Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.386exploits catalogados

36.533CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.104GitHub PoC 15.075VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentes populares risco

23.051 exploits

Referência

CVE-2015-6128

CVE-2015-6128—

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandle library loading, which allo

60RISCO

abrir ↗

Referência

CVE-2019-3978

CVE-2019-3978—

RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queri

28RISCO

abrir ↗

Referência

CVE-2018-6789

CVE-2018-6789CRITICALsob ataqueransomware

An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted mes

100RISCO

abrir ↗

Referência

CVE-2018-6789

CVE-2018-6789CRITICALsob ataqueransomware

An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted mes

100RISCO

abrir ↗

Referência✓ VexDay Proof

Aprox CMS Engine 5.1.0.4 - 'index.php' SQL Injection

CVE-2008-3291—webappsphp

SQL injection vulnerability in index.php in AproxEngine (aka Aprox CMS Engine) 5.1.0.4 allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

EZWebAlbum - Insecure Cookie Handling

CVE-2008-3292—webappsphp

constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by se

23RISCO

abrir ↗

Referência✓ VexDay Proof

Persism CMS 0.9.2 - system[path] Remote File Inclusion

CVE-2007-2545—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Persism CMS 0.9.2 and earlier allow remote attackers to execute ar

35RISCO

abrir ↗

Referência

CVE-2019-4716

CVE-2019-4716CRITICALsob ataque

IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated use

100RISCO

abrir ↗

Referência

CVE-2018-10660

CVE-2018-10660—

An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection.

60RISCO

abrir ↗

Referência

CVE-2015-6922

CVE-2015-6922—

Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before

60RISCO

abrir ↗

Referência

CVE-2015-6922

CVE-2015-6922—

Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before

60RISCO

abrir ↗

Referência

CVE-2017-0038

CVE-2017-0038—

gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows

45RISCO

abrir ↗

Referência

CVE-2024-8957

CVE-2024-8957HIGHsob ataque

PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration

93RISCO

abrir ↗

Referência✓ VexDay Proof

DeluxeBB 1.07 - Remote Create Admin

CVE-2006-3304—webappsphp

SQL injection vulnerability in cp.php in DeluxeBB 1.07 and earlier allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2014-8440

CVE-2014-8440—

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on

60RISCO

abrir ↗

Referência

CVE-2015-0336

CVE-2015-0336—

Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451

60RISCO

abrir ↗

Referência✓ VexDay Proof

bilboblog 2.1 - Multiple Vulnerabilities

CVE-2008-3302—webappsphp

SQL injection vulnerability in admin/delete.php in BilboBlog 0.2.1, when magic_quotes_gpc is disabled, allows remote aut

23RISCO

abrir ↗

Referência

CVE-2017-8779

CVE-2017-8779—

rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider t

60RISCO

abrir ↗

Referência

CVE-2020-35578

CVE-2020-35578—

An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature

60RISCO

abrir ↗

Referência

CVE-2020-35578

CVE-2020-35578—

An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature

60RISCO

abrir ↗

Referência

CVE-2023-22232

CVE-2023-22232MEDIUM

Adobe Connect Improper Access Control Security feature bypass

70RISCO

abrir ↗

Referência

CVE-2019-5392

CVE-2019-5392—

A disclosure of information vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than ve

23RISCO

abrir ↗

Referência

CVE-2009-2428

CVE-2009-2428—

Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

bilboblog 2.1 - Multiple Vulnerabilities

CVE-2008-3304—webappsphp

BilboBlog 0.2.1 allows remote attackers to obtain sensitive information via (1) an enable_cache=false query string to fo

23RISCO

abrir ↗

Referência

CVE-2019-5418

CVE-2019-5418HIGHsob ataque

There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where spe

100RISCO

abrir ↗

Referência✓ VexDay Proof

Pre Survey Poll - 'catid' SQL Injection

CVE-2008-3310—webappsasp

SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

feedDemon 2.7 - OPML Outline Tag Buffer Overflow

CVE-2009-0546—localwindows

Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbi

50RISCO

abrir ↗

Referência

CVE-2017-17641

CVE-2017-17641—

Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter.

23RISCO

abrir ↗

Referência

CVE-2024-9464

CVE-2024-9464CRITICAL

Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure

70RISCO

abrir ↗

Referência

CVE-2023-5360

CVE-2023-5360—

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.