Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.449exploits catalogados

35.552CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.367GitHub PoC 14.225VulnCheck XDB 8.649Nuclei 4.283Metasploit 3.474✓ só verificadosrecentes populares risco

22.367 exploits

Referência

CVE-2012-0391

CVE-2012-0391CRITICALsob ataque

The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during

100RISCO

abrir ↗

Referência✓ VexDay Proof

Mumbo Jumbo Media OP4 - Blind SQL Injection

CVE-2008-6477—webappsphp

SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the i

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component versioning 1.0.2 - 'id' SQL Injection

CVE-2008-6481—webappsphp

SQL injection vulnerability in the Versioning component (com_versioning) 1.0.2 in Joomla! and Mambo allows remote attack

23RISCO

abrir ↗

Referência

TSPlus 16.0.0.0 - Remote Work Insecure Credential storage

CVE-2023-31069—remotewindows

An issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as cleartext within the HTML s

23RISCO

abrir ↗

Referência

CVE-2023-31468

CVE-2023-31468HIGH

An issue was discovered in Inosoft VisiWin 7 through 2022-2.1 (Runtime RT7.3 RC3 20221209.5). The "%PROGRAMFILES(X86)%\I

41RISCO

abrir ↗

Referência

CVE-2017-12629

CVE-2017-12629—

Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction wi

60RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Flash Tree Gallery 1.0 - Remote File Inclusion

CVE-2008-6482—webappsphp

PHP remote file inclusion vulnerability in admin.treeg.php in the Flash Tree Gallery (com_treeg) component 1.0 for Jooml

28RISCO

abrir ↗

Referência

CVE-2015-8556

CVE-2015-8556—

Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1.

28RISCO

abrir ↗

Referência✓ VexDay Proof

Geeklog 2 - 'BaseView.php' Remote File Inclusion

CVE-2007-0810—webappsphp

PHP remote file inclusion vulnerability in MVCnPHP/BaseView.php in GeekLog 2 and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Woltlab Burning Board Lite 1.0.2pl3e - 'pms.php' SQL Injection

CVE-2007-0812—webappsphp

SQL injection vulnerability in pms.php in Woltlab Burning Board (wBB) Lite 1.0.2pl3e and earlier allows remote authentic

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mole Group Taxi Calc Dist Script - Authentication Bypass

CVE-2008-6484—webappsphp

SQL injection vulnerability in login.php in Mole Group Taxi Map Script (aka Taxi Calc Dist Script) allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2012-1775

CVE-2012-1775—

Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code

50RISCO

abrir ↗

Referência✓ VexDay Proof

VidiScript (Avatar) - Arbitrary File Upload

CVE-2008-6518—webappsphp

Unrestricted file upload vulnerability in the profile feature in VidiScript allows registered remote authenticated users

23RISCO

abrir ↗

Referência✓ VexDay Proof

Xitami Web Server 2.5c2 - LRWP Processing Format String (PoC)

CVE-2008-6519—doswindows

Format string vulnerability in Xitami Web Server 2.2a through 2.5c2, and possibly other versions, allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2023-40044

CVE-2023-40044CRITICALsob ataqueransomware

WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability

100RISCO

abrir ↗

Referência

CVE-2020-17463

CVE-2020-17463CRITICALsob ataque

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.

100RISCO

abrir ↗

Referência

CVE-2017-8464

CVE-2017-8464HIGHsob ataque

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201

100RISCO

abrir ↗

Referência

CVE-2017-8464

CVE-2017-8464HIGHsob ataque

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201

100RISCO

abrir ↗

Referência✓ VexDay Proof

μTorrent (uTorrent) 1.6 build 474 - 'announce' Key Remote Heap Overflow

CVE-2007-0927—remotewindows

Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a c

35RISCO

abrir ↗

Referência✓ VexDay Proof

OpenInvoice 0.9 - Arbitrary Change User Password

CVE-2008-6523—webappsphp

auth.php in openInvoice 0.90 beta and earlier allows remote attackers to bypass authentication and gain privileges by se

23RISCO

abrir ↗

Referência✓ VexDay Proof

Total Video Player 1.20 - '.m3u' File Local Stack Buffer Overflow

CVE-2007-0949—localwindows

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers t

28RISCO

abrir ↗

Referência✓ VexDay Proof

BosClassifieds - 'cat_id' SQL Injection

CVE-2008-6526—webappsphp

SQL injection vulnerability in index.php in BosDev BosClassifieds allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

GO4I.NET ASP Forum 1.0 - SQL Injection

CVE-2008-6527—webappsphp

SQL injection vulnerability in forum.asp in GO4I.NET ASP Forum 1.0 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2019-12725

CVE-2019-12725—

Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web ap

60RISCO

abrir ↗

Referência✓ VexDay Proof

Jupiter CMS 1.1.5 - Arbitrary File Upload

CVE-2007-0972—webappsphp

Unrestricted file upload vulnerability in modules/emoticons.php in Jupiter CMS 1.1.5 allows remote attackers to upload a

23RISCO

abrir ↗

Referência✓ VexDay Proof

TmaxSoft JEUS - Alternate Data Streams File Disclosure

CVE-2008-6528—remotewindows

NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to t

23RISCO

abrir ↗

Referência✓ VexDay Proof

PayPal eStore - Admin Password Change

CVE-2008-6535—webappsphp

admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the admin

23RISCO

abrir ↗

Referência✓ VexDay Proof

ActSoft DVD-Tools - 'dvdtools.ocx' Remote Buffer Overflow

CVE-2007-0976—remotewindows

Buffer overflow in the ActSoft DVD-Tools ActiveX control (dvdtools.ocx) allows remote attackers to execute arbitrary cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

WEBBDOMAIN Quiz 1.02 - Authentication Bypass

CVE-2008-6626—webappsphp

SQL injection vulnerability in getin.php in WEBBDOMAIN Quiz 1.02 and earlier allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

Thruk Monitoring Web Interface 3.06 - Path Traversal

CVE-2023-34096MEDIUMwebappsperl

Thruk has Path Traversal Vulnerability in panorama.pm

45RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.