Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência✓ VexDay Proof

FunkBoard CF0.71 - 'profile.php' Remote User Pass Change

CVE-2006-2896—webappsphp

profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form fie

23RISCO

abrir ↗

Referência

CVE-2015-7547

CVE-2015-7547—

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C

45RISCO

abrir ↗

Referência

CVE-2016-7084

CVE-2016-7084—

tpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, whe

23RISCO

abrir ↗

Referência

CVE-2025-34111

CVE-2025-34111CRITICAL

Tiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCE

63RISCO

abrir ↗

Referência

CVE-2025-34111

CVE-2025-34111CRITICAL

Tiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCE

63RISCO

abrir ↗

Referência✓ VexDay Proof

TorrentTrader Classic 1.09 - Multiple Vulnerabilities

CVE-2009-2156—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to in

23RISCO

abrir ↗

Referência

CVE-2014-125126

CVE-2014-125126CRITICAL

Simple E-Document Arbitrary File Upload RCE

63RISCO

abrir ↗

Referência

CVE-2014-125126

CVE-2014-125126CRITICAL

Simple E-Document Arbitrary File Upload RCE

63RISCO

abrir ↗

Referência

CVE-2010-4852

CVE-2010-4852—

Cross-site scripting (XSS) vulnerability in login.php in Eclime 1.1.2b allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Referência

CVE-2010-4852

CVE-2010-4852—

Cross-site scripting (XSS) vulnerability in login.php in Eclime 1.1.2b allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Referência

CVE-2010-4331

CVE-2010-4331—

Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel 2.2.0 allow remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência

CVE-2023-7221

CVE-2023-7221CRITICAL

Totolink T6 HTTP POST Request main buffer overflow

48RISCO

abrir ↗

Referência

CVE-2011-0902

CVE-2011-0902—

Multiple untrusted search path vulnerabilities in the Java Service in Sun Microsystems SunScreen Firewall on SunOS 5.9 a

23RISCO

abrir ↗

Referência

CVE-2018-0437

CVE-2018-0437—

Cisco Umbrella Enterprise Roaming Client and Enterprise Roaming Module Privilege Escalation Vulnerability

23RISCO

abrir ↗

Referência

CVE-2019-11017

CVE-2019-11017—

On D-Link DI-524 V2.06RU devices, multiple Stored and Reflected XSS vulnerabilities were found in the Web Configuration:

23RISCO

abrir ↗

Referência✓ VexDay Proof

Txx CMS 0.2 - Multiple Remote File Inclusions

CVE-2007-4819—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Txx CMS 0.2 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vigile CMS 1.4 - Multiple Vulnerabilities

CVE-2007-6085—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbit

23RISCO

abrir ↗

Referência

CVE-2010-2307

CVE-2010-2307—

Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmw

38RISCO

abrir ↗

Referência

CVE-2021-31674

CVE-2021-31674—

Cyclos 4 PRO 4.14.7 and before does not validate user input at error inform, which allows remote unauthenticated attacke

23RISCO

abrir ↗

Referência

CVE-2014-4645

CVE-2014-4645—

Cross-site scripting (XSS) vulnerability in dhcpinfo.html in D-link DSL-2760U-E1 allows remote attackers to inject arbit

23RISCO

abrir ↗

Referência

CVE-2010-1856

CVE-2010-1856—

Cross-site scripting (XSS) vulnerability in index.php in RepairShop2 1.9.023 Trial, when magic_quotes_gpc is disabled, a

23RISCO

abrir ↗

Referência

CVE-2008-5944

CVE-2008-5944—

Cross-site scripting (XSS) vulnerability in modules.php in NavBoard 16 (2.6.0) allows remote attackers to inject arbitra

23RISCO

abrir ↗

Referência

CVE-2009-3513

CVE-2009-3513—

Multiple cross-site scripting (XSS) vulnerabilities in Pilot Group (PG) eTraining allow remote attackers to inject arbit

23RISCO

abrir ↗

Referência

CVE-2012-5244

CVE-2012-5244—

Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-1662

CVE-2010-1662—

Cross-site scripting (XSS) vulnerability in acpmoderate.php in PHP-Quick-Arcade (PHPQA) 3.0.21 allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2010-1662

CVE-2010-1662—

Cross-site scripting (XSS) vulnerability in acpmoderate.php in PHP-Quick-Arcade (PHPQA) 3.0.21 allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2008-5976

CVE-2008-5976—

Multiple cross-site scripting (XSS) vulnerabilities in siteadmin/forgot.php in PHP JOBWEBSITE PRO allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2008-5323

CVE-2008-5323—

Cross-site scripting (XSS) vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject arbitrary w

23RISCO

abrir ↗

Referência

CVE-2015-7567

CVE-2015-7567—

SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passw

23RISCO

abrir ↗

Referência

CVE-2010-0376

CVE-2010-0376—

Cross-site scripting (XSS) vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows re

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.