Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.006exploits catalogados

34.638CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.741VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.624 exploits

Referência

CVE-2021-28418

CVE-2021-28418—

A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and

23RISCO

abrir ↗

Referência

CVE-2018-10257

CVE-2018-10257—

A CSV Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privile

23RISCO

abrir ↗

Referência

CVE-2018-10257

CVE-2018-10257—

A CSV Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privile

23RISCO

abrir ↗

Referência

CVE-2021-28419

CVE-2021-28419—

The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads

28RISCO

abrir ↗

Referência

CVE-2018-14327

CVE-2018-14327—

The installer for the Alcatel OSPREY3_MINI Modem component on EE EE40VB 4G mobile broadband modems with firmware before

23RISCO

abrir ↗

Referência

CVE-2018-14327

CVE-2018-14327—

The installer for the Alcatel OSPREY3_MINI Modem component on EE EE40VB 4G mobile broadband modems with firmware before

23RISCO

abrir ↗

Referência

CVE-2023-23163

CVE-2023-23163—

Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the editid parame

23RISCO

abrir ↗

Referência✓ VexDay Proof

Trawler Web CMS 1.8.1 - Multiple Remote File Inclusions

CVE-2006-5495—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Trawler Web CMS 1.8.1 and earlier allow remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

ID Automation Linear Barcode - ActiveX Denial of Service

CVE-2007-2658—doswindows

Unspecified vulnerability in the ID Automation Linear Barcode 1.6.0.5 ActiveX control in IDAutomationLinear6.dll allows

23RISCO

abrir ↗

Referência

CVE-2023-23162

CVE-2023-23162—

Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter

23RISCO

abrir ↗

Referência

CVE-2010-1708

CVE-2010-1708—

Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2018-6024

CVE-2018-6024—

SQL Injection exists in the Project Log 1.5.3 component for Joomla! via the search parameter.

23RISCO

abrir ↗

Referência

CVE-2018-6024

CVE-2018-6024—

SQL Injection exists in the Project Log 1.5.3 component for Joomla! via the search parameter.

23RISCO

abrir ↗

Referência

CVE-2025-34043

CVE-2025-34043CRITICAL

Vacron NVR Remote Command Execution

48RISCO

abrir ↗

Referência

CVE-2013-6343

CVE-2013-6343—

Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374_979 allow

23RISCO

abrir ↗

Referência

CVE-2010-1714

CVE-2010-1714—

Directory traversal vulnerability in the Arcade Games (com_arcadegames) component 1.0 for Joomla! allows remote attacker

43RISCO

abrir ↗

Referência

CVE-2017-11662

CVE-2017-11662—

The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and appli

23RISCO

abrir ↗

Referência

CVE-2020-15930

CVE-2020-15930—

An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag.

23RISCO

abrir ↗

Referência

CVE-2010-1715

CVE-2010-1715—

Directory traversal vulnerability in the Online Examination (aka Online Exam or com_onlineexam) component 1.5.0 for Joom

38RISCO

abrir ↗

Referência

CVE-2010-1725

CVE-2010-1725—

SQL injection vulnerability in offers_buy.php in Alibaba Clone Platinum allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-1725

CVE-2010-1725—

SQL injection vulnerability in offers_buy.php in Alibaba Clone Platinum allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2024-53584

CVE-2024-53584CRITICAL

OpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the timezone parameter.

48RISCO

abrir ↗

Referência✓ VexDay Proof

OpenBASE 0.6a - 'root_prefix' Remote File Inclusion

CVE-2007-2947—webappsphp

Multiple PHP remote file inclusion vulnerabilities in OpenBASE Alpha 0.6 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência

CVE-2017-17591

CVE-2017-17591—

Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17591

CVE-2017-17591—

Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter.

23RISCO

abrir ↗

Referência

CVE-2014-100003

CVE-2014-100003—

SQL injection vulnerability in includes/ym-download_functions.include.php in the Code Futures YourMembers plugin for Wor

23RISCO

abrir ↗

Referência

CVE-2014-100003

CVE-2014-100003—

SQL injection vulnerability in includes/ym-download_functions.include.php in the Code Futures YourMembers plugin for Wor

23RISCO

abrir ↗

Referência✓ VexDay Proof

Musoo 0.21 - Remote File Inclusion

CVE-2007-3297—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Musoo 0.21 allow remote attackers to execute arbitrary PHP code vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component wmtportfolio 1.0 - Remote File Inclusion

CVE-2007-5310—webappsphp

PHP remote file inclusion vulnerability in admin.wmtportfolio.php in the webmaster-tips.net wmtportfolio 1.0 (com_wmtpor

23RISCO

abrir ↗

Referência✓ VexDay Proof

hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities

CVE-2007-6495—webappsasp

inc_newuser.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the permis

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.