers to execute arbitrary code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

ModuleBuilder 1.0 - 'file' Remote File Disclosure

CVE-2007-5812—webappsphp

Directory traversal vulnerability in modules/Builder/DownloadModule.php in ModuleBuilder 1.0 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Agares phpAutoVideo 2.21 - Local/Remote File Inclusion

CVE-2007-6614—webappsphp

PHP remote file inclusion vulnerability in admin/frontpage_right.php in Agares Media phpAutoVideo 2.21 allows remote att

23RISCO

abrir ↗

Referência

CVE-2017-11831

CVE-2017-11831—

Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2,

23RISCO

abrir ↗

Referência

CVE-2013-6937

CVE-2013-6937—

Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a

23RISCO

abrir ↗

Referência

CVE-2018-19749

CVE-2018-19749—

DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field.

38RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.