Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.313exploits catalogados

34.834CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentes populares risco

21.797 exploits

Referência✓ VexDay Proof

jspwiki 2.4.104/2.5.139 - Multiple Vulnerabilities

CVE-2008-1231—webappsjsp

Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to include and exec

23RISCO

abrir ↗

Referência

CVE-2017-15920

CVE-2017-15920—

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer

23RISCO

abrir ↗

Referência

CVE-2017-15920

CVE-2017-15920—

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer

23RISCO

abrir ↗

Referência

CVE-2013-2225

CVE-2013-2225—

inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _pr

23RISCO

abrir ↗

Referência

CVE-2025-64446

CVE-2025-64446CRITICALsob ataque

A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb

100RISCO

abrir ↗

Referência

CVE-2014-4874

CVE-2014-4874—

BMC Track-It! 11.3.0.355 allows remote authenticated users to read arbitrary files by visiting the TrackItWeb/Attachment

23RISCO

abrir ↗

Referência

CVE-2009-3311

CVE-2009-3311—

Cross-site scripting (XSS) vulnerability in index.php in RSSMediaScript allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2020-7384

CVE-2020-7384HIGH

Client-Side Command Injection in Rapid7 Metasploit

68RISCO

abrir ↗

Referência

CVE-2018-10258

CVE-2018-10258—

A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges to

23RISCO

abrir ↗

Referência

CVE-2018-10258

CVE-2018-10258—

A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges to

23RISCO

abrir ↗

Referência

CVE-2017-6549

CVE-2017-6549—

Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W

23RISCO

abrir ↗

Referência

CVE-2020-11803

CVE-2020-11803—

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with th

23RISCO

abrir ↗

Referência

CVE-2019-17124

CVE-2019-17124—

Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.

28RISCO

abrir ↗

Referência

CVE-2015-6402

CVE-2015-6402—

Cross-site scripting (XSS) vulnerability in the management interface on Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11,

23RISCO

abrir ↗

Referência

CVE-2020-7384

CVE-2020-7384HIGH

Client-Side Command Injection in Rapid7 Metasploit

68RISCO

abrir ↗

Referência

CVE-2024-5655

CVE-2024-5655CRITICAL

Improper Access Control in GitLab

48RISCO

abrir ↗

Referência

CVE-2017-0220

CVE-2017-0220—

The Windows kernel in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows Server 2012 Gold allows authenticat

23RISCO

abrir ↗

Referência

CVE-2009-4818

CVE-2009-4818—

Unrestricted file upload vulnerability in upload.php in PHPSimplicity Simplicity oF Upload 1.3.2 allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2019-20204

CVE-2019-20204—

The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/* at the beginn

23RISCO

abrir ↗

Referência

CVE-2016-4311

CVE-2016-4311—

Cross-site request forgery (CSRF) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote at

23RISCO

abrir ↗

Referência

CVE-2016-4311

CVE-2016-4311—

Cross-site request forgery (CSRF) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote at

23RISCO

abrir ↗

Referência

CVE-2014-8555

CVE-2014-8555—

Directory traversal vulnerability in report/reportViewAction.jsp in Progress Software OpenEdge 11.2 allows remote attack

23RISCO

abrir ↗

Referência

CVE-2014-8555

CVE-2014-8555—

Directory traversal vulnerability in report/reportViewAction.jsp in Progress Software OpenEdge 11.2 allows remote attack

23RISCO

abrir ↗

Referência

CVE-2014-8555

CVE-2014-8555—

Directory traversal vulnerability in report/reportViewAction.jsp in Progress Software OpenEdge 11.2 allows remote attack

23RISCO

abrir ↗

Referência

CVE-2012-0282

CVE-2012-0282—

Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash

23RISCO

abrir ↗

Referência

CVE-2014-4971

CVE-2014-4971—

Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write

43RISCO

abrir ↗

Referência

CVE-2009-2256

CVE-2009-2256—

The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to cause a denial o

23RISCO

abrir ↗

Referência

CVE-2017-14521

CVE-2017-14521—

In WonderCMS 2.3.1, the upload functionality accepts random application extensions and leads to malicious File Upload.

23RISCO

abrir ↗

Referência

CVE-2009-3321

CVE-2009-3321—

SQL injection vulnerability in SaphpLesson 4.3, when magic_quotes_gpc is disabled, allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pie Cart Pro - 'Inc_Dir' Remote File Inclusion

CVE-2006-4969—webappsphp

Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arb

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.