Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados

35.840CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.573 exploits

Referência

CVE-2017-3630

CVE-2017-3630—

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions t

38RISCO

abrir ↗

Referência

CVE-2017-3630

CVE-2017-3630—

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions t

38RISCO

abrir ↗

Referência

CVE-2011-2938

CVE-2011-2938—

Multiple cross-site scripting (XSS) vulnerabilities in filter_api.php in MantisBT before 1.2.7 allow remote attackers to

23RISCO

abrir ↗

Referência

CVE-2014-3842

CVE-2014-3842—

Multiple cross-site scripting (XSS) vulnerabilities in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allow

23RISCO

abrir ↗

Referência

CVE-2021-42136

CVE-2021-42136—

A stored Cross-Site Scripting (XSS) vulnerability in the Missing Data Codes functionality of REDCap before 11.4.0 allows

23RISCO

abrir ↗

Referência

CVE-2019-10874

CVE-2019-10874—

Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to ex

23RISCO

abrir ↗

Referência

CVE-2019-10874

CVE-2019-10874—

Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rising AntiVirus Online Scanner - Insecure Method Flaw

CVE-2008-1116—remotewindows

Insecure method vulnerability in the Web Scan Object ActiveX control (OL2005.dll) in Rising Antivirus Online Scanner all

28RISCO

abrir ↗

Referência✓ VexDay Proof

Symphony 1.7.01 (non-patched) - Remote Code Execution

CVE-2008-3591—webappsphp

SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

PunBB 1.2.16 - Blind Password Recovery

CVE-2008-1484—webappsphp

The password reset feature in PunBB 1.2.16 and earlier uses predictable random numbers based on the system time, which a

23RISCO

abrir ↗

Referência✓ VexDay Proof

events Calendar 1.1 - Remote File Inclusion

CVE-2008-4673—webappsphp

PHP remote file inclusion vulnerability in panel/common/theme/default/header_setup.php in WebBiscuits Software Events Ca

23RISCO

abrir ↗

Referência

CVE-2010-1494

CVE-2010-1494—

Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to re

43RISCO

abrir ↗

Referência

CVE-2010-1494

CVE-2010-1494—

Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to re

43RISCO

abrir ↗

Referência

CVE-2015-6811

CVE-2015-6811—

SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlie

23RISCO

abrir ↗

Referência

CVE-2015-2789

CVE-2015-2789—

Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.

23RISCO

abrir ↗

Referência

CVE-2020-18724

CVE-2020-18724—

Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19

23RISCO

abrir ↗

Referência

CVE-2024-10811

CVE-2024-10811CRITICAL

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up

48RISCO

abrir ↗

Referência

CVE-2023-0905

CVE-2023-0905HIGH

SourceCodester Employee Task Management System changePasswordForEmployee.php improper authentication

41RISCO

abrir ↗

Referência

CVE-2025-34187

CVE-2025-34187CRITICAL

Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell

48RISCO

abrir ↗

Referência

CVE-2025-34187

CVE-2025-34187CRITICAL

Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell

48RISCO

abrir ↗

Referência✓ VexDay Proof

webSPELL 4.2.0e - 'page' Blind SQL Injection

CVE-2009-1912—webappsphp

Directory traversal vulnerability in src/func/language.php in webSPELL 4.2.0e and earlier allows remote attackers to inc

23RISCO

abrir ↗

Referência

CVE-2018-13989

CVE-2018-13989—

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable

23RISCO

abrir ↗

Referência

CVE-2018-13989

CVE-2018-13989—

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable

23RISCO

abrir ↗

Referência

CVE-2012-10059

CVE-2012-10059CRITICAL

Dolibarr ERP/CRM Post-Auth OS Command Injection

63RISCO

abrir ↗

Referência

CVE-2018-7318

CVE-2018-7318—

SQL Injection exists in the CheckList 1.1.1 component for Joomla! via the title_search, tag_search, name_search, descrip

23RISCO

abrir ↗

Referência

CVE-2022-3982

CVE-2022-3982CRITICAL

Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload

63RISCO

abrir ↗

Referência

CVE-2014-2045

CVE-2014-2045—

Multiple cross-site scripting (XSS) vulnerabilities in the old and new interfaces in Viprinet Multichannel VPN Router 30

23RISCO

abrir ↗

Referência

CVE-2010-1528

CVE-2010-1528—

PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when register_globals is enabled, allows

23RISCO

abrir ↗

Referência

CVE-2009-4823

CVE-2009-4823—

Cross-site scripting (XSS) vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote a

23RISCO

abrir ↗

Referência

CVE-2019-10849

CVE-2019-10849—

Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.