Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.647exploits catalogados

34.986CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2017-7064

CVE-2017-7064—

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iClo

23RISCO

abrir ↗

Referência

CVE-2016-5304

CVE-2016-5304—

Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6

23RISCO

abrir ↗

Referência

CVE-2012-4260

CVE-2012-4260—

Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary SQL commands via the (1)

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cplinks 1.03 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2008-2181—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in search.php in cpLinks 1.03 allow remote attackers to inject arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

NULL FTP Server 1.1.0.7 - 'Site' Command Injection

CVE-2008-6534—remotewindows

Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute

23RISCO

abrir ↗

Referência

CVE-2010-4933

CVE-2010-4933—

SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-4933

CVE-2010-4933—

SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-4934

CVE-2010-4934—

SQL injection vulnerability in video.php in Get Tube 4.51 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2010-4935

CVE-2010-4935—

SQL injection vulnerability in poll.php in Entrans 0.3.2 and earlier allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência

CVE-2010-4940

CVE-2010-4940—

SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2010-0702

CVE-2010-0702—

SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2010-0702

CVE-2010-0702—

SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2016-1749

CVE-2016-1749—

IOUSBFamily in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a d

23RISCO

abrir ↗

Referência

CVE-2015-7568

CVE-2015-7568—

SQL injection vulnerability in the password recovery feature in Yeager CMS 1.2.1 allows remote attackers to change the a

23RISCO

abrir ↗

Referência

CVE-2015-7568

CVE-2015-7568—

SQL injection vulnerability in the password recovery feature in Yeager CMS 1.2.1 allows remote attackers to change the a

23RISCO

abrir ↗

Referência

CVE-2024-25734

CVE-2024-25734HIGH

An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. The TELNET service prompts for a password only a

41RISCO

abrir ↗

Referência

CVE-2007-3703

CVE-2007-3703—

Stack-based buffer overflow in a certain ActiveX control in sasatl.dll 1.5.0.531 in Zenturi Program Checker (ProgramChec

23RISCO

abrir ↗

Referência

CVE-2013-1803

CVE-2013-1803—

Multiple SQL injection vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebCalendar 0.9.45 - 'includedir' Remote File Inclusion

CVE-2007-1483—webappsphp

Multiple PHP remote file inclusion vulnerabilities in WebCalendar 0.9.45 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência

CVE-2018-0743

CVE-2018-0743—

Windows Subsystem for Linux in Windows 10 version 1703, Windows 10 version 1709, and Windows Server, version 1709 allows

23RISCO

abrir ↗

Referência

CVE-2012-6522

CVE-2012-6522—

Directory traversal vulnerability in the getContent function in codes/wcms.php in w-CMS 2.01 allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2010-4968

CVE-2010-4968—

SQL injection vulnerability in the webmaster-tips.net Flash Gallery (com_wmtpic) component 1.0 for Joomla! allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

MailEnable 3.13 SMTP Service - 'VRFY/EXPN' Denial of Service

CVE-2008-1275—doswindows

Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x, Professional Edition 3.x an

23RISCO

abrir ↗

Referência✓ VexDay Proof

PostNuke Module pnEncyclopedia 0.2.0 - SQL Injection

CVE-2008-2191—webappsphp

SQL injection vulnerability in the pnEncyclopedia module 0.2.0 and earlier for PostNuke allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

zKup CMS 2.0 < 2.3 - Arbitrary File Upload

CVE-2008-7123—webappsphp

Static code injection vulnerability in admin/configuration/modifier.php in zKup CMS 2.0 through 2.3 allows remote attack

23RISCO

abrir ↗

Referência

CVE-2010-4968

CVE-2010-4968—

SQL injection vulnerability in the webmaster-tips.net Flash Gallery (com_wmtpic) component 1.0 for Joomla! allows remote

23RISCO

abrir ↗

Referência

CVE-2015-2223

CVE-2015-2223—

Multiple cross-site scripting (XSS) vulnerabilities in the web-based console management interface in Palo Alto Networks

23RISCO

abrir ↗

Referência

CVE-2018-16061

CVE-2018-16061—

Mitsubishi Electric Europe B.V. SmartRTU devices allow XSS via the username parameter or PATH_INFO to login.php.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jinzora 2.1 - 'media.php' Remote File Inclusion

CVE-2006-7130—webappsphp

PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote a

23RISCO

abrir ↗

Referência

CVE-2026-3301

CVE-2026-3301CRITICAL

Totolink N300RH Web Management cstecgi.cgi setWebWlanIdx os command injection

48RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.