Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.056exploits catalogados

35.925CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8.755Nuclei 4.333Metasploit 3.478✓ só verificadosrecentes populares risco

22.640 exploits

Referência

CVE-2014-2023

CVE-2014-2023—

Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

EZContents CMS 2.0.0 - Multiple SQL Injections

CVE-2008-2135—webappsphp

Multiple SQL injection vulnerabilities in VisualShapers ezContents 2.0.0 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2017-20273

CVE-2017-20273HIGH

Joomla Event Registration Pro Calendar 4.1.3 SQL Injection

41RISCO

abrir ↗

Referência

Lingdang CRM 8.6.4.7 - SQL Injection

CVE-2025-9140MEDIUMwebappsmultiple

Shanghai Lingdang Information Technology Lingdang CRM tabdetail_moduleSave.php sql injection

33RISCO

abrir ↗

Referência

CVE-2019-0836

CVE-2019-0836—

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak

23RISCO

abrir ↗

Referência

CVE-2019-0836

CVE-2019-0836—

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak

23RISCO

abrir ↗

Referência

CVE-2017-11567

CVE-2017-11567—

Cross-site request forgery (CSRF) vulnerability in Mongoose Web Server before 6.9 allows remote attackers to hijack the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Studio Lounge Address Book 2.5 - 'profile' Arbitrary File Upload

CVE-2009-1483—webappsphp

Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachable

23RISCO

abrir ↗

Referência✓ VexDay Proof

VS-News-System 1.2.1 - 'newsordner' Remote File Inclusion

CVE-2007-1017—webappsphp

PHP remote file inclusion vulnerability in show_news_inc.php in VirtualSystem VS-News-System 1.2.1 and earlier allows re

23RISCO

abrir ↗

Referência

CVE-2015-0554

CVE-2015-0554—

The ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG_TEF_SP_4.06L.6 does not properly rest

50RISCO

abrir ↗

Referência✓ VexDay Proof

PrecisionID Barcode ActiveX 1.3 - Denial of Service

CVE-2007-2657—doswindows

Unspecified vulnerability in the PrecisionID Barcode 1.3 ActiveX control in PrecisionID_DataMatrix.DLL allows remote att

23RISCO

abrir ↗

Referência

CVE-2010-4928

CVE-2010-4928—

Cross-site scripting (XSS) vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allow

23RISCO

abrir ↗

Referência

CVE-2010-4928

CVE-2010-4928—

Cross-site scripting (XSS) vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allow

23RISCO

abrir ↗

Referência

CVE-2010-4929

CVE-2010-4929—

SQL injection vulnerability in the Joostina (com_ezautos) component for Joomla! allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2018-6180

CVE-2018-6180—

A flaw in the profile section of Online Voting System 1.0 allows an unauthenticated user to set an arbitrary password fo

23RISCO

abrir ↗

Referência

CVE-2018-6180

CVE-2018-6180—

A flaw in the profile section of Online Voting System 1.0 allows an unauthenticated user to set an arbitrary password fo

23RISCO

abrir ↗

Referência

CVE-2014-0894

CVE-2014-0894—

RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows context-de

23RISCO

abrir ↗

Referência

CVE-2018-19915

CVE-2018-19915—

DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field.

38RISCO

abrir ↗

Referência

CVE-2016-8019

CVE-2016-8019—

Cross-site scripting (XSS) vulnerability in attributes in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and ea

23RISCO

abrir ↗

Referência

CVE-2008-2186

CVE-2008-2186—

Cross-site scripting (XSS) vulnerability in index.php in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows re

23RISCO

abrir ↗

Referência

CVE-2019-18418

CVE-2019-18418—

clonos.php in ClonOS WEB control panel 19.09 allows remote attackers to gain full access via change password requests be

23RISCO

abrir ↗

Referência

CVE-2017-1000405

CVE-2017-1000405—

The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the touch_pmd() function inside

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebCards 1.3 - SQL Injection

CVE-2008-4878—webappsphp

Unrestricted file upload vulnerability in the "Add Image Macro" feature in WebCards 1.3 allows remote authenticated admi

23RISCO

abrir ↗

Referência

CVE-2016-4316

CVE-2016-4316—

Multiple cross-site scripting (XSS) vulnerabilities in WSO2 Carbon 4.4.5 allow remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência✓ VexDay Proof

work system E-Commerce 3.0.5 - Remote File Inclusion

CVE-2007-1423—webappsphp

Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Viewpoint Media Player for IE 3.2 - Remote Stack Overflow (PoC)

CVE-2007-5911—doswindows

Multiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3.2.26 in Viewpoint Medi

23RISCO

abrir ↗

Referência

CVE-2010-4971

CVE-2010-4971—

Cross-site scripting (XSS) vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attack

23RISCO

abrir ↗

Referência

CVE-2010-4972

CVE-2010-4972—

SQL injection vulnerability in index.php in YPNinc JokeScript allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2018-11339

CVE-2018-11339—

An XSS issue was discovered in Frappe ERPNext v11.x.x-develop b1036e5 via a comment.

23RISCO

abrir ↗

Referência

CVE-2017-6550

CVE-2017-6550—

Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote attackers to execute arbitra

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.