Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.386exploits catalogados

36.533CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.104GitHub PoC 15.075VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentes populares risco

23.051 exploits

Referência

CVE-2019-1935

CVE-2019-1935CRITICAL

Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data SCP User Default Credentials Vulnerability

85RISCO

Referência

CVE-2019-1935

CVE-2019-1935CRITICAL

Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data SCP User Default Credentials Vulnerability

85RISCO

Referência

CVE-2025-34026

CVE-2025-34026CRITICALsob ataque

Versa Concerto Actuator Authentication Bypass Information Leak

100RISCO

Referência

CVE-2019-7214

CVE-2019-7214—

SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated attacker co

60RISCO

Referência

CVE-2019-7214

CVE-2019-7214—

SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated attacker co

60RISCO

Referência✓ VexDay Proof

Groone's GLink ORGanizer 2.1 - 'cat' Blind SQL Injection

CVE-2009-0299—webappsphp

SQL injection vulnerability in index.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary SQL commands

23RISCO

Referência✓ VexDay Proof

AuraCMS 2.2.2 - '/pages_data.php' Arbitrary Edit/Add/Delete

CVE-2008-3203—webappsphp

js/pages/pages_data.php in AuraCMS 2.2 through 2.2.2 does not perform authentication, which allows remote attackers to a

23RISCO

Referência✓ VexDay Proof

Million Pixels 3 - 'id_cat' SQL Injection

CVE-2008-3204—webappsphp

SQL injection vulnerability in tops_top.php in E-topbiz Million Pixels 3 allows remote attackers to execute arbitrary SQ

23RISCO

Referência

CVE-2012-2952

CVE-2012-2952—

SQL injection vulnerability in add_ons.php in Jaow 2.4.5 and earlier allows remote attackers to execute arbitrary SQL co

23RISCO

Referência

CVE-2020-7246

CVE-2020-7246—

A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code

60RISCO

Referência

CVE-2017-5817

CVE-2017-5817—

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

60RISCO

Referência✓ VexDay Proof

Pragyan CMS 2.6.2 - 'sourceFolder' Remote File Inclusion

CVE-2008-3207—webappsphp

PHP remote file inclusion vulnerability in cms/modules/form.lib.php in Pragyan CMS 2.6.2, when register_globals is enabl

23RISCO

Referência✓ VexDay Proof

Amaya Web Editor 11.0 - XML / HTML Parser

CVE-2009-0323—doswindows

Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary

50RISCO

Referência

CVE-2019-2729

CVE-2019-2729CRITICAL

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

85RISCO

Referência

CVE-2019-3010

CVE-2019-3010HIGHsob ataque

Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is a

91RISCO

Referência

CVE-2019-3396

CVE-2019-3396CRITICALsob ataqueransomware

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers

100RISCO

Referência

CVE-2019-3396

CVE-2019-3396CRITICALsob ataqueransomware

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers

100RISCO

Referência✓ VexDay Proof

Simple DNS Plus 5.0/4.1 - Remote Denial of Service

CVE-2008-3208—doswindows

Simple DNS Plus 4.1, 5.0, and possibly other versions before 5.1.101 allows remote attackers to cause a denial of servic

23RISCO

Referência

CVE-2020-8163

CVE-2020-8163—

The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the

60RISCO

Referência✓ VexDay Proof

PHPizabi 0.848b C1 HFP1 - Remote Code Execution

CVE-2008-3239—webappsphp

Unrestricted file upload vulnerability in the writeLogEntry function in system/v_cron_proc.php in PHPizabi 0.848b C1 HFP

23RISCO

Referência✓ VexDay Proof

blogit! - SQL Injection / File Disclosure / Cross-Site Scripting

CVE-2009-0335—webappsphp

Cross-site scripting (XSS) vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to inject arbitrar

23RISCO

Referência✓ VexDay Proof

ProFTPd - 'mod_mysql' Authentication Bypass

CVE-2009-0542—remotemultiple

SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL co

45RISCO

Referência

CVE-2019-7194

CVE-2019-7194CRITICALsob ataqueransomware

This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fi

100RISCO

Referência

CVE-2019-14470

CVE-2019-14470—

cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has X

60RISCO

Referência✓ VexDay Proof

PPMate PPMedia Class - ActiveX Control Buffer Overflow (PoC)

CVE-2008-3242—doswindows

Heap-based buffer overflow in the PPMedia Class ActiveX control in PPMPlayer.dll in PPMate 2.3.1.93 allows remote attack

28RISCO

Referência

CVE-2020-7980

CVE-2020-7980—

Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to th

60RISCO

Referência

CVE-2018-16763

CVE-2018-16763—

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca

60RISCO

Referência✓ VexDay Proof

Arctic Issue Tracker 2.0.0 - 'filter' SQL Injection (1)

CVE-2008-3250—webappsphp

SQL injection vulnerability in index.php in Arctic Issue Tracker 2.0.0 allows remote attackers to execute arbitrary SQL

23RISCO

Referência

CVE-2019-3475

CVE-2019-3475HIGH

Local privilege escalation in Filr famtd

41RISCO

Referência✓ VexDay Proof

preCMS 1 - 'index.php' SQL Injection

CVE-2008-3254—webappsphp

SQL injection vulnerability in index.php in preCMS 1 allows remote attackers to execute arbitrary SQL commands via the i

23RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.