Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.523 exploits

Referência

CVE-2009-2634

CVE-2009-2634—

PHP remote file inclusion vulnerability in toolbar_ext.php in the MediaLibrary (com_media_library) component 1.5.3 Basic

23RISCO

abrir ↗

Referência

CVE-2009-4680

CVE-2009-4680—

SQL injection vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2022-24715

CVE-2022-24715HIGH

Arbitrary code execution for authenticated users in Icinga Web 2

46RISCO

abrir ↗

Referência✓ VexDay Proof

BitchX 1.1 Final - MODE Remote Heap Overflow

CVE-2007-4584—remotelinux

Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in

28RISCO

abrir ↗

Referência

CVE-2014-7186

CVE-2014-7186—

The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial o

35RISCO

abrir ↗

Referência

CVE-2013-5220

CVE-2013-5220—

goform/login on the HOT HOTBOX router with software 2.1.11 allows remote attackers to cause a denial of service (device

23RISCO

abrir ↗

Referência

CVE-2009-3663

CVE-2009-3663—

Format string vulnerability in the h_readrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to

28RISCO

abrir ↗

Referência

CVE-2010-5300

CVE-2010-5300—

Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service (crash

28RISCO

abrir ↗

Referência

CVE-2020-24223

CVE-2020-24223—

Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters.

43RISCO

abrir ↗

Referência

CVE-2013-5318

CVE-2013-5318—

SQL injection vulnerability in Ginkgo CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the rang par

23RISCO

abrir ↗

Referência

CVE-2010-1306

CVE-2010-1306—

Directory traversal vulnerability in the Picasa (com_joomlapicasa2) component 2.0 and 2.0.5 for Joomla! allows remote at

43RISCO

abrir ↗

Referência

CVE-2010-1306

CVE-2010-1306—

Directory traversal vulnerability in the Picasa (com_joomlapicasa2) component 2.0 and 2.0.5 for Joomla! allows remote at

43RISCO

abrir ↗

Referência✓ VexDay Proof

aflog 1.01 - Cross-Site Scripting / SQL Injection

CVE-2008-0397—webappsphp

Multiple SQL injection vulnerabilities in aflog 1.01, and possibly earlier versions, allow remote attackers to execute a

23RISCO

abrir ↗

Referência

Centos WebPanel 7 - 'term' SQL Injection

CVE-2020-10230—webappslinux

CentOS-WebPanel.com (aka CWP) CentOS Web Panel (for CentOS 6 and 7) allows SQL Injection via the /cwp_{SESSION_HASH}/adm

28RISCO

abrir ↗

Referência

CVE-2025-14705

CVE-2025-14705CRITICAL

Shiguangwu sgwbox N3 SHARESERVER Feature command injection

53RISCO

abrir ↗

Referência

CVE-2017-6972

CVE-2017-6972—

AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execu

28RISCO

abrir ↗

Referência

CVE-2020-35775

CVE-2020-35775—

CITSmart before 9.1.2.23 allows LDAP Injection.

28RISCO

abrir ↗

Referência

CVE-2009-4687

CVE-2009-4687—

SQL injection vulnerability in silentum_guestbook.php in Silentum Guestbook 2.0.2 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2016-6602

CVE-2016-6602—

ZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which allows context-dependen

50RISCO

abrir ↗

Referência

CVE-2017-3528

CVE-2017-3528—

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (li

43RISCO

abrir ↗

Referência

CVE-2019-9649

CVE-2019-9649—

An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. Using the MDTM FTP command, a remote att

28RISCO

abrir ↗

Referência

CVE-2017-2641

CVE-2017-2641—

In Moodle 2.x and 3.x, SQL injection can occur via user preferences.

28RISCO

abrir ↗

Referência

CVE-2018-11538

CVE-2018-11538—

servlet/UserServlet in SearchBlox 8.6.6 has CSRF via the u_name, u_passwd1, u_passwd2, role, and X-XSRF-TOKEN POST param

28RISCO

abrir ↗

Referência

CVE-2017-11907

CVE-2017-11907—

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Se

35RISCO

abrir ↗

Referência

CVE-2018-11538

CVE-2018-11538—

servlet/UserServlet in SearchBlox 8.6.6 has CSRF via the u_name, u_passwd1, u_passwd2, role, and X-XSRF-TOKEN POST param

28RISCO

abrir ↗

Referência

CVE-2014-2013

CVE-2014-2013—

Stack-based buffer overflow in the xps_parse_color function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote a

28RISCO

abrir ↗

Referência

CVE-2009-2692

CVE-2009-2692—

The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socke

43RISCO

abrir ↗

Referência

CVE-2017-16352

CVE-2017-16352—

GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image dir

28RISCO

abrir ↗

Referência

CVE-2018-19585

CVE-2018-19585—

GitLab CE/EE versions 8.18 up to 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1 have CRLF Injection

28RISCO

abrir ↗

Referência

CVE-2018-19585

CVE-2018-19585—

GitLab CE/EE versions 8.18 up to 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1 have CRLF Injection

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.