Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.058exploits catalogados

35.300CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.175GitHub PoC 14.096VulnCheck XDB 8.607Nuclei 4.255Metasploit 3.474✓ só verificadosrecentes populares risco

22.175 exploits

Referência✓ VexDay Proof

XOOPS Module icontent 1.0/4.5 - Remote File Inclusion

CVE-2007-3057—webappsphp

PHP remote file inclusion vulnerability in include/wysiwyg/spaw_control.class.php in the icontent 4.5 module for XOOPS a

35RISCO

abrir ↗

Referência✓ VexDay Proof

eMeeting Online Dating Software 5.2 - SQL Injection

CVE-2007-3609—webappsphp

Multiple SQL injection vulnerabilities in eMeeting Online Dating Software 5.2 allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Amaya 11.1 - W3C Editor/Browser 'defer' Remote Stack Overflow

CVE-2009-1209—remotewindows

Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute arbitrary code via a script

28RISCO

abrir ↗

Referência

CVE-2009-3058

CVE-2009-3058—

Stack-based buffer overflow in akPlayer 1.9.0 allows remote attackers to execute arbitrary code via a long string in a .

23RISCO

abrir ↗

Referência

CVE-2015-0802

CVE-2015-0802—

Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl

50RISCO

abrir ↗

Referência

CVE-2013-3628

CVE-2013-3628—

Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability

50RISCO

abrir ↗

Referência

CVE-2008-4687

CVE-2008-4687—

manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort param

50RISCO

abrir ↗

Referência

SugarCRM CE 6.3.1 - 'Unserialize()' PHP Code Execution

CVE-2012-0694—webappsphp

SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers

50RISCO

abrir ↗

Referência✓ VexDay Proof

Sitellite CMS 4.2.12 - '559668.php' Remote File Inclusion

CVE-2007-3228—webappsphp

PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite CM

35RISCO

abrir ↗

Referência

CVE-2002-1120

CVE-2002-1120—

Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP G

50RISCO

abrir ↗

Referência

CVE-2020-24949

CVE-2020-24949—

Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a cr

50RISCO

abrir ↗

Referência

CVE-2012-6519

CVE-2012-6519—

SQL injection vulnerability in modules/poll/index.php in DIY-CMS 1.0 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência

CVE-2024-3552

CVE-2024-3552CRITICAL

Web Directory Free < 1.7.0 - Unauthenticated SQL Injection

75RISCO

abrir ↗

Referência

CVE-2015-7765

CVE-2015-7765—

ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin" for the IntegrationUser a

50RISCO

abrir ↗

Referência

CVE-2015-7765

CVE-2015-7765—

ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin" for the IntegrationUser a

50RISCO

abrir ↗

Referência✓ VexDay Proof

glFusion 1.1.2 - 'COM_applyFilter()/cookies' Blind SQL Injection

CVE-2009-1282—webappsphp

SQL injection vulnerability in private/system/lib-session.php in glFusion 1.1.2 and earlier allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2013-3928

CVE-2013-3928—

Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote atta

50RISCO

abrir ↗

Referência

CVE-2012-6522

CVE-2012-6522—

Directory traversal vulnerability in the getContent function in codes/wcms.php in w-CMS 2.01 allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2021-36934

CVE-2021-36934HIGHsob ataque

Windows Elevation of Privilege Vulnerability

98RISCO

abrir ↗

Referência

CVE-2008-4844

CVE-2008-4844—

Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet

50RISCO

abrir ↗

Referência

CVE-2008-4844

CVE-2008-4844—

Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet

50RISCO

abrir ↗

Referência

CVE-2018-0934

CVE-2018-0934—

ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution,

35RISCO

abrir ↗

Referência✓ VexDay Proof

HP Digital Imaging 'hpqvwocx.dll 2.1.0.556' - 'SaveToFile()' File Write

CVE-2007-3649—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard (HP) Dig

23RISCO

abrir ↗

Referência

CVE-2016-7240

CVE-2016-7240—

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a de

35RISCO

abrir ↗

Referência

CVE-2012-6096

CVE-2012-6096—

Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga

50RISCO

abrir ↗

Referência

CVE-2012-6096

CVE-2012-6096—

Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga

50RISCO

abrir ↗

Referência

CVE-2013-2347

CVE-2013-2347—

The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary

50RISCO

abrir ↗

Referência

CVE-2011-5010

CVE-2011-5010—

apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via sh

50RISCO

abrir ↗

Referência✓ VexDay Proof

Euphonics Audio Player 1.0 - '.pls' Local Buffer Overflow

CVE-2009-0476—localwindows

Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedi

50RISCO

abrir ↗

Referência✓ VexDay Proof

Euphonics Audio Player 1.0 - '.pls' Universal Local Buffer Overflow

CVE-2009-0476—localwindows

Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedi

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.