Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.573 exploits

Referência✓ VexDay Proof

WM Downloader - '.m3u' Local Stack Overflow (PoC)

CVE-2009-1327—doswindows

Stack-based buffer overflow in Mini-stream WM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a

23RISCO

abrir ↗

Referência

CVE-2019-0211

CVE-2019-0211HIGHsob ataque

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privilege

83RISCO

abrir ↗

Referência

CVE-2019-0211

CVE-2019-0211HIGHsob ataque

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privilege

83RISCO

abrir ↗

Referência

CVE-2019-0211

CVE-2019-0211HIGHsob ataque

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privilege

83RISCO

abrir ↗

Referência

CVE-2014-5519

CVE-2014-5519—

The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a dev

50RISCO

abrir ↗

Referência

CVE-2014-5519

CVE-2014-5519—

The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a dev

50RISCO

abrir ↗

Referência

CVE-2021-27877

CVE-2021-27877HIGHsob ataqueransomware

An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authenticat

98RISCO

abrir ↗

Referência✓ VexDay Proof

PHPmyGallery 1.5beta - '/common-tpl-vars.php' Local/Remote File Inclusion

CVE-2008-6317—webappsphp

Directory traversal vulnerability in _conf/_php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2016-7203

CVE-2016-7203—

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a de

35RISCO

abrir ↗

Referência

CVE-2015-6973

CVE-2015-6973—

Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to

35RISCO

abrir ↗

Referência

CVE-2015-6973

CVE-2015-6973—

Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to

35RISCO

abrir ↗

Referência

CVE-2016-7237

CVE-2016-7237—

Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, W

35RISCO

abrir ↗

Referência

CVE-2022-23221

CVE-2022-23221CRITICAL

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IG

60RISCO

abrir ↗

Referência

CVE-2016-10175

CVE-2016-10175—

The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. Thi

50RISCO

abrir ↗

Referência✓ VexDay Proof

PHPmyGallery 1.5beta - '/common-tpl-vars.php' Local/Remote File Inclusion

CVE-2008-6318—webappsphp

PHP remote file inclusion vulnerability in _conf/_php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

CF_Calendar - 'calendarevent.cfm' SQL Injection

CVE-2008-6319—webappsasp

SQL injection vulnerability in calendarevent.cfm in CF_Calendar allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

ABC Advertise 1.0 - Admin Password Disclosure

CVE-2009-1550—webappsphp

Zakkis Technology ABC Advertise 1.0 does not properly restrict access to admin.inc.php, which allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2020-0674

CVE-2020-0674HIGHsob ataque

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

93RISCO

abrir ↗

Referência

CVE-2014-6277

CVE-2014-6277—

GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, whi

35RISCO

abrir ↗

Referência

CVE-2022-1609

CVE-2022-1609CRITICAL

The School Management < 9.9.7 - Unauthenticated RCE via REST api

75RISCO

abrir ↗

Referência✓ VexDay Proof

CF_Forum - Blind SQL Injection

CVE-2008-6324—webappsasp

SQL injection vulnerability in forummessages.cfm in CF_Forum allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Xserver 0.1 Alpha - 'POST' Remote Buffer Overflow (PoC)

CVE-2007-3957—doslinux

Buffer overflow in Nipun Jain xserver 0.1 alpha allows remote attackers to cause a denial of service via a POST request

23RISCO

abrir ↗

Referência✓ VexDay Proof

JBlog 1.0 - Create / Delete Admin Authentication Bypass

CVE-2007-3973—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in JBlog 1.0 allow remote attackers to inject arbitrary web script o

23RISCO

abrir ↗

Referência✓ VexDay Proof

bwired - 'index.php?newsID' SQL Injection

CVE-2007-3976—webappsphp

SQL injection vulnerability in index.php in bwired allows remote attackers to execute arbitrary SQL commands via the new

23RISCO

abrir ↗

Referência

CVE-2017-11861

CVE-2017-11861—

Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker t

35RISCO

abrir ↗

Referência✓ VexDay Proof

ProQuiz 1.0 - Authentication Bypass

CVE-2008-6327—webappsphp

SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência

CVE-2018-8735

CVE-2018-8735—

Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execut

50RISCO

abrir ↗

Referência

CVE-2018-8735

CVE-2018-8735—

Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execut

50RISCO

abrir ↗

Referência✓ VexDay Proof

Butterfly ORGanizer 2.0.1 - 'id' SQL Injection

CVE-2008-6328—webappsphp

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2016-1593

CVE-2016-1593—

Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remot

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.