Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados

35.840CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.600 exploits

Referência

CVE-2014-9558

CVE-2014-9558—

Multiple SQL injection vulnerabilities in SmartCMS v.2.

23RISCO

abrir ↗

Referência

CVE-2015-7346

CVE-2015-7346—

SQL injection vulnerability in ZCMS 1.1.

23RISCO

abrir ↗

Referência

CVE-2015-7346

CVE-2015-7346—

SQL injection vulnerability in ZCMS 1.1.

23RISCO

abrir ↗

Referência

CVE-2014-9179

CVE-2014-9179—

Cross-site scripting (XSS) vulnerability in the SupportEzzy Ticket System plugin 1.2.5 for WordPress allows remote authe

23RISCO

abrir ↗

Referência

CVE-2008-7010

CVE-2008-7010—

Skalfa Software SkaLinks Exchange Script 1.5 allows remote attackers to add new administrators and gain privileges via a

23RISCO

abrir ↗

Referência

CVE-2026-10650

CVE-2026-10650MEDIUM

warmcat libwebsockets SSH Protocol sshd.c lws_ssh_parse_plaintext resource consumption

33RISCO

abrir ↗

Referência

CVE-2023-7304

CVE-2023-7304CRITICAL

Ruijie RG-UAC nmc_sync.php Command Injection

48RISCO

abrir ↗

Referência✓ VexDay Proof

snap - seccomp BBlacklist for TIOCSTI can be Circumvented

CVE-2019-7303MEDIUMdoslinux

Snapd seccomp filter TIOCSTI ioctl bypass

33RISCO

abrir ↗

Referência✓ VexDay Proof

2WIRE Modems/Routers - 'CRLF' Denial of Service

CVE-2006-4523—doshardware

The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

TCExam 4.0.011 - 'SessionUserLang' Shell Injection

CVE-2007-2430—webappsphp

shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by

23RISCO

abrir ↗

Referência✓ VexDay Proof

eIQnetworks ESA SEARCHREPORT - Remote Overflow (Metasploit)

CVE-2007-5699—remotewindows

Stack-based buffer overflow in eIQNetworks Enterprise Security Analyzer (ESA) 2.5 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

PolDoc CMS 0.96 - 'download_file.php' File Disclosure

CVE-2007-6400—webappsphp

Directory traversal vulnerability in download_file.php in PolDoc CMS (aka PDDMS) 0.96 allows remote attackers to read ar

23RISCO

abrir ↗

Referência

CVE-2023-33863

CVE-2023-33863CRITICAL

SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-

48RISCO

abrir ↗

Referência

CVE-2026-10176

CVE-2026-10176MEDIUM

Aider-AI Aider Code Generation Workflow sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

AJ HYIP ACME - 'topic_detail.php' SQL Injection

CVE-2008-2532—webappsphp

SQL injection vulnerability in forum/topic_detail.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2019-15999

CVE-2019-15999MEDIUM

Cisco Data Center Network Manager JBoss EAP Unauthorized Access Vulnerability

33RISCO

abrir ↗

Referência

CVE-2016-0728

CVE-2016-0728—

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref

23RISCO

abrir ↗

Referência

CVE-2026-10175

CVE-2026-10175MEDIUM

Aider-AI Aider Architect Mode auth.py editor_coder.run code injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

Phoenix View CMS Pre Alpha2 - SQL Injection / Local File Inclusion / Cross-Site Scripting

CVE-2008-2533—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

openPHPNuke 2.3.3 - Remote File Inclusion

CVE-2006-2137—webappsphp

PHP remote file inclusion vulnerability in master.php in OpenPHPNuke and 2.3.3 earlier allows remote attackers to execut

23RISCO

abrir ↗

Referência

CVE-2023-36348

CVE-2023-36348—

POS Codekop v2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the filename p

23RISCO

abrir ↗

Referência✓ VexDay Proof

Synactis All_IN_THE_BOX ActiveX 3.0 - Null Byte File Overwrite

CVE-2009-0465—remotewindows

The SaveDoc method in the All_In_The_Box.AllBox ActiveX control in ALL_IN_THE_BOX.OCX in Synactis ALL In-The-Box ActiveX

23RISCO

abrir ↗

Referência✓ VexDay Proof

DynamicPAD 1.02.18 - 'HomeDir' Remote File Inclusion

CVE-2007-2527—webappsphp

Multiple PHP remote file inclusion vulnerabilities in DynamicPAD before 1.03.31 allow remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2019-6214

CVE-2019-6214—

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.1

23RISCO

abrir ↗

Referência

CVE-2010-1308

CVE-2010-1308—

Directory traversal vulnerability in the SVMap (com_svmap) component 1.1.1 for Joomla! allows remote attackers to read a

43RISCO

abrir ↗

Referência

CVE-2011-1865

CVE-2011-1865—

Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow

60RISCO

abrir ↗

Referência

CVE-2016-3411

CVE-2016-3411—

Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

HispaH Model Search - 'cat.php?cat' SQL Injection

CVE-2008-2537—webappsphp

SQL injection vulnerability in cat.php in HispaH Model Search allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2018-12603

CVE-2018-12603—

Cross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote attackers to hijack the authen

23RISCO

abrir ↗

Referência

CVE-2018-12603

CVE-2018-12603—

Cross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote attackers to hijack the authen

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.