Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.866exploits catalogados

35.812CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.573GitHub PoC 14.316VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.572 exploits

Referência

CVE-2017-2474

CVE-2017-2474—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b

23RISCO

abrir ↗

Referência

CVE-2022-4049

CVE-2022-4049CRITICAL

WP User <= 7.0 - Unauthenticated SQLi

63RISCO

abrir ↗

Referência

CVE-2010-20103

CVE-2010-20103CRITICAL

ProFTPD 1.3.3c Backdoor Command Execution

63RISCO

abrir ↗

Referência

CVE-2010-20103

CVE-2010-20103CRITICAL

ProFTPD 1.3.3c Backdoor Command Execution

63RISCO

abrir ↗

Referência

CVE-2010-20103

CVE-2010-20103CRITICAL

ProFTPD 1.3.3c Backdoor Command Execution

63RISCO

abrir ↗

Referência

CVE-2018-18774

CVE-2018-18774—

CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows XSS via the admin/index.php module parameter.

23RISCO

abrir ↗

Referência

CVE-2021-24174

CVE-2021-24174—

Database Backups <= 1.2.2.6 - CSRF to Backup Download

23RISCO

abrir ↗

Referência

CVE-2014-100017

CVE-2014-100017—

Cross-site scripting (XSS) vulnerability in canned_opr.php in PhpOnlineChat 3.0 allows remote attackers to inject arbitr

23RISCO

abrir ↗

Referência

CVE-2021-40868

CVE-2021-40868—

In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS.

38RISCO

abrir ↗

Referência

CVE-2021-40868

CVE-2021-40868—

In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS.

38RISCO

abrir ↗

Referência

CVE-2018-11511

CVE-2018-11511—

The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL injection vulnerability

43RISCO

abrir ↗

Referência

CVE-2017-9978

CVE-2017-9978—

On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, a flaw was found with the error message sent as a response

23RISCO

abrir ↗

Referência

CVE-2017-9978

CVE-2017-9978—

On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, a flaw was found with the error message sent as a response

23RISCO

abrir ↗

Referência

CVE-2016-1821

CVE-2016-1821—

IOAudioFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a

23RISCO

abrir ↗

Referência

CVE-2009-3968

CVE-2009-3968—

Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2009-3969

CVE-2009-3969—

Stack-based buffer overflow in Faslo Player 7.0 allows remote attackers to cause a denial of service (application crash)

23RISCO

abrir ↗

Referência✓ VexDay Proof

Omegaboard 1.0beta4 - 'functions.php' Remote File Inclusion

CVE-2007-0683—webappsphp

PHP remote file inclusion vulnerability in includes/functions.php in Omegaboard 1.0beta4 and earlier allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Htaccess Passwort Generator 1.1 - 'ht_pfad' Remote File Inclusion

CVE-2007-1013—webappsphp

PHP remote file inclusion vulnerability in generate.php in VirtualSystem Htaccess Passwort Generator 1.1 allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution

CVE-2007-4061—remotewindows

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attac

28RISCO

abrir ↗

Referência✓ VexDay Proof

Scripteen Free Image Hosting Script 1.2 - 'cookie' Pass Grabber

CVE-2008-3211—webappsphp

Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrati

23RISCO

abrir ↗

Referência

CVE-2011-0962

CVE-2011-0962—

Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services Dev

23RISCO

abrir ↗

Referência

CVE-2026-18583

CVE-2026-18583MEDIUM

mz-automation libiec61850 MMS Request mms_mapping.c checkDataSetAccess out-of-bounds

33RISCO

abrir ↗

Referência

CVE-2016-7400

CVE-2016-7400—

Multiple SQL injection vulnerabilities in Exponent CMS before 2.4.0 allow remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2018-15768

CVE-2018-15768—

Insecure MySQL Configuration Vulnerability

23RISCO

abrir ↗

Referência

CVE-2012-5684

CVE-2012-5684—

Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência

CVE-2013-6923

CVE-2013-6923—

Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331

23RISCO

abrir ↗

Referência

CVE-2013-6923

CVE-2013-6923—

Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331

23RISCO

abrir ↗

Referência

CVE-2015-8356

CVE-2015-8356—

Multiple SQL injection vulnerabilities in the mcart.xls module 6.5.2 and earlier for Bitrix allow remote authenticated u

23RISCO

abrir ↗

Referência

CVE-2012-3236

CVE-2012-3236—

fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and applic

28RISCO

abrir ↗

Referência

CVE-2013-1616

CVE-2013-1616—

The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbit

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.