Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.652exploits catalogados

34.545CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.581GitHub PoC 13.708VulnCheck XDB 8.225Nuclei 4.228Metasploit 3.467✓ só verificadosrecentes populares risco

21.554 exploits

Referência

CVE-2017-18195

CVE-2017-18195—

An issue was discovered in tools/conversations/view_ajax.php in Concrete5 before 8.3.0. An unauthenticated user can enum

28RISCO

abrir ↗

Referência

CVE-2013-6793

CVE-2013-6793—

Multiple cross-site scripting (XSS) vulnerabilities in the Calendar module in Olat 7.8.0.1 (b20130821 N1) allow remote a

23RISCO

abrir ↗

Referência

CVE-2015-4667

CVE-2015-4667—

Multiple hardcoded credentials in Xsuite 2.x.

28RISCO

abrir ↗

Referência

CVE-2017-13869

CVE-2017-13869—

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS b

23RISCO

abrir ↗

Referência

CVE-2010-1302

CVE-2010-1302—

Directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs (com_dwgraphs) component 1.0 for Joomla! a

38RISCO

abrir ↗

Referência

CVE-2018-10504

CVE-2018-10504—

The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection.

23RISCO

abrir ↗

Referência

CVE-2021-43140

CVE-2021-43140—

SQL Injection vulnerability exists in Sourcecodester. Simple Subscription Website 1.0. via the login.

23RISCO

abrir ↗

Referência

CVE-2010-1186

CVE-2010-1186—

Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress a

23RISCO

abrir ↗

Referência

CVE-2015-4010

CVE-2015-4010—

Cross-site request forgery (CSRF) vulnerability in the Encrypted Contact Form plugin before 1.1 for WordPress allows rem

23RISCO

abrir ↗

Referência

CVE-2015-4010

CVE-2015-4010—

Cross-site request forgery (CSRF) vulnerability in the Encrypted Contact Form plugin before 1.1 for WordPress allows rem

23RISCO

abrir ↗

Referência

CVE-2015-7767

CVE-2015-7767—

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of

23RISCO

abrir ↗

Referência

CVE-2015-7767

CVE-2015-7767—

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of

23RISCO

abrir ↗

Referência

CVE-2010-1304

CVE-2010-1304—

Directory traversal vulnerability in userstatus.php in the User Status (com_userstatus) component 1.21.16 for Joomla! al

43RISCO

abrir ↗

Referência

CVE-2017-11322

CVE-2017-11322—

The chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileg

23RISCO

abrir ↗

Referência

CVE-2014-8469

CVE-2014-8469—

Cross-site scripting (XSS) vulnerability in Guests/Boots in AdminCP in Moxi9 PHPFox before 4 Beta allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2014-8469

CVE-2014-8469—

Cross-site scripting (XSS) vulnerability in Guests/Boots in AdminCP in Moxi9 PHPFox before 4 Beta allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2014-9260

CVE-2014-9260—

The basic_settings function in the download manager plugin for WordPress before 2.7.3 allows remote authenticated users

28RISCO

abrir ↗

Referência

CVE-2026-6118

CVE-2026-6118MEDIUM

AstrBotDevs AstrBot MCP Endpoint tools.py add_mcp_server command injection

48RISCO

abrir ↗

Referência

CVE-2012-0981

CVE-2012-0981—

Directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories and image fil

43RISCO

abrir ↗

Referência

CVE-2019-0543

CVE-2019-0543HIGHsob ataqueransomware

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft W

71RISCO

abrir ↗

Referência✓ VexDay Proof

Virtual CD 9.0.0.2 - 'vc9api.DLL' Remote Shell Commands Execution

CVE-2007-2853—remotewindows

The VCDAPILibApi ActiveX control in vc9api.DLL 9.0.0.57 in Virtual CD 9.0.0.2 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2018-5725

CVE-2018-5725—

MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Change, as demonstrated by the port number of t

23RISCO

abrir ↗

Referência

CVE-2018-5725

CVE-2018-5725—

MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Change, as demonstrated by the port number of t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Achievo 1.3.2 - 'FCKeditor' Arbitrary File Upload

CVE-2008-2742—webappsphp

Unrestricted file upload in the mcpuk file editor (atk/attributes/fck/editor/filemanager/browser/mcpuk/connectors/php/co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Electronics Workbench - '.ewb' Local Stack Overflow (PoC)

CVE-2008-5383—doswindows

Stack-based buffer overflow in National Instruments Electronics Workbench allows user-assisted attackers to cause a deni

23RISCO

abrir ↗

Referência

CVE-2017-2473

CVE-2017-2473—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b

23RISCO

abrir ↗

Referência

CVE-2020-26829

CVE-2020-26829CRITICAL

SAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary conne

48RISCO

abrir ↗

Referência

CVE-2013-1937

CVE-2013-1937—

Multiple cross-site scripting (XSS) vulnerabilities in tbl_gis_visualization.php in phpMyAdmin 3.5.x before 3.5.8 might

23RISCO

abrir ↗

Referência

CVE-2010-1305

CVE-2010-1305—

Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly ot

43RISCO

abrir ↗

Referência

CVE-2019-10226

CVE-2019-10226—

HTML Injection has been discovered in the v0.19.0 version of the Fat Free CRM product via an authenticated request to th

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.