Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados
35.420CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentespopularesrisco
22.266 exploits
Referência
CVE-2010-3306
CVE-2010-3306—
Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers t
23RISCO
abrir ↗
Referência✓ VexDay Proof
ArabCMS - 'rss.php' Local File Inclusion
CVE-2008-4667—webappsphp
Directory traversal vulnerability in rss.php in ArabCMS 2.0 beta 1 allows remote attackers to include and execute arbitr
23RISCO
abrir ↗
Referência
CVE-2017-17571
CVE-2017-17571—
FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter.
23RISCO
abrir ↗
Referência✓ VexDay Proof
Real Estate Manager 1.01 - 'cat_id' SQL Injection
CVE-2008-4674—webappsphp
SQL injection vulnerability in realestate-index.php in Conkurent Real Estate Manager 1.01 allows remote attackers to exe
23RISCO
abrir ↗
Referência
CVE-2026-16202
CVE-2026-16202MEDIUM
SourceCodester Class and Exam Timetabling System CYS.php cross site scripting
33RISCO
abrir ↗
Referência
CVE-2026-16201
CVE-2026-16201MEDIUM
zevorn rt-claw http_request net.c claw_net_post information disclosure
33RISCO
abrir ↗
Referência
CVE-2017-17572
CVE-2017-17572—
FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.
23RISCO
abrir ↗
Referência
CVE-2017-17572
CVE-2017-17572—
FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.
23RISCO
abrir ↗
Referência
CVE-2017-17573
CVE-2017-17573—
FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id p
23RISCO
abrir ↗
Referência
CVE-2017-17573
CVE-2017-17573—
FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id p
23RISCO
abrir ↗
Referência
CVE-2026-49948
CVE-2026-49948HIGH
Mem0 0.2.8 Missing Authorization via POST /configure Endpoint
21RISCO
abrir ↗
Referência
CVE-2017-17574
CVE-2017-17574—
FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.
23RISCO
abrir ↗
Referência
CVE-2017-17574
CVE-2017-17574—
FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.
23RISCO
abrir ↗
Referência
CVE-2017-17575
CVE-2017-17575—
FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter.
23RISCO
abrir ↗
Referência
CVE-2026-9384
CVE-2026-9384CRITICAL
Totolink A8000RU Web Management cstecgi.cgi setDiagnosisCfg os command injection
48RISCO
abrir ↗
Referência
CVE-2026-9383
CVE-2026-9383MEDIUM
itsourcecode Electronic Judging System login.php sql injection
33RISCO
abrir ↗
Referência
CVE-2026-9382
CVE-2026-9382HIGH
Edimax BR-6675nD POST Request formPPTPSetup buffer overflow
41RISCO
abrir ↗
Referência
CVE-2017-17580
CVE-2017-17580—
FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details.
23RISCO
abrir ↗
Referência
CVE-2017-17580
CVE-2017-17580—
FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details.
23RISCO
abrir ↗
Referência✓ VexDay Proof
Hummingbird Deployment Wizard 2008 - ActiveX Command Execution
CVE-2008-4728—remotewindows
Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in
35RISCO
abrir ↗
Referência✓ VexDay Proof
Hummingbird Deployment Wizard 2008 - ActiveX File Execution(2)
CVE-2008-4728—remotewindows
Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in
35RISCO
abrir ↗
Referência✓ VexDay Proof
Hummingbird Deployment Wizard 2008 - Registry Values Creation/Change
CVE-2008-4728—remotewindows
Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in
35RISCO
abrir ↗
Referência
CVE-2017-17581
CVE-2017-17581—
FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.
23RISCO
abrir ↗
Referência✓ VexDay Proof
Hummingbird 13.0 - ActiveX Remote Buffer Overflow (PoC)
CVE-2008-4729—doswindows
Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in Hummingbird Xweb ActiveX Cont
23RISCO
abrir ↗
Referência
CVE-2026-12197
CVE-2026-12197HIGH
Ruijie EG105G-P JSON-RPC Diagnose Endpoint diagnose nslookup command injection
41RISCO
abrir ↗
Referência
CVE-2017-17581
CVE-2017-17581—
FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.
23RISCO
abrir ↗
Referência✓ VexDay Proof
WordPress Plugin WP Comment Remix 1.4.3 - SQL Injection
CVE-2008-4732—webappsphp
SQL injection vulnerability in ajax_comments.php in the WP Comment Remix plugin before 1.4.4 for WordPress allows remote
23RISCO
abrir ↗
Referência
CVE-2017-17582
CVE-2017-17582—
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.
23RISCO
abrir ↗
Referência
CVE-2017-17582
CVE-2017-17582—
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.
23RISCO
abrir ↗
Referência
CVE-2026-25558
CVE-2026-25558MEDIUM
QloApps 1.7.0 Stored XSS via SVG File Upload in Admin File Manager
13RISCO
abrir ↗
← anteriorpágina 425 / 743próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.