Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados

35.840CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.600 exploits

Referência

CVE-2010-4972

CVE-2010-4972—

SQL injection vulnerability in index.php in YPNinc JokeScript allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2010-4976

CVE-2010-4976—

Cross-site scripting (XSS) vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2026-14440

CVE-2026-14440HIGH

Cloudflare Universal SSL automatically managed CAA RRset supersedes customer-configured CAA records

41RISCO

abrir ↗

Referência

CVE-2026-34110

CVE-2026-34110CRITICAL

Guardian Language-System Unauthenticated OS Command Injection via id Parameter in complex_start.php

48RISCO

abrir ↗

Referência

CVE-2023-22518

CVE-2023-22518CRITICALsob ataqueransomware

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz

100RISCO

abrir ↗

Referência

CVE-2021-1498

CVE-2021-1498CRITICALsob ataque

Cisco HyperFlex HX Command Injection Vulnerabilities

100RISCO

abrir ↗

Referência

CVE-2014-5115

CVE-2014-5115—

Absolute path traversal vulnerability in DirPHP 1.0 allows remote attackers to read arbitrary files via a full pathname

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_lowcosthotels - Blind SQL Injection

CVE-2008-5875—webappsphp

SQL injection vulnerability in the com_lowcosthotels component in the Hotel Booking Reservation System (aka HBS) for Joo

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpclanwebsite 1.23.3 fix pack #5 - Multiple Vulnerabilities

CVE-2008-5877—webappsphp

Multiple SQL injection vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc

23RISCO

abrir ↗

Referência

CVE-2009-4522

CVE-2009-4522—

Cross-site scripting (XSS) vulnerability in search.5.html in BloofoxCMS 0.3.5 allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência

CVE-2010-5037

CVE-2010-5037—

SQL injection vulnerability in article.php in SenseSites CommonSense CMS allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência

CVE-2010-5037

CVE-2010-5037—

SQL injection vulnerability in article.php in SenseSites CommonSense CMS allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência

CVE-2010-5056

CVE-2010-5056—

SQL injection vulnerability in the GBU Facebook (com_gbufacebook) component 1.0.5 for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2010-5059

CVE-2010-5059—

SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2010-5227

CVE-2010-5227—

Untrusted search path vulnerability in Opera before 10.62 allows local users to gain privileges via a Trojan horse dwmap

23RISCO

abrir ↗

Referência

CVE-2010-5285

CVE-2010-5285—

Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the a

23RISCO

abrir ↗

Referência

CVE-2014-5445

CVE-2014-5445—

Multiple absolute path traversal vulnerabilities in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 a

60RISCO

abrir ↗

Referência

CVE-2024-6039

CVE-2024-6039MEDIUM

Feng Office Workspaces sql injection

33RISCO

abrir ↗

Referência

CVE-2009-4549

CVE-2009-4549—

Stack-based buffer overflow in A2 Media Player Pro 2.51 allows remote attackers to execute arbitrary code via a long str

23RISCO

abrir ↗

Referência

CVE-2014-6070

CVE-2014-6070—

Multiple cross-site scripting (XSS) vulnerabilities in Adiscon LogAnalyzer before 3.6.6 allow remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2014-6242

CVE-2014-6242—

Multiple SQL injection vulnerabilities in the All In One WP Security & Firewall plugin before 3.8.3 for WordPress allow

23RISCO

abrir ↗

Referência

CVE-2014-6271

CVE-2014-6271CRITICALsob ataque

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

abrir ↗

Referência

CVE-2014-6271

CVE-2014-6271CRITICALsob ataque

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

abrir ↗

Referência

CVE-2014-6271

CVE-2014-6271CRITICALsob ataque

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

abrir ↗

Referência

CVE-2012-4865

CVE-2012-4865—

Buffer overflow in Oreans Themida 2.1.8.0 allows remote attackers to execute arbitrary code via a crafted .TMD file.

23RISCO

abrir ↗

Referência

CVE-2009-4569

CVE-2009-4569—

SQL injection vulnerability in elkagroup Image Gallery allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2009-4569

CVE-2009-4569—

SQL injection vulnerability in elkagroup Image Gallery allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fonality trixbox - 'langChoice' Local File Inclusion (connect-back) (2)

CVE-2008-6825—webappslinux

Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to

43RISCO

abrir ↗

Referência✓ VexDay Proof

p4CMS 1.05 - 'abs_pfad' Remote File Inclusion

CVE-2006-4769—webappsphp

PHP remote file inclusion vulnerability in abf_js.php in p4CMS 1.05 allows remote attackers to execute arbitrary PHP cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fuzzylime CMS 3.01 - 'commrss.php' Remote Code Execution

CVE-2008-6833—webappsphp

Directory traversal vulnerability in commsrss.php in fuzzylime (cms) before 3.01b allows remote attackers to include and

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.