Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.445exploits catalogados

34.432CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

21.497 exploits

Referência✓ VexDay Proof

phpBookingCalendar 1.0c - 'details_view.php' SQL Injection

CVE-2006-1422—webappsphp

SQL injection vulnerability in details_view.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2021-27520

CVE-2021-27520—

A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "

38RISCO

abrir ↗

Referência

CVE-2019-15811

CVE-2019-15811—

In DomainMOD through 4.13, the parameter daterange in the file reporting/domains/cost-by-month.php has XSS.

38RISCO

abrir ↗

Referência

CVE-2012-2376

CVE-2012-2376—

Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execut

28RISCO

abrir ↗

Referência

CVE-2015-0555

CVE-2015-0555—

Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Really Simple PHP and Ajax (RSPA) 2007-03-23 - Remote File Inclusion

CVE-2007-1851—webappsphp

Multiple directory traversal vulnerabilities in Really Simple PHP and Ajax (RSPA) 2007-03-23 allow remote attackers to i

23RISCO

abrir ↗

Referência

CVE-2025-15501

CVE-2025-15501CRITICAL

Sangfor Operation and Maintenance Management System getCmd WriterHandle.getCmd os command injection

48RISCO

abrir ↗

Referência

CVE-2023-0744

CVE-2023-0744CRITICAL

Improper Access Control in answerdev/answer

48RISCO

abrir ↗

Referência

CVE-2011-5172

CVE-2011-5172—

Stack-based buffer overflow in StoryBoard Quick 6 Build 3786, and possibly StoryBoard Artist and StoryBoard Studio, allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpChess Community Edition 2.0 - Multiple Remote File Inclusions

CVE-2007-2677—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpChess Community Edition 2.0 allow remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

LightBlog 9.5 - 'cp_upload_image.php' Arbitrary File Upload

CVE-2008-0632—webappsphp

Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

VBA32 Personal AntiVirus 3.12.8.x - Malformed Archive Denial of Service

CVE-2008-5667—doswindows

The scanning engine in VirusBlokAda VBA32 Personal Antivirus 3.12.8.x allows remote attackers to cause a denial of servi

23RISCO

abrir ↗

Referência

CVE-2018-7466

CVE-2018-7466—

install/installNewDB.php in TestLink through 1.9.16 allows remote attackers to conduct injection attacks by leveraging c

23RISCO

abrir ↗

Referência

CVE-2018-7466

CVE-2018-7466—

install/installNewDB.php in TestLink through 1.9.16 allows remote attackers to conduct injection attacks by leveraging c

23RISCO

abrir ↗

Referência

CVE-2020-27423

CVE-2020-27423—

Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial o

23RISCO

abrir ↗

Referência

CVE-2019-8391

CVE-2019-8391—

qdPM 9.1 suffers from Cross-site Scripting (XSS) via configuration?type=[XSS] parameter.

23RISCO

abrir ↗

Referência

CVE-2014-9208

CVE-2014-9208—

Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attacker

23RISCO

abrir ↗

Referência

CVE-2012-0025

CVE-2012-0025—

Double free vulnerability in the Free_All_Memory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the Fla

23RISCO

abrir ↗

Referência

CVE-2010-0758

CVE-2010-0758—

SQL injection vulnerability in news_desc.php in Softbiz Jobs allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2010-0758

CVE-2010-0758—

SQL injection vulnerability in news_desc.php in Softbiz Jobs allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2016-4273

CVE-2016-4273—

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637

28RISCO

abrir ↗

Referência

CVE-2009-3643

CVE-2009-3643—

Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote attackers to cause a denial of service via a long argument to th

23RISCO

abrir ↗

Referência

CVE-2013-1463

CVE-2013-1463—

Cross-site scripting (XSS) vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4

23RISCO

abrir ↗

Referência

CVE-2019-8927

CVE-2019-8927—

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zon

23RISCO

abrir ↗

Referência

CVE-2019-8927

CVE-2019-8927—

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zon

23RISCO

abrir ↗

Referência

CVE-2013-2682

CVE-2013-2682—

Cisco Linksys E4200 1.0.05 Build 7 devices contain a Clickjacking Vulnerability which allows remote attackers to obtain

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quintessential Player 4.50.1.82 - Playlist Denial of Service (PoC)

CVE-2006-6261—doswindows

Buffer overflow in Quintessential Player 4.50.1.82 and earlier allows remote attackers to cause a denial of service (cra

23RISCO

abrir ↗

Referência✓ VexDay Proof

ActiveKB 1.5 - Insecure Cookie Handling/Arbitrary Admin Access

CVE-2008-2338—webappsphp

Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth cookie to true when a

23RISCO

abrir ↗

Referência✓ VexDay Proof

MapLab MS4W 2.2.1 - Remote File Inclusion

CVE-2007-1843—webappsphp

PHP remote file inclusion vulnerability in gmapfactory/params.php in MapLab 2.2.1, when register_globals is enabled, all

23RISCO

abrir ↗

Referência✓ VexDay Proof

MySpace Content Zone 3.x - Arbitrary File Upload

CVE-2007-6668—webappsphp

admin/uploadgames.php in MySpace Content Zone (MCZ) 3.x does not require administrative privileges, which allows remote

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.