Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

22.266 exploits

Referência

CVE-2018-18860

CVE-2018-18860—

A local privilege escalation vulnerability has been identified in the SwitchVPN client 2.1012.03 for macOS. Due to over-

23RISCO

abrir ↗

Referência

CVE-2012-4877

CVE-2012-4877—

Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

NetRisk 2.0 - Cross-Site Scripting / SQL Injection

CVE-2008-4887—webappsphp

SQL injection vulnerability in index.php in NetRisk 2.0 and earlier allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2018-12904

CVE-2018-12904—

In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used, local attackers could cause

23RISCO

abrir ↗

Referência

CVE-2008-4142

CVE-2008-4142—

SQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

SiteEngine 5.x - Multiple Vulnerabilities

CVE-2008-7267—webappsphp

SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2008-4157

CVE-2008-4157—

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2025-34099

CVE-2025-34099CRITICAL

VICIdial vicidial_sales_viewer.php Unauthenticated Command Injection via Basic Auth Password

63RISCO

abrir ↗

Referência

CVE-2025-34099

CVE-2025-34099CRITICAL

VICIdial vicidial_sales_viewer.php Unauthenticated Command Injection via Basic Auth Password

63RISCO

abrir ↗

Referência

CVE-2010-2673

CVE-2010-2673—

SQL injection vulnerability in profile_view.php in Devana 1.6.6 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-2673

CVE-2010-2673—

SQL injection vulnerability in profile_view.php in Devana 1.6.6 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2005-4416

CVE-2005-4416—

SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência

CVE-2014-2043

CVE-2014-2043—

SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows re

23RISCO

abrir ↗

Referência

CVE-2020-26629

CVE-2020-26629CRITICAL

A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows

48RISCO

abrir ↗

Referência

CVE-2016-0846

CVE-2016-0846—

libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft Forum - 'cat' SQL Injection

CVE-2008-3954—webappsphp

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2017-11909

CVE-2017-11909—

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code i

35RISCO

abrir ↗

Referência

CVE-2017-11911

CVE-2017-11911—

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code i

35RISCO

abrir ↗

Referência

CVE-2017-11918

CVE-2017-11918—

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to

35RISCO

abrir ↗

Referência

CVE-2010-4844

CVE-2010-4844—

SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-4844

CVE-2010-4844—

SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-2676

CVE-2010-2676—

Multiple directory traversal vulnerabilities in index.php in Open Web Analytics (OWA) 1.2.3 might allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-2676

CVE-2010-2676—

Multiple directory traversal vulnerabilities in index.php in Open Web Analytics (OWA) 1.2.3 might allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2017-12542

CVE-2017-12542—

A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53

60RISCO

abrir ↗

Referência✓ VexDay Proof

SAPID Gallery 1.0 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-4065—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko SAPID Gallery 1.0 and earlier allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows Explorer - '.WMF' CreateBrushIndirect Denial of Service

CVE-2006-4071—doswindows

Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP,

28RISCO

abrir ↗

Referência

CVE-2026-64827

CVE-2026-64827CRITICAL

Telenia TVox 26.5.3 Authentication Bypass via set_env.php

48RISCO

abrir ↗

Referência✓ VexDay Proof

MOTIONBORG Web Real Estate 2.1 - SQL Injection

CVE-2007-0196—webappsasp

SQL injection vulnerability in admin_check_user.asp in Motionborg Web Real Estate 2.1 and earlier allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2009-4552

CVE-2009-4552—

Cross-site scripting (XSS) vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to inject arbi

23RISCO

abrir ↗

Referência

CVE-2010-2700

CVE-2010-2700—

Cross-site scripting (XSS) vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) allow

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.