Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.432exploits catalogados

34.424CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.493GitHub PoC 13.618VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

21.493 exploits

Referência✓ VexDay Proof

Pluxml 0.3.1 - Remote Code Execution

CVE-2007-3432—webappsphp

Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute

23RISCO

abrir ↗

Referência

CVE-2013-5528

CVE-2013-5528—

Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager all

43RISCO

abrir ↗

Referência✓ VexDay Proof

KVIrc 3.4.0 - Virgo Remote Format String (PoC)

CVE-2008-4748—doswindows

Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC UR

23RISCO

abrir ↗

Referência

CVE-2009-3704

CVE-2009-3704—

ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service

23RISCO

abrir ↗

Referência

CVE-2020-25495

CVE-2020-25495—

A reflected Cross-site scripting (XSS) vulnerability in Xinuo (formerly SCO) Openserver version 5 and 6 allows remote at

38RISCO

abrir ↗

Referência✓ VexDay Proof

AsteriDex 3.0 - 'callboth.php' Remote Code Execution

CVE-2007-3621—webappsphp

Multiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote attackers to inject ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

PicoFlat CMS 0.5.9 (Windows) - Local File Inclusion

CVE-2008-6604—webappsphp

Directory traversal vulnerability in index.php in PicoFlat CMS 0.5.9 allows remote attackers to include and execute arbi

23RISCO

abrir ↗

Referência

CVE-2014-5287

CVE-2014-5287—

A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input i

23RISCO

abrir ↗

Referência

CVE-2014-5287

CVE-2014-5287—

A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input i

23RISCO

abrir ↗

Referência

CVE-2014-0983

CVE-2014-0983—

Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/s

38RISCO

abrir ↗

Referência

Feng Office 3.7.0.5 - Remote Command Execution (Metasploit)

CVE-2019-9623—webappsphp

Feng Office 3.7.0.5 allows remote attackers to execute arbitrary code via "<!--#exec cmd=" in a .shtml file to ck_upload

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Live Helper 2.0 - 'abs_path' Remote File Inclusion

CVE-2006-4051—webappsphp

PHP remote file inclusion vulnerability in global.php in Turnkey Web Tools PHP Live Helper 2.0 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

MobilePublisherPHP 1.5 RC2 - Remote File Inclusion

CVE-2006-4849—webappsphp

PHP remote file inclusion vulnerability in header.php in MobilePublisherPHP 1.5 RC2 and earlier allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2014-7288

CVE-2014-7288—

Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrator

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebChat 0.77 - 'defines.php?WEBCHATPATH' Remote File Inclusion

CVE-2007-0485—webappsphp

PHP remote file inclusion vulnerability in defines.php in WebChat 0.77 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

TeamSpeak 2.0 (Windows Release) - Remote Denial of Service

CVE-2007-3956—doswindows

TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which al

23RISCO

abrir ↗

Referência

CVE-2015-6787

CVE-2015-6787—

Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service o

23RISCO

abrir ↗

Referência

CVE-2015-6787

CVE-2015-6787—

Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service o

23RISCO

abrir ↗

Referência

CVE-2021-43936

CVE-2021-43936CRITICAL

Distributed Data Systems WebHM

60RISCO

abrir ↗

Referência

CVE-2015-6787

CVE-2015-6787—

Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service o

23RISCO

abrir ↗

Referência

CVE-2015-7571

CVE-2015-7571—

Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploadin

23RISCO

abrir ↗

Referência

CVE-2015-7571

CVE-2015-7571—

Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploadin

23RISCO

abrir ↗

Referência

CVE-2017-3132

CVE-2017-3132—

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthor

38RISCO

abrir ↗

Referência

CVE-2017-9750

CVE-2017-9750—

opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2009-4202

CVE-2009-4202—

Directory traversal vulnerability in the Omilen Photo Gallery (com_omphotogallery) component Beta 0.5 for Joomla! allows

38RISCO

abrir ↗

Referência✓ VexDay Proof

BT-sondage 1.12 - 'gestion_sondage.php' Remote File Inclusion

CVE-2007-1812—webappsphp

PHP remote file inclusion vulnerability in utilitaires/gestion_sondage.php in BT-Sondage 112 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jasmine CMS 1.0 - SQL Injection / Remote Code Execution

CVE-2007-3313—webappsphp

Multiple SQL injection vulnerabilities in Jasmine CMS 1.0 allow remote attackers to execute arbitrary SQL commands via (

23RISCO

abrir ↗

Referência✓ VexDay Proof

Acoustica MP3 CD Burner 4.32 - Local Buffer Overflow (PoC)

CVE-2007-3006—doswindows

Buffer overflow in Acoustica MP3 CD Burner 4.32 allows user-assisted remote attackers to execute arbitrary code via a .a

23RISCO

abrir ↗

Referência

CVE-2020-9372

CVE-2020-9372—

The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields such as Description or

23RISCO

abrir ↗

Referência✓ VexDay Proof

BitDefender Online Scanner 8 - ActiveX Heap Overflow

CVE-2007-6189—remotewindows

A certain ActiveX control in (1) OScan8.ocx and (2) Oscan81.ocx in BitDefender Online Anti-Virus Scanner 8.0 allows remo

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.