Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados
35.840CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentespopularesrisco
22.573 exploits
Referência
CVE-2018-12052
CVE-2018-12052—
SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in get_sec.php.
23RISCO
abrir ↗
Referência
CVE-2011-3492
CVE-2011-3492—
Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial
60RISCO
abrir ↗
Referência
CVE-2024-23749
CVE-2024-23749HIGH
KiTTY versions 0.76.1.13 and before is vulnerable to command injection via the filename variable, occurs due to insuffic
41RISCO
abrir ↗
Referência✓ VexDay Proof
Web Content System 2.7.1 - Remote File Inclusion
CVE-2007-1771—webappsphp
PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System Solutions Web Content Syste
23RISCO
abrir ↗
Referência
CVE-2010-1466
CVE-2010-1466—
Directory traversal vulnerability in scr/soustab.php in openUrgence Vaccin 1.03 allows remote attackers to read arbitrar
23RISCO
abrir ↗
Referência
CVE-2010-2314
CVE-2010-2314—
PHP remote file inclusion vulnerability in nucleus/plugins/NP_Twitter.php in the NP_Twitter Plugin 0.8 and 0.9 for Nucle
23RISCO
abrir ↗
Referência
CVE-2010-1305
CVE-2010-1305—
Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly ot
43RISCO
abrir ↗
Referência
CVE-2017-2515
CVE-2017-2515—
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS
23RISCO
abrir ↗
Referência
CVE-2013-2618
CVE-2013-2618—
Cross-site scripting (XSS) vulnerability in editor.php in Network Weathermap before 0.97b allows remote attackers to inj
23RISCO
abrir ↗
Referência
CVE-2013-2618
CVE-2013-2618—
Cross-site scripting (XSS) vulnerability in editor.php in Network Weathermap before 0.97b allows remote attackers to inj
23RISCO
abrir ↗
Referência
CVE-2011-2544
CVE-2011-2544—
Cross-site scripting (XSS) vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and earlier a
23RISCO
abrir ↗
Referência
CVE-2014-4166
CVE-2014-4166—
Cross-site scripting (XSS) vulnerability in the song history in SHOUTcast DNAS 2.2.1 allows remote attackers to inject a
23RISCO
abrir ↗
Referência
CVE-2014-4166
CVE-2014-4166—
Cross-site scripting (XSS) vulnerability in the song history in SHOUTcast DNAS 2.2.1 allows remote attackers to inject a
23RISCO
abrir ↗
Referência
CVE-2015-8356
CVE-2015-8356—
Multiple SQL injection vulnerabilities in the mcart.xls module 6.5.2 and earlier for Bitrix allow remote authenticated u
23RISCO
abrir ↗
Referência
CVE-2023-0963
CVE-2023-0963HIGH
SourceCodester Music Gallery Site POST Request Users.php access control
41RISCO
abrir ↗
Referência
CVE-2011-0887
CVE-2011-0887—
The web management portal on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with firmware before 1.4.0.49.2 uses pred
23RISCO
abrir ↗
Referência
CVE-2014-1843
CVE-2014-1843—
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attacke
38RISCO
abrir ↗
Referência
CVE-2017-6999
CVE-2017-6999—
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO
23RISCO
abrir ↗
Referência
CVE-2017-6997
CVE-2017-6997—
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO
23RISCO
abrir ↗
Referência✓ VexDay Proof
Morovia Barcode ActiveX Professional 3.3.1304 - Arbitrary File Overwrite
CVE-2007-2644—remotewindows
A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrar
23RISCO
abrir ↗
Referência
CVE-2010-1471
CVE-2010-1471—
Directory traversal vulnerability in the AddressBook (com_addressbook) component 1.5.0 for Joomla! allows remote attacke
43RISCO
abrir ↗
Referência
CVE-2011-0962
CVE-2011-0962—
Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services Dev
23RISCO
abrir ↗
Referência
CVE-2026-18583
CVE-2026-18583MEDIUM
mz-automation libiec61850 MMS Request mms_mapping.c checkDataSetAccess out-of-bounds
33RISCO
abrir ↗
Referência
CVE-2016-7400
CVE-2016-7400—
Multiple SQL injection vulnerabilities in Exponent CMS before 2.4.0 allow remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗
Referência
CVE-2018-15768
CVE-2018-15768—
Insecure MySQL Configuration Vulnerability
23RISCO
abrir ↗
Referência
CVE-2012-5684
CVE-2012-5684—
Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web sc
23RISCO
abrir ↗
Referência
CVE-2013-6923
CVE-2013-6923—
Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331
23RISCO
abrir ↗
Referência
CVE-2013-6923
CVE-2013-6923—
Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331
23RISCO
abrir ↗
Referência
CVE-2015-8356
CVE-2015-8356—
Multiple SQL injection vulnerabilities in the mcart.xls module 6.5.2 and earlier for Bitrix allow remote authenticated u
23RISCO
abrir ↗
Referência
CVE-2012-3236
CVE-2012-3236—
fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and applic
28RISCO
abrir ↗
← anteriorpágina 594 / 753próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.