Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

84.035exploits catalogados

39.531CVEs com exploração pública

24.695testados em laboratório

Todos Referência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9.678Nuclei 4.478Metasploit 3.524✓ só verificadosrecentes populares risco

25.557 exploits

Referência

CVE-2022-44268

CVE-2022-44268MEDIUM

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti

55RISCO

abrir ↗

Referência✓ VexDay Proof

Wysi Wiki Wyg 1.0 - Local File Inclusion / Cross-Site Scripting / PHPInfo

CVE-2008-5322—webappsphp

Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, wh

23RISCO

abrir ↗

Referência✓ VexDay Proof

Job Script 2.0 - Arbitrary Change Admin Password

CVE-2009-1610—webappsphp

admin/changepassword.php in Job Script Job Board Software 2.0 allows remote attackers to change the administrator passwo

23RISCO

abrir ↗

Referência✓ VexDay Proof

WU-FTPD 2.6.2 - 'wuftpd-freezer.c' Remote Denial of Service

CVE-2003-0854—doslinux

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, w

23RISCO

abrir ↗

Referência

CVE-2010-4281

CVE-2010-4281—

Incomplete blacklist vulnerability in the safe_url_extraclean function in ajax.php in Pandora FMS before 3.1.1 allows re

23RISCO

abrir ↗

Referência

Ericsson Network Location MPS GMPC21 - Remote Code Execution (RCE) (Metasploit)

CVE-2021-43339—webappsmultiple

In Ericsson Network Location before 2021-07-31, it is possible for an authenticated attacker to inject commands via file

23RISCO

abrir ↗

Referência✓ VexDay Proof

Arcadwy Arcade Script - 'Username' Static Cross-Site Scripting

CVE-2009-1228—webappsphp

Cross-site scripting (XSS) vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

BaoFeng - ActiveX 'OnBeforeVideoDownload()' Remote Buffer Overflow

CVE-2009-1612—remotewindows

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote

50RISCO

abrir ↗

Referência

CVE-2024-7954

CVE-2024-7954CRITICAL

SPIP porte_plume Plugin Arbitrary PHP Execution

85RISCO

abrir ↗

Referência✓ VexDay Proof

Mercury/32 4.52 IMAPD - 'SEARCH' (Authenticated) Overflow

CVE-2007-5018—remotewindows

Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to execute arbitrary code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Leap CMS 0.1.4 - SQL Injection / Cross-Site Scripting / Arbitrary File Upload

CVE-2009-1613—webappsphp

Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magic_quotes_gpc is disabled, allow remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Airsensor M520 - HTTPd Remote Denial of Service / Buffer Overflow (PoC)

CVE-2007-5036—doshardware

Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 and 4.4.1.4 allow remote authenticated

23RISCO

abrir ↗

Referência

CVE-2010-4638

CVE-2010-4638—

SQL injection vulnerability in the submitSurvey function in controller.php in JQuarks4s (com_jquarks4s) component 1.0.0

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke addon Nuke Mobile Entartainment 1.0 - Local File Inclusion

CVE-2007-5069—webappsphp

Directory traversal vulnerability in data/compatible.php in the Nuke Mobile Entertainment 1 addon for PHP-Nuke allows re

23RISCO

abrir ↗

Referência

CVE-2010-4701

CVE-2010-4701—

Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover

35RISCO

abrir ↗

Referência✓ VexDay Proof

IPSwitch IMail Server 8.0x - Remote Heap Overflow

CVE-2007-5094—remotewindows

Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote att

23RISCO

abrir ↗

Referência

CVE-2010-4735

CVE-2010-4735—

SQL injection vulnerability in shoppingcart.asp in Ecommercemax Solutions Digital-goods seller (DGS) 1.5 allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PostNuke Module pnEncyclopedia 0.2.0 - SQL Injection

CVE-2008-2191—webappsphp

SQL injection vulnerability in the pnEncyclopedia module 0.2.0 and earlier for PostNuke allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

RoomPHPlanning 1.5 - Arbitrary Add Admin

CVE-2008-2488—webappsphp

admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated

23RISCO

abrir ↗

Referência

CVE-2024-13160

CVE-2024-13160CRITICALsob ataque

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up

100RISCO

abrir ↗

Referência

CVE-2025-37164

CVE-2025-37164CRITICALsob ataque

A remote code execution issue exists in HPE OneView.

100RISCO

abrir ↗

Referência

CVE-2019-7195

CVE-2019-7195CRITICALsob ataqueransomware

This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fi

100RISCO

abrir ↗

Referência

CVE-2019-17621

CVE-2019-17621CRITICALsob ataque

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated rem

100RISCO

abrir ↗

Referência✓ VexDay Proof

Easy Scripts Answer and Question Script - Multiple Vulnerabilities

CVE-2009-1654—webappsphp

Cross-site scripting (XSS) vulnerability in questiondetail.php in Easy Scripts Answer and Question Script allows remote

23RISCO

abrir ↗

Referência

CVE-2010-4895

CVE-2010-4895—

Cross-site scripting (XSS) vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dew-NewPHPLinks 2.0 - Local File Inclusion / Cross-Site Scripting

CVE-2009-1624—webappsphp

Directory traversal vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to read arbitrary files vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Thickbox Gallery 2 - 'index.php' Local File Inclusion

CVE-2009-1625—webappsphp

Directory traversal vulnerability in index.php in Thickbox Gallery 2 allows remote attackers to include and execute arbi

23RISCO

abrir ↗

Referência

CVE-2012-5347

CVE-2012-5347—

TinyWebGallery 1.8.3 allows remote attackers to execute arbitrary code via shell metacharacters in the command parameter

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mini-stream ASX to MP3 Converter 3.0.0.7 - '.asx HREF' Local Buffer Overflow

CVE-2009-1642—localwindows

Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sorinara Streaming Audio Player 0.9 - '.pla' Local Stack Overflow (PoC)

CVE-2009-1644—doswindows

Stack-based buffer overflow in Sorinara Streaming Audio Player 0.9 allows remote attackers to execute arbitrary code via

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.