Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

84.035exploits catalogados

39.531CVEs com exploração pública

24.695testados em laboratório

Todos Referência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9.678Nuclei 4.478Metasploit 3.524✓ só verificadosrecentes populares risco

25.447 exploits

Referência✓ VexDay Proof

PHPX 3.5.16 - 'news_id' SQL Injection

CVE-2008-5000—webappsphp

SQL injection vulnerability in admin/includes/news.inc.php in PHPX 3.5.16, when magic_quotes_gpc is disabled, allows rem

23RISCO

abrir ↗

Referência

CVE-2022-40022

CVE-2022-40022CRITICAL

Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability.

85RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component beamospetition 1.0.12 - SQL Injection / Cross-Site Scripting

CVE-2009-0378—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in the beamospetition (com_beamospetition) 1.0.12 component for Jo

23RISCO

abrir ↗

Referência

CVE-2021-40870

CVE-2021-40870CRITICALsob ataque

An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous

100RISCO

abrir ↗

Referência

CVE-2010-3206

CVE-2010-3206—

Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to execute arbitrary PHP code v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pixlie 1.7 - 'pixlie.php?root' Remote File Disclosure

CVE-2007-4314—webappsphp

pixlie.php in Pixlie 1.7 allows remote attackers to trigger the reading and JPEG image processing of files in a remote d

23RISCO

abrir ↗

Referência

CVE-2010-3212

CVE-2010-3212—

SQL injection vulnerability in index.php in Seagull 0.6.7 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

VideoLAN VLC Media Player < 0.9.6 - '.rt' Local Stack Buffer Overflow

CVE-2008-5036—localwindows

Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execu

50RISCO

abrir ↗

Referência

CVE-2020-1350

CVE-2020-1350CRITICALsob ataque

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RISCO

abrir ↗

Referência✓ VexDay Proof

Blue Eye CMS 1.0.0 - 'clanek' Blind SQL Injection

CVE-2009-0425—webappsphp

SQL injection vulnerability in index.php in Blue Eye CMS 1.0.0 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

WholeHogSoftware Ware Support - Authentication Bypass

CVE-2009-0458—webappsphp

Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Ware Support 1.x allow remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft DXMedia SDK 6 - 'SourceUrl' ActiveX Remote Code Execution

CVE-2007-4336—remotewindows

Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX cont

35RISCO

abrir ↗

Referência✓ VexDay Proof

Anti-Keylogger Elite 3.3.0 - 'AKEProtect.sys' Local Privilege Escalation

CVE-2008-5049—localwindows

Buffer overflow in AKEProtect.sys 3.3.3.0 in ISecSoft Anti-Keylogger Elite 3.3.0 and earlier, and possibly other version

23RISCO

abrir ↗

Referência✓ VexDay Proof

Virtual Guestbook 2.1 - Remote Database Disclosure

CVE-2009-0498—webappsasp

Virtual GuestBook (vgbook) 2.1 stores sensitive information under the web root with insufficient access control, which a

23RISCO

abrir ↗

Referência

CVE-2018-11138

CVE-2018-11138CRITICALsob ataqueransomware

The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by

100RISCO

abrir ↗

Referência

CVE-2019-8943

CVE-2019-8943—

WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can

60RISCO

abrir ↗

Referência

CVE-2023-31069

CVE-2023-31069—

An issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as cleartext within the HTML s

23RISCO

abrir ↗

Referência

CVE-2010-3490

CVE-2010-3490—

Directory traversal vulnerability in page.recordings.php in the System Recordings component in the configuration interfa

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module resmanager 1.21 - Blind SQL Injection

CVE-2007-2735—webappsphp

SQL injection vulnerability in edit_day.php in the ResManager 1.2.1 and earlier module for Xoops allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2017-12629

CVE-2017-12629—

Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction wi

60RISCO

abrir ↗

Referência✓ VexDay Proof

IBM Domino Web Access 7.0 Upload Module - 'inotes6.dll' Remote Buffer Overflow

CVE-2007-4474—remotewindows

Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, in

50RISCO

abrir ↗

Referência✓ VexDay Proof

NVR SP2 2.0 'nvUtility.dll 1.0.14.0' - 'SaveXMLFile()' Insecure Method

CVE-2007-4583—remotewindows

Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in nvUtility.dll 1.0.14.0 in

23RISCO

abrir ↗

Referência✓ VexDay Proof

SunShop Shopping Cart 4.0 RC 6 - 'Search' Blind SQL Injection

CVE-2007-4597—webappsphp

SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 RC 6 allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Agares ThemeSiteScript 1.0 - 'loadadminpage' Remote File Inclusion

CVE-2008-5066—webappsphp

PHP remote file inclusion vulnerability in upload/admin/frontpage_right.php in Agares Media ThemeSiteScript 1.0 allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

SoftComplex PHP Image Gallery - 'ctg' SQL Injection

CVE-2008-6485—webappsphp

SQL injection vulnerability in index.php in SoftComplex PHP Image Gallery allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenX 2.6.3 - 'MAX_type' Local File Inclusion

CVE-2009-0291—webappsphp

Directory traversal vulnerability in fc.php in OpenX 2.6.3 allows remote attackers to include and execute arbitrary file

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpskelsite 1.4 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting

CVE-2009-0596—webappsphp

Directory traversal vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when register_globals is enabled, allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPFootball 1.6 - SQL Injection

CVE-2008-3387—webappsphp

SQL injection vulnerability in show.php in PHPFootball 1.6 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

StatIt 4 - 'statitpath' Remote File Inclusion

CVE-2006-2253—webappsphp

PHP remote file inclusion vulnerability in visible_count_inc.php in Statit 4 (060207) allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apollo 37zz - '.m3u' Local Heap Overflow (PoC)

CVE-2009-1351—doswindows

Heap-based buffer overflow in Apollo 37zz allows remote attackers to cause a denial of service (application crash) and p

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.