Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.652exploits catalogados

34.545CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.581GitHub PoC 13.708VulnCheck XDB 8.225Nuclei 4.228Metasploit 3.467✓ só verificadosrecentes populares risco

21.581 exploits

Referência✓ VexDay Proof

meBiblio 0.4.5 - 'action' Remote File Inclusion

CVE-2007-6089—webappsphp

PHP remote file inclusion vulnerability in index.php in meBiblio 0.4.5 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component mosDirectory 2.3.2 - 'catid' SQL Injection

CVE-2008-0690—webappsphp

SQL injection vulnerability in index.php in the mosDirectory (com_directory) 2.3.2 component for Joomla! allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Numark Cue 5.0 rev 2 - '.m3u' File Local Stack Buffer Overflow

CVE-2008-4470—localwindows

Stack-based buffer overflow in Numark CUE 5.0 rev2 allows user-assisted attackers to cause a denial of service (applicat

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ads Pro - 'dhtml.pl' Remote Command Execution

CVE-2008-6826—webappscgi

dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page par

23RISCO

abrir ↗

Referência

CVE-2017-2472

CVE-2017-2472—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b

23RISCO

abrir ↗

Referência

CVE-2010-1363

CVE-2010-1363—

SQL injection vulnerability in the JProjects (com_j-projects) component for Joomla! allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2018-7747

CVE-2018-7747—

Multiple cross-site scripting (XSS) vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow re

23RISCO

abrir ↗

Referência

CVE-2018-7747

CVE-2018-7747—

Multiple cross-site scripting (XSS) vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow re

23RISCO

abrir ↗

Referência

CVE-2013-7319

CVE-2013-7319—

Cross-site scripting (XSS) vulnerability in the Download Manager plugin before 2.5.9 for WordPress allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2021-24287

CVE-2021-24287—

Select All Categories and Taxonomies < 1.3.2 - Reflected Cross-Site Scripting (XSS)

43RISCO

abrir ↗

Referência

CVE-2010-0641

CVE-2010-0641—

Cross-site scripting (XSS) vulnerability in webline/html/admin/wcs/LoginPage.jhtml in Cisco Collaboration Server (CCS) 5

23RISCO

abrir ↗

Referência

CVE-2018-18324

CVE-2018-18324—

CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has XSS via the admin/fileManager2.php fm_current_dir parameter

23RISCO

abrir ↗

Referência✓ VexDay Proof

iLife iPhoto Photocast - XML Title Remote Format String (PoC)

CVE-2007-0051—dososx

Format string vulnerability in Apple iPhoto 6.0.5 (316), and other versions before 6.0.6, allows remote user-assisted at

23RISCO

abrir ↗

Referência

CVE-2014-8681

CVE-2014-8681—

SQL injection vulnerability in the GetIssues function in models/issue.go in Gogs (aka Go Git Service) 0.3.1-9 through 0.

23RISCO

abrir ↗

Referência

CVE-2014-8681

CVE-2014-8681—

SQL injection vulnerability in the GetIssues function in models/issue.go in Gogs (aka Go Git Service) 0.3.1-9 through 0.

23RISCO

abrir ↗

Referência

CVE-2013-3529

CVE-2013-3529—

Multiple cross-site scripting (XSS) vulnerabilities in user/obits.php in the WP FuneralPress plugin before 1.1.7 for Wor

23RISCO

abrir ↗

Referência

CVE-2013-3529

CVE-2013-3529—

Multiple cross-site scripting (XSS) vulnerabilities in user/obits.php in the WP FuneralPress plugin before 1.1.7 for Wor

23RISCO

abrir ↗

Referência

CVE-2016-1337

CVE-2016-1337—

Cisco EPC3928 devices allow remote attackers to obtain sensitive configuration and credential information by making requ

23RISCO

abrir ↗

Referência

CVE-2019-19363

CVE-2019-19363—

An issue was discovered in Ricoh (including Savin and Lanier) Windows printer drivers prior to 2020 that allows attacker

38RISCO

abrir ↗

Referência✓ VexDay Proof

KB-Bestellsystem - 'kb_whois.cgi' Command Execution

CVE-2007-6176—webappscgi

kb_whois.cgi in K+B-Bestellsystem (aka KB-Bestellsystem) allows remote attackers to execute arbitrary commands via shell

23RISCO

abrir ↗

Referência✓ VexDay Proof

Axigen 5.0.2 - AXIMilter Remote Format String

CVE-2008-0434—remotelinux

Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbit

28RISCO

abrir ↗

Referência✓ VexDay Proof

Icewarp Merak Mail Server 9.4.1 - 'Base64FileEncode()' Buffer Overflow (PoC)

CVE-2009-1516—doswindows

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1

23RISCO

abrir ↗

Referência

CVE-2010-1461

CVE-2010-1461—

Directory traversal vulnerability in the Photo Battle (com_photobattle) component 1.0.1 for Joomla! allows remote attack

38RISCO

abrir ↗

Referência

CVE-2010-1469

CVE-2010-1469—

Directory traversal vulnerability in the Ternaria Informatica JProject Manager (com_jprojectmanager) component 1.0 for J

38RISCO

abrir ↗

Referência

CVE-2010-1470

CVE-2010-1470—

Directory traversal vulnerability in the Web TV (com_webtv) component 1.0 for Joomla! allows remote attackers to read ar

43RISCO

abrir ↗

Referência

CVE-2025-28137

CVE-2025-28137CRITICAL

The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in th

53RISCO

abrir ↗

Referência

CVE-2010-1315

CVE-2010-1315—

Directory traversal vulnerability in weberpcustomer.php in the webERPcustomer (com_weberpcustomer) component 1.2.1 and 1

38RISCO

abrir ↗

Referência

CVE-2010-0317

CVE-2010-0317—

Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer dereference, memory consumptio

28RISCO

abrir ↗

Referência

CVE-2013-6884

CVE-2013-6884—

The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default "ditto" username and

28RISCO

abrir ↗

Referência

CVE-2010-1472

CVE-2010-1472—

Directory traversal vulnerability in the Daily Horoscope (com_horoscope) component 1.5.0 for Joomla! allows remote attac

43RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.