Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.523 exploits

Referência

CVE-2018-19042

CVE-2018-19042—

The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file movement via a ../ directory traversal in the di

28RISCO

abrir ↗

Referência

CVE-2010-2919

CVE-2010-2919—

SQL injection vulnerability in the StaticXT (com_staticxt) component for Joomla! allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

CA Internet Security Suite 2008 - 'SaveToFile()' File Corruption (PoC)

CVE-2008-2511—doswindows

Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 (aka UmxEventCliLib) ActiveX control in UmxEv

28RISCO

abrir ↗

Referência

CVE-2026-6591

CVE-2026-6591MEDIUM

ComfyUI LoadImage Node folder_paths.py folder_paths.get_annotated_filepath path traversal

33RISCO

abrir ↗

Referência

CVE-2009-4973

CVE-2009-4973—

SQL injection vulnerability in rss.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência

CVE-2019-12461

CVE-2019-12461—

Web Port 1.19.1 allows XSS via the /log type parameter.

38RISCO

abrir ↗

Referência

CVE-2021-41878

CVE-2021-41878—

A reflected cross-site scripting (XSS) vulnerability exists in the i-Panel Administration System Version 2.0 that enable

38RISCO

abrir ↗

Referência

i-doit CMDB 1.11.2 - Remote Code Execution

CVE-2018-20159—webappsphp

i-doit open 1.11.2 allows Remote Code Execution because ZIP archives are mishandled. It has an upload feature that allow

23RISCO

abrir ↗

Referência

CVE-2013-7091

CVE-2013-7091—

Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zim

60RISCO

abrir ↗

Referência

CVE-2015-5161

CVE-2015-5161—

The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x befor

23RISCO

abrir ↗

Referência

CVE-2015-5161

CVE-2015-5161—

The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x befor

23RISCO

abrir ↗

Referência

CVE-2018-11479

CVE-2018-11479—

The VPN component in Windscribe 1.81 uses the OpenVPN client for connections. Also, it creates a WindScribeService.exe s

38RISCO

abrir ↗

Referência

CVE-2025-34077

CVE-2025-34077CRITICAL

WordPress Pie Register Plugin ≤ 3.7.1.4 Authentication Bypass RCE

63RISCO

abrir ↗

Referência✓ VexDay Proof

Really Simple PHP and Ajax (RSPA) 2007-03-23 - Remote File Inclusion

CVE-2007-1982—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Really Simple PHP and Ajax (RSPA) 2007-03-23 and earlier allow rem

23RISCO

abrir ↗

Referência

CVE-2010-3124

CVE-2010-3124—

Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possib

28RISCO

abrir ↗

Referência

CVE-2010-3127

CVE-2010-3127—

Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers

28RISCO

abrir ↗

Referência✓ VexDay Proof

NetRisk 1.9.7 - Local/Remote File Inclusion

CVE-2008-0144—webappsphp

PHP remote file inclusion vulnerability in index.php in NetRisk 1.9.7 and earlier allows remote attackers to execute arb

35RISCO

abrir ↗

Referência

CVE-2026-6590

CVE-2026-6590MEDIUM

ComfyUI Model Preview Endpoint model_manager.py get_model_preview path traversal

33RISCO

abrir ↗

Referência

CVE-2010-3132

CVE-2010-3132—

Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909, and probably other versions, a

28RISCO

abrir ↗

Referência

CVE-2010-3139

CVE-2010-3139—

Untrusted search path vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe) allows local users, and p

28RISCO

abrir ↗

Referência

CVE-2010-3141

CVE-2010-3141—

Untrusted search path vulnerability in Microsoft PowerPoint 2010 allows local users, and possibly remote attackers, to e

28RISCO

abrir ↗

Referência

CVE-2023-27100

CVE-2023-27100CRITICAL

Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22

48RISCO

abrir ↗

Referência

CVE-2023-27100

CVE-2023-27100CRITICAL

Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22

48RISCO

abrir ↗

Referência

CVE-2016-5399

CVE-2016-5399—

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attac

23RISCO

abrir ↗

Referência

CVE-2009-4974

CVE-2009-4974—

Directory traversal vulnerability in box_display.php in TotalCalendar 2.4 allows remote attackers to read arbitrary file

23RISCO

abrir ↗

Referência

CVE-2019-16294

CVE-2019-16294—

SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode ch

23RISCO

abrir ↗

Referência

CVE-2014-1982

CVE-2014-1982—

The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firm

23RISCO

abrir ↗

Referência✓ VexDay Proof

SunOS Release 5.11 snv_101b - Remote IPv6 Crash

CVE-2009-0304—dossolaris

The kernel in Sun Solaris 10 and 11 snv_101b, and OpenSolaris before snv_108, allows remote attackers to cause a denial

23RISCO

abrir ↗

Referência

CVE-2016-8526

CVE-2016-8526—

Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to an XML external entities (XXE). XXEs are a

23RISCO

abrir ↗

Referência

CVE-2018-9038

CVE-2018-9038—

Monstra CMS 3.0.4 allows remote attackers to delete files via an admin/index.php?id=filesmanager&delete_dir=./&path=uplo

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.