Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.445exploits catalogados

34.432CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

21.497 exploits

Referência✓ VexDay Proof

Eurologon CMS - 'files.php' Arbitrary File Download

CVE-2007-6185—webappsphp

Directory traversal vulnerability in users/files.php in Eurologon CMS allows remote attackers to read arbitrary files vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

minimal ablog 0.4 - SQL Injection / Arbitrary File Upload / Authentication Bypass

CVE-2008-6612—webappsphp

Unrestricted file upload vulnerability in admin/uploader.php in Minimal ABlog 0.4 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apache 2.2.14 mod_isapi - Dangling Pointer Remote SYSTEM

CVE-2010-0425—remotewindows

modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2

60RISCO

abrir ↗

Referência

CVE-2014-4971

CVE-2014-4971—

Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write

43RISCO

abrir ↗

Referência

CVE-2009-4817

CVE-2009-4817—

Unrestricted file upload vulnerability in Element-IT Ultimate Uploader 1.3 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-2144

CVE-2010-2144—

Cross-site scripting (XSS) vulnerability in signinform.php in Zeeways eBay Clone Auction Script allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-2144

CVE-2010-2144—

Cross-site scripting (XSS) vulnerability in signinform.php in Zeeways eBay Clone Auction Script allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2015-4075

CVE-2015-4075—

The Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to write to arbitrary .ini files via a crafted

23RISCO

abrir ↗

Referência

CVE-2015-4075

CVE-2015-4075—

The Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to write to arbitrary .ini files via a crafted

23RISCO

abrir ↗

Referência

CVE-2014-8655

CVE-2014-8655—

The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows r

23RISCO

abrir ↗

Referência

CVE-2014-8655

CVE-2014-8655—

The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

JAF CMS 4.0 RC1 - 'forum.php' Remote File Inclusion

CVE-2006-7128—webappsphp

PHP remote file inclusion vulnerability in forum/forum.php JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2015-7893

CVE-2015-7893—

SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary JavaS

23RISCO

abrir ↗

Referência

CVE-2015-7893

CVE-2015-7893—

SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary JavaS

23RISCO

abrir ↗

Referência

CVE-2013-6040

CVE-2013-6040HIGH

MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls versions before 4.0 are vulnerable to arbitrary code via crafted HTML document.

41RISCO

abrir ↗

Referência

CVE-2013-6040

CVE-2013-6040HIGH

MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls versions before 4.0 are vulnerable to arbitrary code via crafted HTML document.

41RISCO

abrir ↗

Referência

CVE-2020-5295

CVE-2020-5295MEDIUM

Local File read vulnerability in OctoberCMS

33RISCO

abrir ↗

Referência✓ VexDay Proof

Fuzzylime CMS 3.0 - Local File Inclusion

CVE-2007-4805—webappsphp

Directory traversal vulnerability in getgalldata.php in fuzzylime (cms) 3.0 and earlier allows remote attackers to inclu

23RISCO

abrir ↗

Referência✓ VexDay Proof

TeamCalPro 3.1.000 - Multiple Local/Remote File Inclusions

CVE-2007-6554—webappsphp

Multiple directory traversal vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to include and ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Professional Download Assistant 0.1 - Database Disclosure

CVE-2008-5572—webappsasp

Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, wh

23RISCO

abrir ↗

Referência✓ VexDay Proof

Download Accelerator Plus DAP 8.x - '.m3u' File Buffer Overflow

CVE-2008-3182—localwindows

Stack-based buffer overflow in DAP.exe in Download Accelerator Plus (DAP) 7.0.1.3, 8.6.6.3, and other 8.x versions allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

Download Accelerator Plus DAP 8.x - '.m3u' Local Buffer Overflow

CVE-2008-3182—localwindows

Stack-based buffer overflow in DAP.exe in Download Accelerator Plus (DAP) 7.0.1.3, 8.6.6.3, and other 8.x versions allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

CoolPlayer 2.19 - '.Skin' Local Buffer Overflow

CVE-2008-5735—localwindows

Stack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to execute arbitrary code

23RISCO

abrir ↗

Referência

CVE-2013-1594

CVE-2013-1594—

An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wire

23RISCO

abrir ↗

Referência

CVE-2013-1594

CVE-2013-1594—

An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wire

23RISCO

abrir ↗

Referência

CVE-2010-0456

CVE-2010-0456—

SQL injection vulnerability in the indianpulse Game Server (com_gameserver) component 1.2 for Joomla! allows remote atta

23RISCO

abrir ↗

Referência

CVE-2010-0457

CVE-2010-0457—

SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência

CVE-2020-6170

CVE-2020-6170—

An authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows attackers to obtain cl

23RISCO

abrir ↗

Referência

CVE-2010-0457

CVE-2010-0457—

SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência

CVE-2017-6104

CVE-2017-6104—

Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0.

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.