Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.697exploits catalogados

36.715CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.264GitHub PoC 15.172VulnCheck XDB 8.920Nuclei 4.373Metasploit 3.493✓ só verificadosrecentes populares risco

23.051 exploits

Referência✓ VexDay Proof

Pars4U Videosharing 1.0 - Cross-Site Scripting / Blind SQL Injection

CVE-2008-3772—webappsphp

SQL injection vulnerability in categories_portal.php in Pars4u Videosharing 1 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2014-9727

CVE-2014-9727—

AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter t

60RISCO

abrir ↗

Referência

CVE-2019-19509

CVE-2019-19509—

An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a

60RISCO

abrir ↗

Referência

CVE-2019-19509

CVE-2019-19509—

An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a

60RISCO

abrir ↗

Referência✓ VexDay Proof

SuperCali PHP Event Calendar 0.4.0 - SQL Injection

CVE-2007-3582—webappsphp

SQL injection vulnerability in index.php in SuperCali PHP Event Calendar 0.4.0 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2017-8641

CVE-2017-8641—

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve

45RISCO

abrir ↗

Referência

Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE

CVE-2025-24514HIGHremotemultiple

ingress-nginx controller - configuration injection via unsanitized auth-url annotation

68RISCO

abrir ↗

Referência✓ VexDay Proof

Easy RM to MP3 Converter - Universal Stack Overflow

CVE-2009-1330—localwindows

Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil

28RISCO

abrir ↗

Referência

CVE-2019-11231

CVE-2019-11231—

An issue was discovered in GetSimple CMS through 3.3.15. insufficient input sanitation in the theme-edit.php file allows

60RISCO

abrir ↗

Referência

CVE-2016-7241

CVE-2016-7241—

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of

45RISCO

abrir ↗

Referência

CVE-2018-20434

CVE-2018-20434—

LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to htm

60RISCO

abrir ↗

Referência

CVE-2018-20434

CVE-2018-20434—

LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to htm

60RISCO

abrir ↗

Referência✓ VexDay Proof

5 star review - Cross-Site Scripting / SQL Injection

CVE-2008-3780—webappsphp

SQL injection vulnerability in recommend.php in Five Star Review Script allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Matterdaddy Market 1.1 - 'index.php' Multiple SQL Injections

CVE-2008-3783—webappsphp

Multiple SQL injection vulnerabilities in index.php in Matterdaddy Market 1.1, when magic_quotes_gpc is disabled, allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

VideoLAN VLC Media Player 0.8.6i - Mms Protocol Handling Heap Overflow (PoC)

CVE-2008-3794—dosmultiple

Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i all

28RISCO

abrir ↗

Referência

CVE-2016-3247

CVE-2016-3247—

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of

45RISCO

abrir ↗

Referência✓ VexDay Proof

D-Bus Daemon < 1.2.4 - 'libdbus' Denial of Service

CVE-2008-3834—dosmultiple

The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a deni

23RISCO

abrir ↗

Referência✓ VexDay Proof

Crafty Syntax Live Help 2.14.6 - 'department' SQL Injection

CVE-2008-3845—webappsphp

Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and earlier allow remote attackers to ex

23RISCO

abrir ↗

Referência

CVE-2019-19985

CVE-2019-19985MEDIUM

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file downloa

70RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMyRealty 1.0.9 - Multiple SQL Injections

CVE-2008-3861—webappsphp

Multiple SQL injection vulnerabilities in phpMyRealty (PMR) 1.0.9 and earlier allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

AJ Auction Pro Platinum - 'seller_id' SQL Injection

CVE-2008-6003—webappsphp

SQL injection vulnerability in sellers_othersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Oracle APEX 3.2 - Unprivileged DB users can see APEX Password hashes

CVE-2009-0981—localmultiple

Unspecified vulnerability in the Application Express component in Oracle Database 11.1.0.7 allows remote authenticated u

23RISCO

abrir ↗

Referência✓ VexDay Proof

DeluxeBB 1.3 - 'qorder' SQL Injection

CVE-2009-1033—webappsphp

SQL injection vulnerability in misc.php in DeluxeBB 1.3 and earlier allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2010-2703

CVE-2010-2703—

Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM)

60RISCO

abrir ↗

Referência

CVE-2017-8755

CVE-2017-8755—

Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary

45RISCO

abrir ↗

Referência

CVE-2016-1909

CVE-2016-1909—

Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; FortiCache 3.0.x before 3.0

60RISCO

abrir ↗

Referência

CVE-2016-1909

CVE-2016-1909—

Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; FortiCache 3.0.x before 3.0

60RISCO

abrir ↗

Referência

CVE-2018-10094

CVE-2018-10094—

SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vecto

60RISCO

abrir ↗

Referência

CVE-2012-4876

CVE-2012-4876—

Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera

60RISCO

abrir ↗

Referência

CVE-2020-8518

CVE-2020-8518—

Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execu

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.