Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.496exploits catalogados

34.964CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8.510Nuclei 4.239Metasploit 3.468✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2019-10716

CVE-2019-10716—

An Information Disclosure issue in Verodin Director 3.5.3.1 and earlier reveals usernames and passwords of integrated se

23RISCO

abrir ↗

Referência

CVE-2015-6102

CVE-2015-6102—

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi

23RISCO

abrir ↗

Referência

CVE-2015-6102

CVE-2015-6102—

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi

23RISCO

abrir ↗

Referência

CVE-2016-1914

CVE-2016-1914—

Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in BlackBerry Enterprise Server

23RISCO

abrir ↗

Referência

CVE-2010-2018

CVE-2010-2018—

Directory traversal vulnerability in downlot.php in Lokomedia CMS 1.4.1 and 2.0 allows remote attackers to read arbitrar

38RISCO

abrir ↗

Referência

CVE-2010-1466

CVE-2010-1466—

Directory traversal vulnerability in scr/soustab.php in openUrgence Vaccin 1.03 allows remote attackers to read arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

pivot 1.40.4-7 - Multiple Vulnerabilities

CVE-2009-2133—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.40.4 and 1.40.7 allow remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ipswitch WS_FTP LE 5.08 - PASV Response Remote Buffer Overflow

CVE-2006-4974—remotewindows

Buffer overflow in Ipswitch WS_FTP Limited Edition (LE) 5.08 allows remote FTP servers to execute arbitrary code via a l

23RISCO

abrir ↗

Referência

CVE-2010-1186

CVE-2010-1186—

Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Linksys WRT54G Firmware 1.00.9 - Security Bypass (2)

CVE-2006-5202—remotehardware

Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attac

23RISCO

abrir ↗

Referência

CVE-2018-2892

CVE-2018-2892—

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Availability Suite Service).

23RISCO

abrir ↗

Referência✓ VexDay Proof

DFF PHP Framework API - 'Data Feed File' Remote File Inclusion

CVE-2008-4502—webappsphp

Multiple PHP remote file inclusion vulnerabilities in DataFeedFile (DFF) PHP Framework API allow remote attackers to exe

23RISCO

abrir ↗

Referência

CVE-2010-1199

CVE-2010-1199—

Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,

28RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Fusion Mod Classifieds - 'lid' SQL Injection

CVE-2008-5197—webappsphp

SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

TurnkeyForms Web Hosting Directory - Multiple Vulnerabilities

CVE-2008-6940—webappsphp

TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, whi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Discuz! - Remote Reset User Password

CVE-2008-6957—webappsphp

member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostp

23RISCO

abrir ↗

Referência

CVE-2013-5978

CVE-2013-5978—

Multiple cross-site scripting (XSS) vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPr

23RISCO

abrir ↗

Referência

CVE-2013-5219

CVE-2013-5219—

Directory traversal vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to read arbitrar

23RISCO

abrir ↗

Referência

CVE-2007-3340

CVE-2007-3340—

BugHunter HTTP SERVER (httpsv.exe) 1.6.2 allows remote attackers to cause a denial of service (application crash) via a

23RISCO

abrir ↗

Referência

CVE-2012-5861

CVE-2012-5861—

Sinapsi eSolar SQL Injection

41RISCO

abrir ↗

Referência

CVE-2026-14938

CVE-2026-14938MEDIUM

FluentBoards < 1.95.3 - Subscriber+ Cross-Board Task Disclosure via IDOR

33RISCO

abrir ↗

Referência✓ VexDay Proof

SineCMS 2.3.5 - Local File Inclusion / Remote Code Execution

CVE-2008-7163—webappsphp

Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and earlier, when register_globals is en

23RISCO

abrir ↗

Referência

CVE-2015-1318

CVE-2015-1318—

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a craf

38RISCO

abrir ↗

Referência

CVE-2015-1318

CVE-2015-1318—

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a craf

38RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX Safari 2.0.3 (417.9.2) - 'ROWSPAN' Denial of Service (PoC)

CVE-2006-2019—dososx

Apple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows remote attackers to cause a denial of service (CP

23RISCO

abrir ↗

Referência

CVE-2018-0746

CVE-2018-0746—

The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Wi

23RISCO

abrir ↗

Referência

CVE-2018-10068

CVE-2018-10068—

The jDownloads extension before 3.2.59 for Joomla! has XSS.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ksemail - Local File Inclusion

CVE-2008-1751—webappsphp

Multiple directory traversal vulnerabilities in index.php in Ksemail allow remote attackers to read arbitrary local file

23RISCO

abrir ↗

Referência

CVE-2009-3219

CVE-2009-3219—

Directory traversal vulnerability in a.php in AR Web Content Manager (AWCM) 2.1, when magic_quotes_gpc is disabled, allo

23RISCO

abrir ↗

Referência

CVE-2016-0049

CVE-2016-0049—

Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.