Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.760exploits catalogados

32.083CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.934GitHub PoC 13.235VulnCheck XDB 8.150Nuclei 4.193Metasploit 3.462✓ só verificadosrecentes populares risco

4.193 exploits

Nucleicritical

Pie Register < 3.7.1.6 - SQL Injection

CVE-2021-24731—

Pie Register < 3.7.1.6 - Unauthenticated SQL Injection

18RISCO

abrir ↗

Nucleimedium

WordPress Sassy Social Share Plugin <3.3.40 - Cross-Site Scripting

CVE-2021-24746—

Sassy Social Share < 3.3.40 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleihigh

WordPress Visitor Statistics (Real Time Traffic) <4.8 -SQL Injection

CVE-2021-24750—

WP Visitor Statistics (Real Time Traffic) < 4.8 - Subscriber+ SQL Injection

50RISCO

abrir ↗

Nucleicritical

WordPress Perfect Survey <1.5.2 - SQL Injection

CVE-2021-24762—

Perfect Survey < 1.5.2 - Unauthenticated SQL Injection

60RISCO

abrir ↗

Nucleihigh

Download Monitor < 4.4.5 - SQL Injection

CVE-2021-24786HIGH

Download Monitor < 4.4.5 - Admin+ SQL Injection

61RISCO

abrir ↗

Nucleihigh

Header Footer Code Manager < 1.1.14 - Admin+ SQL Injection

CVE-2021-24791—

Header Footer Code Manager < 1.1.14 - Admin+ SQL Injections

18RISCO

abrir ↗

Nucleicritical

WordPress Asgaros Forum <1.15.13 - SQL Injection

CVE-2021-24827—

Asgaros Forum < 1.15.13 - Unauthenticated SQL Injection

23RISCO

abrir ↗

Nucleimedium

WordPress AnyComment <0.3.5 - Open Redirect

CVE-2021-24838—

AnyComment < 0.3.5 - Open Redirect

18RISCO

abrir ↗

Nucleicritical

WCFM WooCommerce Multivendor Marketplace < 3.4.12 - SQL Injection

CVE-2021-24849—

WCFM - WooCommerce Multivendor Marketplace < 3.4.12 - Unauthenticated SQL Injection

18RISCO

abrir ↗

Nucleihigh

WordPress RegistrationMagic <5.0.1.6 - Authenticated SQL Injection

CVE-2021-24862—

RegistrationMagic < 5.0.1.6 - Admin+ SQL Injection

60RISCO

abrir ↗

Nucleimedium

WordPress eCommerce Product Catalog <3.0.39 - Cross-Site Scripting

CVE-2021-24875—

eCommerce Product Catalog for WordPress < 3.0.39 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleimedium

Registrations for The Events Calendar < 2.7.5 - Authenticated Reflected Cross-Site Scripting

CVE-2021-24876—

Registrations for The Events Calendar < 2.7.5 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleimedium

SupportCandy < 2.2.7 - Reflected Cross-Site Scripting

CVE-2021-24878—

SupportCandy < 2.2.7 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleimedium

WordPress Elementor Website Builder <3.1.4 - Cross-Site Scripting

CVE-2021-24891—

Elementor < 3.4.8 - DOM Cross-Site-Scripting

23RISCO

abrir ↗

Nucleimedium

WordPress Transposh Translation <1.0.8 - Cross-Site Scripting

CVE-2021-24910—

Transposh WordPress Translation < 1.0.8 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleicritical

Contest Gallery < 13.1.0.6 - SQL injection

CVE-2021-24915—

Contest Gallery < 13.1.0.6 - Missing Access Controls to Unauthenticated SQL injection / Email Address Disclosure

23RISCO

abrir ↗

Nucleihigh

WordPress Qubely < 1.8.6 - Unauthenticated Email Sending

CVE-2021-24916—

Qubely < 1.8.6 - Unauthenticated Arbitrary E-mail Sending

18RISCO

abrir ↗

Nucleihigh

WordPress WPS Hide Login <1.9.1 - Information Disclosure

CVE-2021-24917—

WPS Hide Login < 1.9.1 - Protection Bypass with Referer-Header

40RISCO

abrir ↗

Nucleimedium

WordPress Domain Check <1.0.17 - Cross-Site Scripting

CVE-2021-24926—

Domain Check < 1.0.17 - Reflected Cross-Site Scripting

43RISCO

abrir ↗

Nucleicritical

WordPress Secure Copy Content Protection and Content Locking <2.8.2 - SQL Injection

CVE-2021-24931—

Secure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injection

60RISCO

abrir ↗

Nucleimedium

Visual CSS Style Editor < 7.5.4 - Cross-Site Scripting

CVE-2021-24934—

Visual CSS Style Editor < 7.5.4 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleimedium

WordPress Persian Woocommerce <=5.8.0 - Cross-Site Scripting

CVE-2021-24940—

Persian Woocommerce <= 5.8.0 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleicritical

Registrations for the Events Calendar < 2.7.6 - SQL Injection

CVE-2021-24943—

Registrations for the Events Calendar < 2.7.6 - Unauthenticated SQL Injection

18RISCO

abrir ↗

Nucleicritical

WordPress Modern Events Calendar <6.1.5 - Blind SQL Injection

CVE-2021-24946—

Modern Events Calendar < 6.1.5 - Unauthenticated Blind SQL Injection

60RISCO

abrir ↗

Nucleimedium

WordPress Responsive Vector Maps < 6.4.2 - Arbitrary File Read

CVE-2021-24947—

RVM - Responsive Vector Maps < 6.4.2 - Subscriber+ Arbitrary File Read

18RISCO

abrir ↗

Nucleimedium

Blog2Social < 6.8.7 - Cross-Site Scripting

CVE-2021-24956—

Blog2Social < 6.8.7 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleihigh

WordPress All-In-One Video Gallery <2.5.0 - Local File Inclusion

CVE-2021-24970—

All-In-One-Gallery < 2.5.0 - Admin+ Local File Inclusion

18RISCO

abrir ↗

Nucleimedium

Paid Memberships Pro < 2.6.6 - Cross-Site Scripting

CVE-2021-24979—

Paid Memberships Pro < 2.6.6 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleimedium

WordPress Super Socializer <7.13.30 - Cross-Site Scripting

CVE-2021-24987—

Super Socializer < 7.13.30 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleimedium

WooCommerce PDF Invoices & Packing Slips WordPress Plugin < 2.10.5 - Cross-Site Scripting

CVE-2021-24991—

WooCommerce PDF Invoices & Packing Slips < 2.10.5 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.