Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.302exploits catalogados

35.469CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8.646Nuclei 4.289Metasploit 3.474✓ só verificadosrecentes populares risco

22.301 exploits

Referência

CVE-2017-9749

CVE-2017-9749—

The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer

23RISCO

abrir ↗

Referência

CVE-2019-25441

CVE-2019-25441CRITICAL

thesystem 1.0 Command Injection via run_command endpoint

48RISCO

abrir ↗

Referência

CVE-2008-4558

CVE-2008-4558—

Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mozilla Firefox 3.0.5 - location.hash Remote Crash

CVE-2008-5715—doswindows

Mozilla Firefox 3.0.5 on Windows Vista allows remote attackers to cause a denial of service (application crash) via Java

23RISCO

abrir ↗

Referência

CVE-2010-1302

CVE-2010-1302—

Directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs (com_dwgraphs) component 1.0 for Joomla! a

38RISCO

abrir ↗

Referência

CVE-2017-14704

CVE-2017-14704—

Multiple unrestricted file upload vulnerabilities in the (1) imageSubmit and (2) proof_submit functions in Claydip Larav

23RISCO

abrir ↗

Referência✓ VexDay Proof

Eggdrop/Windrop 1.6.19 - ctcpbuf Remote Crash

CVE-2009-1789—dosmultiple

mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpGroupWare 0.9.16.010 - 'GLOBALS[]' Remote Code Execution

CVE-2006-4458—webappsphp

Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allow

23RISCO

abrir ↗

Referência

CVE-2019-25732

CVE-2019-25732HIGH

PHP EI-Tube Script 3 SQL Injection via search parameter

41RISCO

abrir ↗

Referência

CVE-2026-6563

CVE-2026-6563HIGH

H3C Magic B1 aspForm SetAPWifiorLedInfoById buffer overflow

41RISCO

abrir ↗

Referência

CVE-2016-5063

CVE-2016-5063—

The RSCD agent in BMC Server Automation before 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows might allow remote atta

23RISCO

abrir ↗

Referência

CVE-2018-7317

CVE-2018-7317—

Backup Download exists in the Proclaim 9.1.1 component for Joomla! via a direct request for a .sql file under backup/.

23RISCO

abrir ↗

Referência

CVE-2010-3460

CVE-2010-3460—

Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2009-2917

CVE-2009-2917—

Stack-based buffer overflow in ImTOO MPEG Encoder 3.1.53 allows remote attackers to cause a denial of service (crash) or

23RISCO

abrir ↗

Referência

CVE-2022-25359

CVE-2022-25359—

On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, dele

35RISCO

abrir ↗

Referência

CVE-2019-12252

CVE-2019-12252—

In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post

23RISCO

abrir ↗

Referência

CVE-2019-25487

CVE-2019-25487CRITICAL

SAPIDO RB-1732 V2.0.43 Remote Command Execution via formSysCmd

48RISCO

abrir ↗

Referência

CVE-2017-11398

CVE-2017-11398—

A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 an

23RISCO

abrir ↗

Referência✓ VexDay Proof

CWB PRO 1.5 - 'INCLUDE_PATH' Remote File Inclusion

CVE-2007-1809—webappsphp

Multiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder (CWB) PRO 1.5 allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component LMO 1.0b2 - Remote File Inclusion

CVE-2006-3970—webappsphp

PHP remote file inclusion vulnerability in lmo.php in the LMO Component (com_lmo) 1.0b2 and earlier for Joomla! allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

XnView 1.92.1 - 'FontName' Slideshow Buffer Overflow

CVE-2008-0069—localwindows

Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

eXV2 Module MyAnnonces - 'lid' SQL Injection

CVE-2008-1406—webappsphp

SQL injection vulnerability in annonces-p-f.php in the MyAnnonces 1.8 module for eXV2 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

eXV2 Module WebChat 1.60 - 'roomid' SQL Injection

CVE-2008-1407—webappsphp

SQL injection vulnerability in index.php in the WebChat 1.60 module for eXV2 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

UNAK-CMS 1.5 - 'dirroot' Remote File Inclusion

CVE-2006-4890—webappsphp

Multiple PHP remote file inclusion vulnerabilities in UNAK-CMS 1.5 and earlier allow remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Easy-Clanpage 2.2 - 'id' SQL Injection

CVE-2008-1425—webappsphp

SQL injection vulnerability in index.php in the gallery module in Easy-Clanpage 2.2 allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPStore Real Estate - Arbitrary File Upload

CVE-2008-6930—webappsphp

Unrestricted file upload vulnerability in PHPStore Real Estate allows remote authenticated users to execute arbitrary co

23RISCO

abrir ↗

Referência

CVE-2015-4038

CVE-2015-4038—

The WP Membership plugin 1.2.3 for WordPress allows remote authenticated users to gain administrator privileges via an i

23RISCO

abrir ↗

Referência

CVE-2015-1362

CVE-2015-1362—

Buffer overflow in the Customize 35mm tab in Two Pilots Exif Pilot 4.7.2 allows remote attackers to execute arbitrary co

23RISCO

abrir ↗

Referência

CVE-2014-0094

CVE-2014-0094—

The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via t

60RISCO

abrir ↗

Referência

CVE-2017-14702

CVE-2017-14702—

ERS Data System 1.8.1.0 allows remote attackers to execute arbitrary code, related to "com.branaghgroup.ecers.update.Upd

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.