Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.697exploits catalogados

36.715CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.264GitHub PoC 15.172VulnCheck XDB 8.920Nuclei 4.373Metasploit 3.493✓ só verificadosrecentes populares risco

23.051 exploits

Referência

CVE-2019-1429

CVE-2019-1429HIGHsob ataque

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

93RISCO

abrir ↗

Referência

CVE-2014-3914

CVE-2014-3914—

Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows

60RISCO

abrir ↗

Referência

CVE-2017-6316

CVE-2017-6316CRITICALsob ataque

Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as r

100RISCO

abrir ↗

Referência

CVE-2017-6316

CVE-2017-6316CRITICALsob ataque

Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as r

100RISCO

abrir ↗

Referência✓ VexDay Proof

Zeeways ZeeJobsite 2.0 - 'adid' SQL Injection

CVE-2008-3706—webappsphp

SQL injection vulnerability in bannerclick.php in ZEEJOBSITE 2.0 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpTrafficA 1.4.2 - 'pageid' SQL Injection

CVE-2007-3426—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpArcadeScript 4 - 'cat' SQL Injection

CVE-2008-3711—webappsphp

SQL injection vulnerability in index.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

cyberBB 0.6 - Multiple SQL Injections

CVE-2008-3718—webappsphp

Multiple SQL injection vulnerabilities in cyberBB 0.6 allow remote authenticated users to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2022-20699

CVE-2022-20699CRITICALsob ataque

Cisco Small Business RV Series Routers Vulnerabilities

100RISCO

abrir ↗

Referência

CVE-2017-15889

CVE-2017-15889—

Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authe

60RISCO

abrir ↗

Referência

CVE-2021-25296

CVE-2021-25296HIGHsob ataque

Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi

100RISCO

abrir ↗

Referência

CVE-2021-25296

CVE-2021-25296HIGHsob ataque

Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi

100RISCO

abrir ↗

Referência

CVE-2021-39327

CVE-2021-39327MEDIUM

BulletProof Security <= 5.1 Sensitive Information Disclosure

70RISCO

abrir ↗

Referência

CVE-2016-1560

CVE-2016-1560—

ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and

60RISCO

abrir ↗

Referência✓ VexDay Proof

Gravity GTD 0.4.5 - Local File Inclusion / Remote Code Execution

CVE-2008-5962—webappsphp

Directory traversal vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and earlier allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_bookJoomlas 0.1 - SQL Injection

CVE-2009-1263—webappsphp

SQL injection vulnerability in sub_commententry.php in the BookJoomlas (com_bookjoomlas) component 0.1 for Joomla! allow

23RISCO

abrir ↗

Referência

CVE-2017-6334

CVE-2017-6334HIGHsob ataque

dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute ar

100RISCO

abrir ↗

Referência

CVE-2017-6334

CVE-2017-6334HIGHsob ataque

dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute ar

100RISCO

abrir ↗

Referência

CVE-2017-6334

CVE-2017-6334HIGHsob ataque

dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute ar

100RISCO

abrir ↗

Referência

CVE-2017-8729

CVE-2017-8729—

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current u

45RISCO

abrir ↗

Referência

CVE-2019-16724

CVE-2019-16724—

File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Excepti

60RISCO

abrir ↗

Referência

CVE-2019-16724

CVE-2019-16724—

File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Excepti

60RISCO

abrir ↗

Referência✓ VexDay Proof

Affiliate Directory - 'id' SQL Injection

CVE-2008-3719—webappsphp

SQL injection vulnerability in directory.php in SFS Affiliate Directory allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2016-10009

CVE-2016-10009HIGH

Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute

53RISCO

abrir ↗

Referência

CVE-2016-10009

CVE-2016-10009HIGH

Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute

53RISCO

abrir ↗

Referência

CVE-2015-2455

CVE-2015-2455—

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2

35RISCO

abrir ↗

Referência

CVE-2018-6008

CVE-2018-6008—

Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the download_file parameter

50RISCO

abrir ↗

Referência

CVE-2018-6008

CVE-2018-6008—

Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the download_file parameter

50RISCO

abrir ↗

Referência

CVE-2017-11741

CVE-2017-11741—

HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo help

23RISCO

abrir ↗

Referência✓ VexDay Proof

EternalMart Guestbook 1.10 - '/admin/auth.php' Remote File Inclusion

CVE-2003-1314—webappsphp

PHP remote file inclusion vulnerability in admin/auth.php in EternalMart Guestbook (EMGB) 1.1 allows remote attackers to

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.