Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.386exploits catalogados

36.533CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.104GitHub PoC 15.075VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentes populares risco

23.022 exploits

Referência

CVE-2018-3810

CVE-2018-3810—

Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unau

60RISCO

abrir ↗

Referência

CVE-2009-3023

CVE-2009-3023—

Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authen

60RISCO

abrir ↗

Referência✓ VexDay Proof

IMGallery 2.5 - Multiple SQL Injections

CVE-2008-2337—webappsphp

Multiple SQL injection vulnerabilities in IMGallery 2.5, when magic_quotes_gpc is disabled, allow remote attackers to ex

23RISCO

abrir ↗

Referência

CVE-2015-8556

CVE-2015-8556—

Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1.

28RISCO

abrir ↗

Referência

CVE-2017-15222

CVE-2017-15222—

Buffer Overflow vulnerability in Ayukov NFTPD 2.0 and earlier allows remote attackers to execute arbitrary code.

50RISCO

abrir ↗

Referência✓ VexDay Proof

newsmanager 2.0 - Remote File Inclusion / File Disclosure / SQL Injection

CVE-2008-2340—webappsphp

Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2017-3066

CVE-2017-3066CRITICALsob ataque

Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier hav

100RISCO

abrir ↗

Referência✓ VexDay Proof

newsmanager 2.0 - Remote File Inclusion / File Disclosure / SQL Injection

CVE-2008-2342—webappsphp

Directory traversal vulnerability in attachments.php in News Manager 2.0 allows remote attackers to read arbitrary files

23RISCO

abrir ↗

Referência

CVE-2021-42321

CVE-2021-42321HIGHsob ataqueransomware

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2021-42321

CVE-2021-42321HIGHsob ataqueransomware

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2022-31137

CVE-2022-31137CRITICAL

Unauthenticated Remote Code Execution in Roxy-WI

85RISCO

abrir ↗

Referência

CVE-2022-31137

CVE-2022-31137CRITICAL

Unauthenticated Remote Code Execution in Roxy-WI

85RISCO

abrir ↗

Referência

CVE-2022-31137

CVE-2022-31137CRITICAL

Unauthenticated Remote Code Execution in Roxy-WI

85RISCO

abrir ↗

Referência

CVE-2022-31137

CVE-2022-31137CRITICAL

Unauthenticated Remote Code Execution in Roxy-WI

85RISCO

abrir ↗

Referência

CVE-2019-17220

CVE-2019-17220—

Rocket.Chat before 2.1.0 allows XSS via a URL on a ![title] line.

23RISCO

abrir ↗

Referência✓ VexDay Proof

HP Software Update - 'Hpufunction.dll 4.0.0.1' Insecure Method

CVE-2008-2390—remotewindows

Hpufunction.dll 4.0.0.1 in HP Software Update exposes the unsafe (1) ExecuteAsync and (2) Execute methods, which allows

23RISCO

abrir ↗

Referência

CVE-2017-9554

CVE-2017-9554—

An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allo

60RISCO

abrir ↗

Referência✓ VexDay Proof

TAGWORX.CMS 3.00.02 - Multiple SQL Injections

CVE-2008-2394—webappsphp

Multiple SQL injection vulnerabilities in TAGWORX.CMS 3.00.02 allow remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

XnView 1.93.6 - '.taac' Local Buffer Overflow

CVE-2008-2427—localwindows

Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD a

28RISCO

abrir ↗

Referência

CVE-2008-6515

CVE-2008-6515—

Cross-site scripting (XSS) vulnerability in Fritz Berger yet another php photo album - next generation (yappa-ng) allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

CaLogic Calendars 1.2.2 - 'langsel' SQL Injection

CVE-2008-2444—webappsphp

SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2012-1775

CVE-2012-1775—

Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code

50RISCO

abrir ↗

Referência✓ VexDay Proof

Web Group Communication Center (WGCC) 1.0.3 - SQL Injection

CVE-2008-2445—webappsphp

Cross-site scripting (XSS) vulnerability in profile.php in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and

23RISCO

abrir ↗

Referência✓ VexDay Proof

e-107 Plugin ZoGo-Shop 1.16 Beta 13 - SQL Injection

CVE-2008-2447—webappsphp

SQL injection vulnerability in products.php in the Mytipper ZoGo-shop plugin 1.15.5 and 1.16 Beta 13 for e107 allows rem

23RISCO

abrir ↗

Referência

CVE-2023-40044

CVE-2023-40044CRITICALsob ataqueransomware

WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability

100RISCO

abrir ↗

Referência

CVE-2020-17463

CVE-2020-17463CRITICALsob ataque

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.

100RISCO

abrir ↗

Referência

CVE-2017-8464

CVE-2017-8464HIGHsob ataque

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201

100RISCO

abrir ↗

Referência

CVE-2017-8464

CVE-2017-8464HIGHsob ataque

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201

100RISCO

abrir ↗

Referência✓ VexDay Proof

ComicShout 2.5 - 'comic_id' SQL Injection

CVE-2008-2456—webappsphp

SQL injection vulnerability in index.php in ComicShout 2.5 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

μTorrent (uTorrent) 1.6 build 474 - 'announce' Key Remote Heap Overflow

CVE-2007-0927—remotewindows

Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a c

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.