Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.449exploits catalogados

35.552CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.367GitHub PoC 14.225VulnCheck XDB 8.649Nuclei 4.283Metasploit 3.474✓ só verificadosrecentes populares risco

22.367 exploits

Referência✓ VexDay Proof

EZContents CMS 2.0.3 - Multiple Local File Inclusions

CVE-2008-7055—webappsphp

module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include

23RISCO

abrir ↗

Referência✓ VexDay Proof

BandSite CMS 1.1.4 - Download Backup / Cross-Site Scripting / Cross-Site Request Forgery

CVE-2008-7056—webappsphp

BandSite CMS 1.1.4 does not perform access control for adminpanel/phpmydump.php, which allows remote attackers to obtain

23RISCO

abrir ↗

Referência✓ VexDay Proof

BandSite CMS 1.1.4 - Download Backup / Cross-Site Scripting / Cross-Site Request Forgery

CVE-2008-7057—webappsphp

Cross-site scripting (XSS) vulnerability in merchandise.php in BandSite CMS 1.1.4 allows remote attackers to inject arbi

23RISCO

abrir ↗

Referência

CVE-2018-1160

CVE-2018-1160CRITICAL

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking

70RISCO

abrir ↗

Referência

CVE-2018-1160

CVE-2018-1160CRITICAL

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking

70RISCO

abrir ↗

Referência

CVE-2018-1160

CVE-2018-1160CRITICAL

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking

70RISCO

abrir ↗

Referência

CVE-2018-1160

CVE-2018-1160CRITICAL

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking

70RISCO

abrir ↗

Referência

CVE-2020-13151

CVE-2020-13151—

Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs)

60RISCO

abrir ↗

Referência

CVE-2020-13151

CVE-2020-13151—

Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs)

60RISCO

abrir ↗

Referência

CVE-2017-5816

CVE-2017-5816—

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

60RISCO

abrir ↗

Referência

CVE-2017-5816

CVE-2017-5816—

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

60RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-CMS 1 - 'Username' Blind SQL Injection

CVE-2009-0407—webappsphp

SQL injection vulnerability in admin/login.php in PHP-CMS Project 1 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

CJG EXPLORER PRO 3.2 - 'g_pcltar_lib_dir' Remote File Inclusion

CVE-2007-2199—webappsphp

PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vi

35RISCO

abrir ↗

Referência

CVE-2022-2992

CVE-2022-2992CRITICAL

A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows

85RISCO

abrir ↗

Referência

CVE-2009-2331

CVE-2009-2331—

Multiple static code injection vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2021-1675

CVE-2021-1675HIGHsob ataqueransomware

Windows Print Spooler Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2021-1675

CVE-2021-1675HIGHsob ataqueransomware

Windows Print Spooler Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2021-1675

CVE-2021-1675HIGHsob ataqueransomware

Windows Print Spooler Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência✓ VexDay Proof

Facil-CMS 0.1RC - Multiple Local File Inclusions

CVE-2008-7176—webappsphp

Multiple directory traversal vulnerabilities in Facil CMS 0.1RC allow remote attackers to read arbitrary files via a ..

23RISCO

abrir ↗

Referência

CVE-2026-1731

CVE-2026-1731CRITICALsob ataqueransomware

Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

100RISCO

abrir ↗

Referência✓ VexDay Proof

OTManager CMS 2.4 - Insecure Cookie Handling

CVE-2008-7179—webappsphp

OTManager CMS 2.4 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMI

23RISCO

abrir ↗

Referência

CVE-2020-11652

CVE-2020-11652MEDIUMsob ataque

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RISCO

abrir ↗

Referência

CVE-2017-5255

CVE-2017-5255—

In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web

60RISCO

abrir ↗

Referência✓ VexDay Proof

Adobe Photoshop CS2 / CS3 - '.bmp' Local Buffer Overflow

CVE-2007-2244—localwindows

Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attac

35RISCO

abrir ↗

Referência

CVE-2018-25415

CVE-2018-25415HIGH

AiOPMSD Final 1.0.0 SQL Injection via director Parameter

41RISCO

abrir ↗

Referência

CVE-2018-25414

CVE-2018-25414HIGH

AiOPMSD Final 1.0.0 SQL Injection via actor.php

41RISCO

abrir ↗

Referência✓ VexDay Proof

Mozilla Firefox 3.0.6 - BODY onload Remote Crash

CVE-2009-0071—dosmultiple

Mozilla Firefox 3.0.5 and earlier 3.0.x versions, when designMode is enabled, allows remote attackers to cause a denial

23RISCO

abrir ↗

Referência

CVE-2012-2590

CVE-2012-2590—

Multiple cross-site scripting (XSS) vulnerabilities in ESCON SupportPortal Professional Edition 3.0 allow remote attacke

23RISCO

abrir ↗

Referência

CVE-2012-2591

CVE-2012-2591—

Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attack

23RISCO

abrir ↗

Referência

CVE-2020-8654

CVE-2020-8654—

An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoD

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.