Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.058exploits catalogados

35.300CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.175GitHub PoC 14.096VulnCheck XDB 8.607Nuclei 4.255Metasploit 3.474✓ só verificadosrecentes populares risco

22.175 exploits

Referência

CVE-2018-11403

CVE-2018-11403—

DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter.

23RISCO

abrir ↗

Referência

CVE-2017-0146

CVE-2017-0146HIGHsob ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

abrir ↗

Referência

CVE-2018-19750

CVE-2018-19750—

DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Doma

23RISCO

abrir ↗

Referência

CVE-2009-4658

CVE-2009-4658—

Xerver 4.32 allows remote authenticated users to cause a denial of service (daemon crash) via a non-numeric web port ass

23RISCO

abrir ↗

Referência

CVE-2017-8838

CVE-2017-8838—

XSS via syncid exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380h

23RISCO

abrir ↗

Referência

CVE-2017-0146

CVE-2017-0146HIGHsob ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

abrir ↗

Referência✓ VexDay Proof

IceBB 1.0-rc5 - Remote Code Execution

CVE-2007-1725—webappsphp

SQL injection vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

IceBB 1.0-rc5 - Remote Create Admin

CVE-2007-1725—webappsphp

SQL injection vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2025-55241

CVE-2025-55241CRITICAL

Azure Entra ID Elevation of Privilege Vulnerability

48RISCO

abrir ↗

Referência

CVE-2021-4464

CVE-2021-4464CRITICAL

FIberHome AN5506-04-FA / HG6245D Routers Remote Stack Overflow

48RISCO

abrir ↗

Referência

CVE-2021-4464

CVE-2021-4464CRITICAL

FIberHome AN5506-04-FA / HG6245D Routers Remote Stack Overflow

48RISCO

abrir ↗

Referência✓ VexDay Proof

GPS CMS 1.2 - 'print.asp' SQL Injection

CVE-2007-0554—webappsasp

SQL injection vulnerability in print.asp in Guo Xu Guos Posting System (GPS) 1.2 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2008-4751

CVE-2008-4751—

Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 2.0 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-4631

CVE-2010-4631—

Multiple cross-site scripting (XSS) vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-4631

CVE-2010-4631—

Multiple cross-site scripting (XSS) vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-0703

CVE-2010-0703—

Cross-site scripting (XSS) vulnerability in wa/auth in PortWise SSL VPN 4.6 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-5010

CVE-2010-5010—

Cross-site scripting (XSS) vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2010-4873

CVE-2010-4873—

Cross-site scripting (XSS) vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers to inject arbitrary we

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPDirector 0.21 - 'videos.php?id' SQL Injection

CVE-2007-3562—webappsphp

SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Constructr CMS 3.02.5 stable - Multiple Vulnerabilities

CVE-2008-5847—webappsphp

Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent atta

23RISCO

abrir ↗

Referência

CVE-2017-9413

CVE-2017-9413—

Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

Blog:CMS 4.2.1b - SQL Injection / Cross-Site Scripting

CVE-2008-0359—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-Store Kit-1 < 2 PayPal Edition - 'pid' SQL Injection

CVE-2008-3594—webappsphp

SQL injection vulnerability in viewdetails.php in MagicScripts E-Store Kit-1, E-Store Kit-2, E-Store Kit-1 Pro PayPal Ed

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenImpro 1.1 - 'image.php' SQL Injection

CVE-2008-3599—webappsphp

SQL injection vulnerability in image.php in OpenImpro 1.1 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quicksilver Forums 1.4.1 - SQL Injection

CVE-2008-3601—webappsphp

SQL injection vulnerability in index.php in Quicksilver Forums 1.4.1 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

TekBase All-in-One 3.1 - Multiple SQL Injections

CVE-2009-2120—webappsphp

Multiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2018-5282

CVE-2018-5282—

Kentico 9.0 through 11.0 has a stack-based buffer overflow via the SqlName, SqlPswd, Database, UserName, or Password fie

23RISCO

abrir ↗

Referência

CVE-2020-8424

CVE-2020-8424—

Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.php

23RISCO

abrir ↗

Referência✓ VexDay Proof

aspWebLinks 2.0 - SQL Injection / Admin Pass Change

CVE-2006-2848—webappsasp

links.asp in aspWebLinks 2.0 allows remote attackers to change the administrative password, possibly via a direct reques

23RISCO

abrir ↗

Referência

CVE-2017-0148

CVE-2017-0148HIGHsob ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.