Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.697exploits catalogados

36.715CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.264GitHub PoC 15.172VulnCheck XDB 8.920Nuclei 4.373Metasploit 3.493✓ só verificadosrecentes populares risco

23.051 exploits

Referência

CVE-2009-2926

CVE-2009-2926—

Multiple SQL injection vulnerabilities in PHP Competition System BETA 0.84 and earlier allow remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2018-8466

CVE-2018-8466—

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

35RISCO

abrir ↗

Referência

CVE-2018-11646

CVE-2018-11646—

webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFavicon

50RISCO

abrir ↗

Referência✓ VexDay Proof

X10media Mp3 Search Engine 1.5.5 - Remote File Inclusion

CVE-2008-4141—webappsphp

Multiple PHP remote file inclusion vulnerabilities in x10Media x10 Automatic MP3 Script 1.5.5 allow remote attackers to

23RISCO

abrir ↗

Referência

CVE-2018-10594

CVE-2018-10594—

Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPS

50RISCO

abrir ↗

Referência

CVE-2018-10594

CVE-2018-10594—

Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPS

50RISCO

abrir ↗

Referência

CVE-2021-34621

CVE-2021-34621CRITICAL

ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation

75RISCO

abrir ↗

Referência

CVE-2022-22960

CVE-2022-22960HIGHsob ataque

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due t

98RISCO

abrir ↗

Referência

CVE-2016-0099

CVE-2016-0099HIGHsob ataqueransomware

The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8

98RISCO

abrir ↗

Referência✓ VexDay Proof

addalink 4 - 'category_id' SQL Injection

CVE-2008-4145—webappsphp

SQL injection vulnerability in user_read_links.php in Addalink 1.0 beta 4 and earlier, when magic_quotes_gpc is disabled

23RISCO

abrir ↗

Referência

CVE-2019-9194

CVE-2019-9194—

elFinder before 2.1.48 has a command injection vulnerability in the PHP connector.

60RISCO

abrir ↗

Referência✓ VexDay Proof

Sepcity Lawyer Portal - SQL Injection

CVE-2008-6152—webappsasp

SQL injection vulnerability in deptdisplay.asp in SepCity Faculty Portal allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência

CVE-2014-6039

CVE-2014-6039—

ManageEngine EventLog Analyzer version 7 through 9.9 build 9002 has a Credentials Disclosure Vulnerability. Fixed versio

50RISCO

abrir ↗

Referência

CVE-2017-8670

CVE-2017-8670—

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code

35RISCO

abrir ↗

Referência

CVE-2012-5687

CVE-2012-5687—

Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13

50RISCO

abrir ↗

Referência

CVE-2016-7286

CVE-2016-7286—

The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

35RISCO

abrir ↗

Referência

CVE-2016-7286

CVE-2016-7286—

The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

35RISCO

abrir ↗

Referência✓ VexDay Proof

Diesel Joke Site - 'picture_category.php' SQL Injection

CVE-2008-4150—webappsphp

SQL injection vulnerability in picture_category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2018-10093

CVE-2018-10093—

AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.

50RISCO

abrir ↗

Referência

CVE-2018-10093

CVE-2018-10093—

AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.

50RISCO

abrir ↗

Referência✓ VexDay Proof

CYASK 3.x - 'neturl' Local File Disclosure

CVE-2008-4151—webappsphp

Directory traversal vulnerability in collect.php in CYASK 3.x allows remote attackers to read arbitrary files via a .. (

23RISCO

abrir ↗

Referência

CVE-2015-7611

CVE-2015-7611—

Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary syst

50RISCO

abrir ↗

Referência

CVE-2015-7611

CVE-2015-7611—

Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary syst

50RISCO

abrir ↗

Referência✓ VexDay Proof

CustomCMS 4.0 - 'print.php' SQL Injection

CVE-2008-4156—webappsphp

SQL injection vulnerability in print.php in CustomCms (CCMS) Gaming Portal 4.0, when magic_quotes_gpc is disabled, allow

23RISCO

abrir ↗

Referência

CVE-2009-2227

CVE-2009-2227—

Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrar

50RISCO

abrir ↗

Referência

CVE-2018-15473

CVE-2018-15473MEDIUM

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISCO

abrir ↗

Referência

CVE-2018-15473

CVE-2018-15473MEDIUM

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISCO

abrir ↗

Referência✓ VexDay Proof

eMeeting Online Dating Software 5.2 - SQL Injection

CVE-2007-3609—webappsphp

Multiple SQL injection vulnerabilities in eMeeting Online Dating Software 5.2 allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zanfi CMS lite / Jaw Portal free - 'page' SQL Injection

CVE-2008-4159—webappsphp

SQL injection vulnerability in index.php in Jaw Portal and Zanfi CMS lite and allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

iScripts EasyIndex - 'produid' SQL Injection

CVE-2008-4169—webappsphp

SQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote attackers to execute ar

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.