Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.107exploits catalogados

34.679CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.692 exploits

Referência

CVE-2022-47877

CVE-2022-47877CRITICAL

A Stored cross-site scripting vulnerability in Jedox 2020.2.5 allows remote, authenticated users to inject arbitrary web

48RISCO

abrir ↗

Referência

CVE-2017-12971

CVE-2017-12971—

Cross-site scripting (XSS) vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script or

23RISCO

abrir ↗

Referência

CVE-2017-12971

CVE-2017-12971—

Cross-site scripting (XSS) vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script or

23RISCO

abrir ↗

Referência

CVE-2010-4330

CVE-2010-4330—

Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2026-27476

CVE-2026-27476CRITICAL

RustFly 2.0.0 Command Injection via UDP Remote Control

48RISCO

abrir ↗

Referência

CVE-2023-23286

CVE-2023-23286MEDIUM

Cross Site Scripting (XSS) vulnerability in Provide server 14.4 allows attackers to execute arbitrary code through the s

33RISCO

abrir ↗

Referência

CVE-2018-18760

CVE-2018-18760—

RhinOS 3.0 build 1190 allows CSRF.

23RISCO

abrir ↗

Referência

CVE-2018-18760

CVE-2018-18760—

RhinOS 3.0 build 1190 allows CSRF.

23RISCO

abrir ↗

Referência

CVE-2019-11564

CVE-2019-11564—

A cross-site scripting (XSS) vulnerability in HumHub 1.3.12 allows remote attackers to inject arbitrary web script or HT

23RISCO

abrir ↗

Referência

CVE-2010-1301

CVE-2010-1301—

SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2010-1301

CVE-2010-1301—

SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2017-8382

CVE-2017-8382—

admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user acc

23RISCO

abrir ↗

Referência

CVE-2017-8382

CVE-2017-8382—

admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user acc

23RISCO

abrir ↗

Referência

CVE-2014-2089

CVE-2014-2089—

ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .

23RISCO

abrir ↗

Referência✓ VexDay Proof

gCards 1.45 - Multiple Vulnerabilities

CVE-2006-1347—webappsphp

SQL injection vulnerability in loginfunction.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

APC ActionApps CMS 2.8.1 - Remote File Inclusion

CVE-2006-2686—webappsphp

PHP remote file inclusion vulnerabilities in ActionApps 2.8.1 allow remote attackers to execute arbitrary PHP code via a

28RISCO

abrir ↗

Referência✓ VexDay Proof

Socketwiz BookMarks 2.0 - 'root_dir' Remote File Inclusion

CVE-2006-7069—webappsphp

PHP remote file inclusion vulnerability in smarty_config.php in Socketwiz Bookmarks 2.0 and earlier allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

NetProxy 4.03 - Web Filter Evasion / Bypass Logging

CVE-2007-1224—remotewindows

Grok Developments NetProxy 4.03 allows remote attackers to bypass URL filtering via a request that omits "http://" from

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPEasyNews 1.13 RC2 - 'POST' SQL Injection

CVE-2008-2823—webappsphp

SQL injection vulnerability in newsarchive.php in PHPeasyblog (formerly phpeasynews) 1.13 RC2 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

LE.CMS 1.4 - Arbitrary File Upload

CVE-2008-2833—webappsphp

admin/upload.php in le.cms 1.4 and earlier allows remote attackers to bypass administrative authentication, and upload a

23RISCO

abrir ↗

Referência

CVE-2017-14738

CVE-2017-14738—

FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize in

23RISCO

abrir ↗

Referência

CVE-2017-9813

CVE-2017-9813—

In Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312), the scriptNa

23RISCO

abrir ↗

Referência

CVE-2017-9813

CVE-2017-9813—

In Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312), the scriptNa

23RISCO

abrir ↗

Referência

CVE-2017-15291

CVE-2017-15291—

Cross-site scripting (XSS) vulnerability in the Wireless MAC Filtering page in TP-LINK TL-MR3220 wireless routers allows

23RISCO

abrir ↗

Referência

CVE-2010-1544

CVE-2010-1544—

micro_httpd on the RCA DCM425 cable modem allows remote attackers to cause a denial of service (device reboot) via a lon

23RISCO

abrir ↗

Referência

CVE-2020-8778

CVE-2020-8778—

Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via an uploaded document,

23RISCO

abrir ↗

Referência

CVE-2015-2084

CVE-2015-2084—

Cross-site request forgery (CSRF) vulnerability in the Easy Social Icons plugin before 1.2.3 for WordPress allows remote

23RISCO

abrir ↗

Referência

CVE-2015-2084

CVE-2015-2084—

Cross-site request forgery (CSRF) vulnerability in the Easy Social Icons plugin before 1.2.3 for WordPress allows remote

23RISCO

abrir ↗

Referência

CVE-2015-6545

CVE-2015-6545—

Cross-site request forgery (CSRF) vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the a

23RISCO

abrir ↗

Referência

CVE-2015-6545

CVE-2015-6545—

Cross-site request forgery (CSRF) vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the a

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.