Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados

35.840CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.600 exploits

Referência✓ VexDay Proof

Anon Proxy Server 0.1000 - Remote Command Execution

CVE-2007-6459—webappsphp

Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharact

23RISCO

abrir ↗

Referência

CVE-2010-1944

CVE-2010-1944—

Multiple PHP remote file inclusion vulnerabilities in openMairie openCimetiere 2.01, when register_globals is enabled, a

23RISCO

abrir ↗

Referência

CVE-2020-12500

CVE-2020-12500CRITICAL

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

48RISCO

abrir ↗

Referência

CVE-2020-12500

CVE-2020-12500CRITICAL

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

48RISCO

abrir ↗

Referência

CVE-2013-3212

CVE-2013-3212—

vtiger CRM 5.4.0 and earlier contain local file-include vulnerabilities in 'customerportal.php' which allows remote atta

23RISCO

abrir ↗

Referência

CVE-2023-31068

CVE-2023-31068—

An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on so

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Internet Explorer - XML Parsing Remote Buffer Overflow

CVE-2008-4844—remotewindows

Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet

50RISCO

abrir ↗

Referência

CVE-2012-2209

CVE-2012-2209—

Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Piwigo before 2.3.4 allow remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

LeadTools Raster Thumbnail Object Library - 'LTRTM14e.dll' Remote Buffer Overflow

CVE-2007-2787—remotewindows

Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in Lea

23RISCO

abrir ↗

Referência

CVE-2021-34473

CVE-2021-34473CRITICALsob ataqueransomware

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2023-1389

CVE-2023-1389HIGHsob ataque

TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability i

100RISCO

abrir ↗

Referência✓ VexDay Proof

Pligg CMS 9.9.0 - Cross-Site Scripting / Local File Inclusion / SQL Injection

CVE-2008-7089—webappsphp

Cross-site scripting (XSS) vulnerability in Pligg 9.9 and earlier allows remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Referência✓ VexDay Proof

SiteDepth CMS 3.44 - 'ShowImage.php?name' File Disclosure

CVE-2007-3404—webappsphp

Directory traversal vulnerability in ShowImage.php in SiteDepth CMS 3.44 allows remote attackers to read arbitrary files

23RISCO

abrir ↗

Referência✓ VexDay Proof

Easy Scripts Answer and Question Script - Multiple Vulnerabilities

CVE-2009-1663—webappsphp

Unrestricted file upload vulnerability in myaccount.php in Easy Scripts Answer and Question Script allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin WassUp 1.4.3 - 'to_date' SQL Injection

CVE-2008-0520—webappsphp

Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote att

23RISCO

abrir ↗

Referência

CVE-2010-4770

CVE-2010-4770—

SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

1CRM On-Premise Software 8.5.7 - Persistent Cross-Site Scripting

CVE-2019-14221—webappsphp

1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation.

23RISCO

abrir ↗

Referência

Shopizer 2.16.0 - 'Multiple' Cross-Site Scripting (XSS)

CVE-2021-33561—webappsjava

A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Check New 4.52 - SQL Injection

CVE-2008-5586—webappsphp

SQL injection vulnerability in findoffice.php in Check Up New Generation (aka Check New) 4.52, when magic_quotes_gpc is

23RISCO

abrir ↗

Referência

CVE-2024-23897

CVE-2024-23897CRITICALsob ataqueransomware

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RISCO

abrir ↗

Referência✓ VexDay Proof

phpPgAdmin 4.2.1 - '_language' Local File Inclusion

CVE-2008-5587—webappsphp

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is ena

43RISCO

abrir ↗

Referência

Drupal 11.x-dev - Full Path Disclosure

CVE-2024-45440MEDIUMwebappsphp

core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash

48RISCO

abrir ↗

Referência✓ VexDay Proof

RankEm - 'siteID' SQL Injection

CVE-2008-5588—webappsasp

SQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2026-57517

CVE-2026-57517CRITICAL

Control Web Panel < 0.9.8.1225 Blind SQL Injection via userRes Parameter

48RISCO

abrir ↗

Referência

CVE-2010-5000

CVE-2010-5000—

SQL injection vulnerability in login/login_index.php in MCLogin System 1.1 and 1.2 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2010-5002

CVE-2010-5002—

Cross-site scripting (XSS) vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remot

23RISCO

abrir ↗

Referência

CVE-2010-5013

CVE-2010-5013—

SQL injection vulnerability in listing_detail.asp in Mckenzie Creations Virtual Real Estate Manager (VRM) 3.5 allows rem

23RISCO

abrir ↗

Referência

CVE-2023-22518

CVE-2023-22518CRITICALsob ataqueransomware

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz

100RISCO

abrir ↗

Referência

CVE-2021-1498

CVE-2021-1498CRITICALsob ataque

Cisco HyperFlex HX Command Injection Vulnerabilities

100RISCO

abrir ↗

Referência

CVE-2014-5192

CVE-2014-5192—

SQL injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.