Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.385exploits catalogados

36.532CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.104GitHub PoC 15.074VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentes populares risco

23.022 exploits

Referência

CVE-2019-15976

CVE-2019-15976CRITICAL

Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

70RISCO

abrir ↗

Referência✓ VexDay Proof

Feedback and Rating Script 1.0 - 'detail.php' SQL Injection

CVE-2008-2277—webappsphp

SQL injection vulnerability in detail.php in Feedback and Rating Script 1.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Miplex2 - 'SmartyFU.class.php' Remote File Inclusion

CVE-2007-2608—webappsphp

PHP remote file inclusion vulnerability in lib/smarty/SmartyFU.class.php in Miplex2 Alpha 1 allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2012-1297

CVE-2012-1297—

Multiple cross-site request forgery (CSRF) vulnerabilities in main.php in Contao (formerly TYPOlight) 2.11.0 and earlier

23RISCO

abrir ↗

Referência

CVE-2012-1297

CVE-2012-1297—

Multiple cross-site request forgery (CSRF) vulnerabilities in main.php in Contao (formerly TYPOlight) 2.11.0 and earlier

23RISCO

abrir ↗

Referência

CVE-2019-1663

CVE-2019-1663CRITICAL

Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability

85RISCO

abrir ↗

Referência✓ VexDay Proof

PHPLojaFacil 0.1.5 - 'path_local' Remote File Inclusion

CVE-2007-2615—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Crie seu PHPLojaFacil 0.1.5 allow remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Original 0.11 - 'config.inc.php?x[1]' Remote File Inclusion

CVE-2007-2620—webappsphp

PHP remote file inclusion vulnerability in inc/config.inc.php in Jakub Steiner (aka jimmac) original 0.11 allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Snaps! Gallery 1.4.4 - Remote User Pass Change

CVE-2007-2715—webappsphp

Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1)

28RISCO

abrir ↗

Referência

CVE-2019-1663

CVE-2019-1663CRITICAL

Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability

85RISCO

abrir ↗

Referência

CVE-2022-40022

CVE-2022-40022CRITICAL

Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability.

85RISCO

abrir ↗

Referência

CVE-2023-23488

CVE-2023-23488CRITICAL

The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerabilit

85RISCO

abrir ↗

Referência

CVE-2021-40870

CVE-2021-40870CRITICALsob ataque

An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous

100RISCO

abrir ↗

Referência✓ VexDay Proof

NewzCrawler 1.8 - invalid string Remote Denial of Service

CVE-2007-2722—doswindows

Unspecified vulnerability in NewzCrawler 1.8 allows remote attackers to cause a denial of service (application instabili

23RISCO

abrir ↗

Referência

CVE-2020-1350

CVE-2020-1350CRITICALsob ataque

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Internet Explorer - Print Table of Links Cross-Zone Scripting

CVE-2008-2281—remotewindows

Cross-zone scripting vulnerability in the Print Table of Links feature in Internet Explorer 6.0, 7.0, and 8.0b allows us

28RISCO

abrir ↗

Referência✓ VexDay Proof

Internet PhotoShow (Special Edition) - Insecure Cookie Handling

CVE-2008-2282—webappsphp

admin.php in Internet Photoshow and Internet Photoshow Special Edition (SE) allows remote attackers to bypass authentica

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hunkaray Duyuru Scripti - 'tr' SQL Injection

CVE-2007-0688—webappsasp

SQL injection vulnerability in oku.asp in Hunkaray Duyuru Scripti allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mantis Bug Tracker 1.1.1 - Code Execution / Cross-Site Scripting / Cross-Site Request Forgery

CVE-2008-3332—webappsphp

Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to

23RISCO

abrir ↗

Referência

CVE-2019-8943

CVE-2019-8943—

WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can

60RISCO

abrir ↗

Referência

CVE-2019-8943

CVE-2019-8943—

WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can

60RISCO

abrir ↗

Referência

CVE-2023-31069

CVE-2023-31069—

An issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as cleartext within the HTML s

23RISCO

abrir ↗

Referência

CVE-2018-11138

CVE-2018-11138CRITICALsob ataqueransomware

The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by

100RISCO

abrir ↗

Referência

CVE-2012-0391

CVE-2012-0391CRITICALsob ataque

The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during

100RISCO

abrir ↗

Referência✓ VexDay Proof

idautomation bar code - ActiveX Multiple Vulnerabilities

CVE-2008-2283—remotewindows

IDAutomation allows remote attackers to overwrite arbitrary files via the argument to the (1) SaveBarCode and (2) SaveEn

23RISCO

abrir ↗

Referência

CVE-2019-16662

CVE-2019-16662—

An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to a

60RISCO

abrir ↗

Referência✓ VexDay Proof

Geeklog 2 - 'BaseView.php' Remote File Inclusion

CVE-2007-0810—webappsphp

PHP remote file inclusion vulnerability in MVCnPHP/BaseView.php in GeekLog 2 and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Drake CMS 0.4.11 - Blind SQL Injection

CVE-2008-6475—webappsphp

SQL injection vulnerability in the guestbook component (components/guestbook/guestbook.php) in Drake CMS 0.4.11 and earl

23RISCO

abrir ↗

Referência

CVE-2017-12629

CVE-2017-12629—

Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction wi

60RISCO

abrir ↗

Referência✓ VexDay Proof

Woltlab Burning Board Lite 1.0.2pl3e - 'pms.php' SQL Injection

CVE-2007-0812—webappsphp

SQL injection vulnerability in pms.php in Woltlab Burning Board (wBB) Lite 1.0.2pl3e and earlier allows remote authentic

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.