Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.056exploits catalogados

35.925CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8.755Nuclei 4.333Metasploit 3.478✓ só verificadosrecentes populares risco

22.640 exploits

Referência

CVE-2010-4971

CVE-2010-4971—

Cross-site scripting (XSS) vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attack

23RISCO

abrir ↗

Referência

CVE-2010-4972

CVE-2010-4972—

SQL injection vulnerability in index.php in YPNinc JokeScript allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2010-2034

CVE-2010-2034—

Directory traversal vulnerability in the Percha Image Attach (com_perchaimageattach) component 1.1 for Joomla! allows re

43RISCO

abrir ↗

Referência

CVE-2020-13118

CVE-2020-13118—

An issue was discovered in Mikrotik-Router-Monitoring-System through 2018-10-22. SQL Injection exists in check_community

23RISCO

abrir ↗

Referência

CVE-2010-2035

CVE-2010-2035—

Directory traversal vulnerability in the Percha Gallery (com_perchagallery) component 1.6 Beta for Joomla! allows remote

43RISCO

abrir ↗

Referência

CVE-2014-8690

CVE-2014-8690—

Multiple cross-site scripting (XSS) vulnerabilities in Exponent CMS before 2.1.4 patch 6, 2.2.x before 2.2.3 patch 9, an

23RISCO

abrir ↗

Referência

CVE-2014-8690

CVE-2014-8690—

Multiple cross-site scripting (XSS) vulnerabilities in Exponent CMS before 2.1.4 patch 6, 2.2.x before 2.2.3 patch 9, an

23RISCO

abrir ↗

Referência✓ VexDay Proof

EMO Realty Manager - 'ida' SQL Injection

CVE-2008-2265—webappsphp

SQL injection vulnerability in news.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2015-1338

CVE-2015-1338—

kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly ga

23RISCO

abrir ↗

Referência

CVE-2026-10551

CVE-2026-10551MEDIUM

Breeze Cache < 2.5.6 - Unauthenticated Stored XSS via Minify Library

33RISCO

abrir ↗

Referência✓ VexDay Proof

X-Forum 0.6.2 - Remote Command Execution

CVE-2009-1512—webappsphp

Static code injection vulnerability in X-Forum 0.6.2 allows remote authenticated administrators to inject arbitrary PHP

23RISCO

abrir ↗

Referência

CVE-2017-15957

CVE-2017-15957—

my_profile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file.

23RISCO

abrir ↗

Referência

CVE-2017-15957

CVE-2017-15957—

my_profile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quake 3 Engine 1.32b - 'R_RemapShader()' Remote Client Buffer Overflow

CVE-2006-2236—remotelinux

Buffer overflow in the Quake 3 Engine, as used by (1) ET 2.60, (2) Return to Castle Wolfenstein 1.41, and (3) Quake III

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB User Viewed Posts Tracker 1.0 - Remote File Inclusion

CVE-2006-5223—webappsphp

PHP remote file inclusion vulnerability in includes/functions_user_viewed_posts.php in the Nivisec User Viewed Posts Tra

23RISCO

abrir ↗

Referência

CVE-2015-1338

CVE-2015-1338—

kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly ga

23RISCO

abrir ↗

Referência

CVE-2015-1362

CVE-2015-1362—

Buffer overflow in the Customize 35mm tab in Two Pilots Exif Pilot 4.7.2 allows remote attackers to execute arbitrary co

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenEMR 2.8.1 - 'srcdir' Multiple Remote File Inclusions

CVE-2006-5811—webappsphp

PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with register_globals enabled,

23RISCO

abrir ↗

Referência

CVE-2010-4987

CVE-2010-4987—

SQL injection vulnerability in default.asp in KMSoft Guestbook (aka GBook) allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

MiniBB 2.0.5 - 'Language' Local File Inclusion

CVE-2007-3272—webappsphp

Directory traversal vulnerability in index.php in MiniBB 2.0.5 allows remote attackers to read arbitrary files via a ..

23RISCO

abrir ↗

Referência

CVE-2023-0037

CVE-2023-0037CRITICAL

10WebMapBuilder < 1.0.73 - Unauthenticated SQLi

63RISCO

abrir ↗

Referência

CVE-2014-1636

CVE-2014-1636—

Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Freelance Auction Script 1.0 - 'browseproject.php' SQL Injection

CVE-2008-2278—webappsphp

SQL injection vulnerability in browseproject.php in Freelance Auction Script 1.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2015-1375

CVE-2015-1375—

pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not properly restrict access to the upload

28RISCO

abrir ↗

Referência

CVE-2010-2042

CVE-2010-2042—

SQL injection vulnerability in search.php in ECShop 2.7.2 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2019-1642

CVE-2019-1642MEDIUM

Cisco Firepower Management Center Cross-Site Scripting Vulnerability

33RISCO

abrir ↗

Referência

CVE-2018-20503

CVE-2018-20503—

Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask parameter.

23RISCO

abrir ↗

Referência

CVE-2012-10060

CVE-2012-10060CRITICAL

Sysax Multi Server < 5.55 SSH Username Buffer Overflow

63RISCO

abrir ↗

Referência

CVE-2012-10060

CVE-2012-10060CRITICAL

Sysax Multi Server < 5.55 SSH Username Buffer Overflow

63RISCO

abrir ↗

Referência

CVE-2009-4146

CVE-2009-4146—

The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1, 7.2, and 8.0 does not c

38RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.