Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.697exploits catalogados

36.715CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.264GitHub PoC 15.172VulnCheck XDB 8.920Nuclei 4.373Metasploit 3.493✓ só verificadosrecentes populares risco

23.051 exploits

Referência

CVE-2009-2765

CVE-2009-2765—

httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers

60RISCO

abrir ↗

Referência✓ VexDay Proof

AWStats Totals 1.14 - 'AWStatstotals.php' Remote Code Execution

CVE-2008-3922—webappsphp

awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences

50RISCO

abrir ↗

Referência✓ VexDay Proof

CMME 1.12 - Local File Inclusion / Cross-Site Scripting / Cross-Site Request Forgery/Download Backup/Make Directory

CVE-2008-3923—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in statistics.php in Content Management Made Easy (CMME) 1.12 allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

Powl 0.94 - 'htmledit.php' Remote File Inclusion

CVE-2007-3371—webappsphp

PHP remote file inclusion vulnerability in plugins/widgets/htmledit/htmledit.php in Powl 0.94 allows remote attackers to

45RISCO

abrir ↗

Referência✓ VexDay Proof

phpBG 0.9.1 - 'rootdir' Remote File Inclusion

CVE-2007-4636—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code v

45RISCO

abrir ↗

Referência✓ VexDay Proof

I-Rater Basic - SQL Injection

CVE-2008-6017—webappsphp

SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bloginator 1a - Cookie Bypass / SQL Injection

CVE-2009-1049—webappsphp

SQL injection vulnerability in articleCall.php in Bloginator 1A allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2026-7068

CVE-2026-7068HIGH

D-Link DIR-825 nmbd sserver.c NMBD_process buffer overflow

41RISCO

abrir ↗

Referência

CVE-2021-4039

CVE-2021-4039CRITICAL

A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to exec

70RISCO

abrir ↗

Referência

CVE-2015-2509

CVE-2015-2509—

Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows user-assisted remo

60RISCO

abrir ↗

Referência

CVE-2015-2509

CVE-2015-2509—

Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows user-assisted remo

60RISCO

abrir ↗

Referência

CVE-2017-8895

CVE-2017-8895—

In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a u

60RISCO

abrir ↗

Referência

CVE-2013-4835

CVE-2013-4835—

The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authenti

60RISCO

abrir ↗

Referência

CVE-2014-5460

CVE-2014-5460—

Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remot

60RISCO

abrir ↗

Referência

CVE-2014-5460

CVE-2014-5460—

Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remot

60RISCO

abrir ↗

Referência✓ VexDay Proof

CMME 1.12 - Local File Inclusion / Cross-Site Scripting / Cross-Site Request Forgery/Download Backup/Make Directory

CVE-2008-3925—webappsphp

Cross-site request forgery (CSRF) vulnerability in admin.php in Content Management Made Easy (CMME) 1.12 allows remote a

23RISCO

abrir ↗

Referência

CVE-2016-5675

CVE-2016-5675—

handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 th

60RISCO

abrir ↗

Referência

CVE-2018-7490

CVE-2018-7490—

uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversa

50RISCO

abrir ↗

Referência

CVE-2021-35064

CVE-2021-35064—

KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits runn

60RISCO

abrir ↗

Referência

CVE-2012-6588

CVE-2012-6588—

SQL injection vulnerability in links.php in MYRE Business Directory allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

PowerCHM 5.7 - Long URL Local Stack Overflow (PoC)

CVE-2009-1352—doswindows

Stack-based buffer overflow in Dawningsoft PowerCHM 5.7 allows remote attackers to cause a denial of service (applicatio

23RISCO

abrir ↗

Referência✓ VexDay Proof

Words tag script 1.2 - 'word' SQL Injection

CVE-2008-3945—webappsphp

SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2018-18323

CVE-2018-18323—

CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/

60RISCO

abrir ↗

Referência

CVE-2013-6117

CVE-2013-6117—

Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive informatio

50RISCO

abrir ↗

Referência

CVE-2014-8686

CVE-2014-8686—

CodeIgniter before 2.2.0 makes it easier for attackers to decode session cookies by leveraging fallback to a custom XOR-

50RISCO

abrir ↗

Referência✓ VexDay Proof

Vastal I-Tech Shaadi Zone 1.0.9 - 'tage' SQL Injection

CVE-2008-3953—webappsphp

SQL injection vulnerability in keyword_search_action.php in Vastal I-Tech Shaadi Zone 1.0.9 allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

Netartmedia Real Estate Portal 1.2 - SQL Injection

CVE-2008-6042—webappsphp

SQL injection vulnerability in the re_search module in NetArtMedia Real Estate Portal 2.0 allows remote attackers to exe

23RISCO

abrir ↗

Referência

CVE-2017-6736

CVE-2017-6736HIGHsob ataque

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabiliti

93RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows - SmbRelay3 NTLM Replay (MS08-068)

CVE-2008-4037—remotewindows

Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 20

50RISCO

abrir ↗

Referência

CVE-2021-21220

CVE-2021-21220HIGHsob ataque

Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to po

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.