Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.386exploits catalogados

36.533CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.104GitHub PoC 15.075VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentes populares risco

23.022 exploits

Referência

CVE-2019-12725

CVE-2019-12725—

Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web ap

60RISCO

abrir ↗

Referência✓ VexDay Proof

LibSPF2 < 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow (PoC)

CVE-2008-2469—dosmultiple

Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remo

28RISCO

abrir ↗

Referência✓ VexDay Proof

Total Video Player 1.20 - '.m3u' File Local Stack Buffer Overflow

CVE-2007-0949—localwindows

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers t

28RISCO

abrir ↗

Referência

CVE-2012-1784

CVE-2012-1784—

SQL injection vulnerability in MyJobList 0.1.3 allows remote attackers to execute arbitrary SQL commands via the eid par

23RISCO

abrir ↗

Referência

CVE-2017-3599

CVE-2017-3599—

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions t

45RISCO

abrir ↗

Referência

CVE-2018-11776

CVE-2018-11776HIGHsob ataque

Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN

100RISCO

abrir ↗

Referência

CVE-2017-0146

CVE-2017-0146HIGHsob ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

abrir ↗

Referência✓ VexDay Proof

PHPRaider 1.0.7 - 'PHPbb3.functions.php' Remote File Inclusion

CVE-2008-2481—webappsphp

PHP remote file inclusion vulnerability in authentication/phpbb3/phpbb3.functions.php in phpRaider 1.0.7 and 1.0.7a, whe

23RISCO

abrir ↗

Referência

CVE-2022-44268

CVE-2022-44268MEDIUM

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti

55RISCO

abrir ↗

Referência✓ VexDay Proof

Xomol CMS 1.2 - Authentication Bypass / Local File Inclusion

CVE-2008-2484—webappsphp

SQL injection vulnerability in index.php in Xomol CMS 1.20071213, when magic_quotes_gpc is disabled, allows remote attac

23RISCO

abrir ↗

Referência

Ericsson Network Location MPS GMPC21 - Remote Code Execution (RCE) (Metasploit)

CVE-2021-43339—webappsmultiple

In Ericsson Network Location before 2021-07-31, it is possible for an authenticated attacker to inject commands via file

23RISCO

abrir ↗

Referência✓ VexDay Proof

RoomPHPlanning 1.5 - Arbitrary Add Admin

CVE-2008-2488—webappsphp

admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated

23RISCO

abrir ↗

Referência

CVE-2019-17558

CVE-2019-17558HIGHsob ataque

Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A V

100RISCO

abrir ↗

Referência✓ VexDay Proof

Netbutikker 4 - SQL Injection

CVE-2008-2504—webappsphp

Multiple SQL injection vulnerabilities in Simpel Side Netbutik 1 through 4 allow remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2024-7954

CVE-2024-7954CRITICAL

SPIP porte_plume Plugin Arbitrary PHP Execution

85RISCO

abrir ↗

Referência

CVE-2024-13160

CVE-2024-13160CRITICALsob ataque

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up

100RISCO

abrir ↗

Referência

CVE-2025-37164

CVE-2025-37164CRITICALsob ataque

A remote code execution issue exists in HPE OneView.

100RISCO

abrir ↗

Referência

CVE-2019-7195

CVE-2019-7195CRITICALsob ataqueransomware

This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fi

100RISCO

abrir ↗

Referência

CVE-2019-17621

CVE-2019-17621CRITICALsob ataque

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated rem

100RISCO

abrir ↗

Referência

CVE-2018-4878

CVE-2018-4878HIGHsob ataqueransomware

A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to

93RISCO

abrir ↗

Referência

X.Org X Server 1.20.4 - Local Stack Overflow

CVE-2019-17624—locallinux

"" In X.Org X Server 1.20.4, there is a stack-based buffer overflow in the function XQueryKeymap. For example, by sendin

23RISCO

abrir ↗

Referência✓ VexDay Proof

CA Internet Security Suite 2008 - 'SaveToFile()' File Corruption (PoC)

CVE-2008-2511—doswindows

Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 (aka UmxEventCliLib) ActiveX control in UmxEv

28RISCO

abrir ↗

Referência✓ VexDay Proof

Mega File Hosting Script 1.2 - 'fid' SQL Injection

CVE-2008-2521—webappsphp

SQL injection vulnerability in members.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote authe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Enrollment System Project v1.0 - SQL Injection Authentication Bypass (SQLI)

CVE-2023-33584CRITICALwebappsphp

Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to

53RISCO

abrir ↗

Referência

CVE-2007-2821

CVE-2007-2821—

SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

TutorialCMS 1.01 - Authentication Bypass

CVE-2007-2822—webappsphp

TutorialCMS 1.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual Basic 6.0 Project - Company Name Stack Overflow (PoC)

CVE-2007-2884—doswindows

Multiple stack-based buffer overflows in Microsoft Visual Basic 6 allow user-assisted remote attackers to cause a denial

35RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual Basic 6.0 Project - Description Stack Overflow (PoC)

CVE-2007-2884—doswindows

Multiple stack-based buffer overflows in Microsoft Visual Basic 6 allow user-assisted remote attackers to cause a denial

35RISCO

abrir ↗

Referência✓ VexDay Proof

UltraISO 8.6.2.2011 - '.cue/'.bin' Local Buffer Overflow (PoC)

CVE-2007-2888—doswindows

Stack-based buffer overflow in UltraISO 8.6.2.2011 and earlier allows user-assisted remote attackers to execute arbitrar

50RISCO

abrir ↗

Referência

CVE-2023-33592

CVE-2023-33592—

Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lf

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.