Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.386exploits catalogados

36.533CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.104GitHub PoC 15.075VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentes populares risco

23.051 exploits

Referência✓ VexDay Proof

Active Web Mail 4 - Blind SQL Injection

CVE-2008-6873—webappsasp

SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the Tab

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASPSiteWare Automotive Dealer 1.0/2.0 - SQL Injection

CVE-2008-6874—webappsphp

Multiple SQL injection vulnerabilities in ASP SiteWare autoDealer 1 and 2 allow remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Black Ice Software Inc Barcode SDK - 'BIDIB.ocx' Multiple Vulnerabilities

CVE-2008-2684—remotewindows

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to exe

23RISCO

abrir ↗

Referência

CVE-2019-19609

CVE-2019-19609—

The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin c

35RISCO

abrir ↗

Referência✓ VexDay Proof

Flux CMS 1.5.0 - 'loadsave.php' Arbitrary File Overwrite

CVE-2008-2686—webappsphp

webinc/bxe/scripts/loadsave.php in Flux CMS 1.5.0 and earlier allows remote attackers to execute arbitrary code by overw

23RISCO

abrir ↗

Referência✓ VexDay Proof

BrowserCRM 5.002.00 - 'clients.php' Remote File Inclusion

CVE-2008-2689—webappsphp

PHP remote file inclusion vulnerability in pub/clients.php in BrowserCRM 5.002.00 allows remote attackers to execute arb

35RISCO

abrir ↗

Referência

CVE-2019-19726

CVE-2019-19726—

OpenBSD through 6.6 allows local users to escalate to root because a check for LD_LIBRARY_PATH in setuid programs can be

38RISCO

abrir ↗

Referência✓ VexDay Proof

JiRo's FAQ Manager eXperience 1.0 - 'fID' SQL Injection

CVE-2008-2691—webappsasp

SQL injection vulnerability in read.asp in JiRo's FAQ Manager eXperience 1.0 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

AJ HYIP ACME - 'comment.php' SQL Injection

CVE-2008-4043—webappsphp

Multiple SQL injection vulnerabilities in AJ Square AJ HYIP Acme allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zeeways ZeeJobsite 2.0 - Arbitrary File Upload

CVE-2008-6913—webappsphp

Unrestricted file upload vulnerability in editresume_next.php in Zeeways ZEEJOBSITE 2.0 allows remote authenticated user

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Content 1.0.0 - 'itemID' SQL Injection

CVE-2008-6923—webappsphp

SQL injection vulnerability in the content component (com_content) 1.0.0 for Joomla! allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component yvComment 1.16 - Blind SQL Injection

CVE-2008-2692—webappsphp

SQL injection vulnerability in the yvComment (com_yvcomment) component 1.16.0 and earlier for Joomla! allows remote atta

23RISCO

abrir ↗

Referência

CVE-2019-19781

CVE-2019-19781CRITICALsob ataqueransomware

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

Referência

CVE-2019-19781

CVE-2019-19781CRITICALsob ataqueransomware

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

Referência

CVE-2019-19781

CVE-2019-19781CRITICALsob ataqueransomware

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

Referência

CVE-2018-1000115

CVE-2018-1000115—

Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vuln

60RISCO

abrir ↗

Referência

CVE-2018-1000115

CVE-2018-1000115—

Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vuln

60RISCO

abrir ↗

Referência✓ VexDay Proof

Black Ice Software Inc Barcode SDK - 'BITiff.ocx' Remote Buffer Overflow (1)

CVE-2008-2693—remotewindows

Stack-based buffer overflow in the BITIFF.BITiffCtrl.1 ActiveX control in BITiff.ocx 10.9.3.0 in Black Ice Barcode SDK 5

28RISCO

abrir ↗

Referência✓ VexDay Proof

Black Ice Software Inc Barcode SDK - 'BITiff.ocx' Remote Buffer Overflow (2)

CVE-2008-2693—remotewindows

Stack-based buffer overflow in the BITIFF.BITiffCtrl.1 ActiveX control in BITiff.ocx 10.9.3.0 in Black Ice Barcode SDK 5

28RISCO

abrir ↗

Referência

CVE-2019-19781

CVE-2019-19781CRITICALsob ataqueransomware

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

Referência

CVE-2019-19781

CVE-2019-19781CRITICALsob ataqueransomware

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

Referência

CVE-2012-2109

CVE-2012-2109—

SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Rapid Recipe 1.6.6/1.6.7 - SQL Injection

CVE-2008-2697—webappsphp

SQL injection vulnerability in the Rapid Recipe (com_rapidrecipe) component 1.6.6 and 1.6.7 for Joomla! allows remote at

23RISCO

abrir ↗

Referência

CVE-2024-13161

CVE-2024-13161CRITICALsob ataque

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up

100RISCO

abrir ↗

Referência✓ VexDay Proof

Achievo 1.3.2 - 'FCKeditor' Arbitrary File Upload

CVE-2008-2742—webappsphp

Unrestricted file upload in the mcpuk file editor (atk/attributes/fck/editor/filemanager/browser/mcpuk/connectors/php/co

23RISCO

abrir ↗

Referência

CVE-2020-8193

CVE-2020-8193MEDIUMsob ataque

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

100RISCO

abrir ↗

Referência

CVE-2020-3243

CVE-2020-3243CRITICAL

Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

85RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component mosmedia 1.0.8 - Remote File Inclusion

CVE-2007-2043—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia (com_mosmedia) 1.08 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nokia e90/n82 (s60v3) - Remote Denial of Service

CVE-2008-4135—doshardware

Symbian OS S60 3rd edition on the Nokia E90 Communicator 07.40.1.2 Ra-6 and Nseries N82 allows remote attackers to cause

23RISCO

abrir ↗

Referência

CVE-2022-37042

CVE-2022-37042CRITICALsob ataqueransomware

Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts fi

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.