Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.647exploits catalogados

34.986CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2010-4151

CVE-2010-4151—

SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic_quotes_gpc is disabled, allows

23RISCO

Referência

CVE-2022-30333

CVE-2022-30333HIGHsob ataqueransomware

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) o

100RISCO

Referência

CVE-2020-7247

CVE-2020-7247CRITICALsob ataque

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to

100RISCO

Referência

CVE-2020-7247

CVE-2020-7247CRITICALsob ataque

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to

100RISCO

Referência

CVE-2020-7247

CVE-2020-7247CRITICALsob ataque

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to

100RISCO

Referência

CVE-2020-7247

CVE-2020-7247CRITICALsob ataque

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to

100RISCO

Referência

CVE-2020-7247

CVE-2020-7247CRITICALsob ataque

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to

100RISCO

Referência

CVE-2010-4170

CVE-2010-4170—

The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allow

38RISCO

Referência

CVE-2021-40539

CVE-2021-40539CRITICALsob ataqueransomware

Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resulta

100RISCO

Referência

CVE-2019-3929

CVE-2019-3929CRITICALsob ataque

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Ba

100RISCO

Referência

CVE-2019-3929

CVE-2019-3929CRITICALsob ataque

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Ba

100RISCO

Referência

CVE-2019-25676

CVE-2019-25676HIGH

Ask Expert Script 3.0.5 Cross Site Scripting SQL Injection

41RISCO

Referência

CVE-2017-9791

CVE-2017-9791CRITICALsob ataque

The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passe

100RISCO

Referência

CVE-2010-4185

CVE-2010-4185—

SQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows remote attackers to execute arb

23RISCO

Referência

CVE-2010-4210

CVE-2010-4210—

The pfs_getextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a mutex that was not previo

23RISCO

Referência

CVE-2023-32560

CVE-2023-32560HIGH

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disrup

78RISCO

Referência

CVE-2023-32560

CVE-2023-32560HIGH

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disrup

78RISCO

Referência

CVE-2020-7209

CVE-2020-7209—

LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.

60RISCO

Referência

CVE-2026-61514

CVE-2026-61514CRITICAL

Puwell IP Camera 2.x - 4.x Unauthenticated Access via TCP Port 23456

48RISCO

Referência

CVE-2026-61515

CVE-2026-61515CRITICAL

Puwell IP Camera 2.x - 4.x Unauthenticated Command Injection via DebugShell

48RISCO

Referência

CVE-2026-16548

CVE-2026-16548MEDIUM

Bit Assist < 1.8.2 - Unauthenticated Arbitrary File Upload via Response Endpoint

33RISCO

Referência

CVE-2026-16547

CVE-2026-16547MEDIUM

REST API Log < 1.7.1 - Unauthenticated Sensitive Log Data Disclosure via Download Endpoint

33RISCO

Referência

CVE-2026-16546

CVE-2026-16546MEDIUM

Wired Impact Volunteer Management < 2.8.2 - Subscriber+ Arbitrary RSVP Removal via wivm_remove_rsvp

33RISCO

Referência

CVE-2026-16296

CVE-2026-16296MEDIUM

Clearfy < 2.4.3 - Open Redirect via Cyrlitera 404 Handler

33RISCO

Referência

CVE-2026-16295

CVE-2026-16295MEDIUM

Clearfy < 2.4.3 - Subscriber+ Sensitive Information Disclosure via Factory Page-Action Dispatcher

33RISCO

Referência✓ VexDay Proof

phpBB Mod FileBase 2.0 - 'id' SQL Injection

CVE-2008-1305—webappsphp

SQL injection vulnerability in filebase.php in the Filebase mod for phpBB allows remote attackers to execute arbitrary S

23RISCO

Referência✓ VexDay Proof

Bloo 1.00 - Multiple SQL Injections

CVE-2008-1313—webappsphp

Multiple SQL injection vulnerabilities in index.php in Bloo 1.00 and earlier allow remote attackers to execute arbitrary

23RISCO

Referência

CVE-2010-4269

CVE-2010-4269—

SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL comman

23RISCO

Referência

CVE-2010-4269

CVE-2010-4269—

SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL comman

23RISCO

Referência

CVE-2010-4272

CVE-2010-4272—

SQL injection vulnerability in the Pulse Infotech Sponsor Wall (com_sponsorwall) component 1.1 for Joomla! allows remote

23RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.