Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.056exploits catalogados

35.925CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8.755Nuclei 4.333Metasploit 3.478✓ só verificadosrecentes populares risco

22.640 exploits

Referência

CVE-2013-1763

CVE-2013-1763—

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows l

23RISCO

abrir ↗

Referência

CVE-2010-4921

CVE-2010-4921—

SQL injection vulnerability in inc_pollingboothmanager.asp in DMXReady Polling Booth Manager allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2013-3535

CVE-2013-3535—

Multiple cross-site scripting (XSS) vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitra

23RISCO

abrir ↗

Referência

CVE-2014-4312

CVE-2014-4312—

Multiple cross-site scripting (XSS) vulnerabilities in Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allow remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS Faethon 2.2 Ultimate - Remote File Inclusion / Cross-Site Scripting

CVE-2008-2127—webappsphp

Cross-site scripting (XSS) vulnerability in search.php in CMS Faethon 2.2 Ultimate allows remote attackers to inject arb

23RISCO

abrir ↗

Referência

CVE-2015-8284

CVE-2015-8284—

SeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative functions.

23RISCO

abrir ↗

Referência

CVE-2015-8284

CVE-2015-8284—

SeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative functions.

23RISCO

abrir ↗

Referência

CVE-2018-9245

CVE-2018-9245—

The Ericsson-LG iPECS NMS A.1Ac login portal has a SQL injection vulnerability in the User ID and password fields that a

23RISCO

abrir ↗

Referência

CVE-2025-9090

CVE-2025-9090MEDIUM

Tenda AC20 Telnet Service telnet websFormDefine command injection

38RISCO

abrir ↗

Referência✓ VexDay Proof

Phpjobscheduler 3.0 - 'installed_config_file' File Inclusion

CVE-2006-5928—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Phpjobscheduler 3.0 allow remote attackers to execute arbitrary PH

23RISCO

abrir ↗

Referência✓ VexDay Proof

RsGallery2 < 1.11.2 - 'rsgallery.html.php' File Inclusion

CVE-2006-6962—webappsphp

PHP remote file inclusion vulnerability in rsgallery2.html.php in the RS Gallery2 component (com_rsgallery2) 1.11.2 for

23RISCO

abrir ↗

Referência

CVE-2010-4925

CVE-2010-4925—

SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2010-4926

CVE-2010-4926—

SQL injection vulnerability in the TimeTrack (com_timetrack) component 1.2.4 for Joomla! allows remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2014-6242

CVE-2014-6242—

Multiple SQL injection vulnerabilities in the All In One WP Security & Firewall plugin before 3.8.3 for WordPress allow

23RISCO

abrir ↗

Referência

CVE-2017-20275

CVE-2017-20275HIGH

Joomla! Component PHP-Bridge 1.2.3 SQL Injection via id Parameter

41RISCO

abrir ↗

Referência

CVE-2022-0847

CVE-2022-0847HIGHsob ataque

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISCO

abrir ↗

Referência

CVE-2015-4066

CVE-2015-4066—

Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9 for WordPress allow rem

23RISCO

abrir ↗

Referência

CVE-2015-4066

CVE-2015-4066—

Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9 for WordPress allow rem

23RISCO

abrir ↗

Referência

CVE-2022-0847

CVE-2022-0847HIGHsob ataque

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISCO

abrir ↗

Referência

CVE-2016-6707

CVE-2016-6707—

An elevation of privilege vulnerability in System Server in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 coul

23RISCO

abrir ↗

Referência

CVE-2017-20274

CVE-2017-20274HIGH

Joomla LMS King Professional 3.2.4.0 SQL Injection via learningpath

41RISCO

abrir ↗

Referência

CVE-2014-2023

CVE-2014-2023—

Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

EZContents CMS 2.0.0 - Multiple SQL Injections

CVE-2008-2135—webappsphp

Multiple SQL injection vulnerabilities in VisualShapers ezContents 2.0.0 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2017-20273

CVE-2017-20273HIGH

Joomla Event Registration Pro Calendar 4.1.3 SQL Injection

41RISCO

abrir ↗

Referência

Lingdang CRM 8.6.4.7 - SQL Injection

CVE-2025-9140MEDIUMwebappsmultiple

Shanghai Lingdang Information Technology Lingdang CRM tabdetail_moduleSave.php sql injection

33RISCO

abrir ↗

Referência

CVE-2019-0836

CVE-2019-0836—

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak

23RISCO

abrir ↗

Referência

CVE-2019-0836

CVE-2019-0836—

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak

23RISCO

abrir ↗

Referência

CVE-2017-11567

CVE-2017-11567—

Cross-site request forgery (CSRF) vulnerability in Mongoose Web Server before 6.9 allows remote attackers to hijack the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Studio Lounge Address Book 2.5 - 'profile' Arbitrary File Upload

CVE-2009-1483—webappsphp

Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachable

23RISCO

abrir ↗

Referência✓ VexDay Proof

VS-News-System 1.2.1 - 'newsordner' Remote File Inclusion

CVE-2007-1017—webappsphp

PHP remote file inclusion vulnerability in show_news_inc.php in VirtualSystem VS-News-System 1.2.1 and earlier allows re

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.