Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.445exploits catalogados

34.432CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

21.497 exploits

Referência✓ VexDay Proof

X-Cart - Multiple Remote File Inclusions

CVE-2007-4907—webappsphp

Multiple PHP remote file inclusion vulnerabilities in X-Cart allow remote attackers to execute arbitrary PHP code via a

23RISCO

abrir ↗

Referência

CVE-2019-16645

CVE-2019-16645—

An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) cre

23RISCO

abrir ↗

Referência

CVE-2019-15501

CVE-2019-15501—

Reflected cross site scripting (XSS) in L-Soft LISTSERV before 16.5-2018a exists via the /scripts/wa.exe OK parameter.

38RISCO

abrir ↗

Referência

CVE-2015-7564

CVE-2015-7564—

Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Internet Download Accelerator 5.2 - Remote Buffer Overflow (PoC)

CVE-2007-3162—doswindows

Buffer overflow in the NotSafe function in the idaiehlp ActiveX control in idaiehlp.dll 1.9.1.74 in Internet Download Ac

23RISCO

abrir ↗

Referência

CVE-2013-5528

CVE-2013-5528—

Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager all

43RISCO

abrir ↗

Referência

CVE-2010-1607

CVE-2010-1607—

Directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface (aka WMI or com_wmi) component 1.5.0

38RISCO

abrir ↗

Referência

CVE-2015-5696

CVE-2015-5696—

Dell Netvault Backup before 10.0.5 allows remote attackers to cause a denial of service (crash) via a crafted request.

23RISCO

abrir ↗

Referência

CVE-2015-5696

CVE-2015-5696—

Dell Netvault Backup before 10.0.5 allows remote attackers to cause a denial of service (crash) via a crafted request.

23RISCO

abrir ↗

Referência

CVE-2020-8947

CVE-2020-8947—

functions_netflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metac

28RISCO

abrir ↗

Referência

CVE-2010-1715

CVE-2010-1715—

Directory traversal vulnerability in the Online Examination (aka Online Exam or com_onlineexam) component 1.5.0 for Joom

38RISCO

abrir ↗

Referência

CVE-2010-1469

CVE-2010-1469—

Directory traversal vulnerability in the Ternaria Informatica JProject Manager (com_jprojectmanager) component 1.0 for J

38RISCO

abrir ↗

Referência✓ VexDay Proof

Pluxml 0.3.1 - Remote Code Execution

CVE-2007-3432—webappsphp

Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute

23RISCO

abrir ↗

Referência

CVE-2013-5528

CVE-2013-5528—

Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager all

43RISCO

abrir ↗

Referência✓ VexDay Proof

KVIrc 3.4.0 - Virgo Remote Format String (PoC)

CVE-2008-4748—doswindows

Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC UR

23RISCO

abrir ↗

Referência

CVE-2009-3704

CVE-2009-3704—

ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service

23RISCO

abrir ↗

Referência

CVE-2020-25495

CVE-2020-25495—

A reflected Cross-site scripting (XSS) vulnerability in Xinuo (formerly SCO) Openserver version 5 and 6 allows remote at

38RISCO

abrir ↗

Referência✓ VexDay Proof

AsteriDex 3.0 - 'callboth.php' Remote Code Execution

CVE-2007-3621—webappsphp

Multiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote attackers to inject ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

PicoFlat CMS 0.5.9 (Windows) - Local File Inclusion

CVE-2008-6604—webappsphp

Directory traversal vulnerability in index.php in PicoFlat CMS 0.5.9 allows remote attackers to include and execute arbi

23RISCO

abrir ↗

Referência

CVE-2014-5287

CVE-2014-5287—

A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input i

23RISCO

abrir ↗

Referência

CVE-2014-5287

CVE-2014-5287—

A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input i

23RISCO

abrir ↗

Referência

CVE-2014-0983

CVE-2014-0983—

Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/s

38RISCO

abrir ↗

Referência

Feng Office 3.7.0.5 - Remote Command Execution (Metasploit)

CVE-2019-9623—webappsphp

Feng Office 3.7.0.5 allows remote attackers to execute arbitrary code via "<!--#exec cmd=" in a .shtml file to ck_upload

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Live Helper 2.0 - 'abs_path' Remote File Inclusion

CVE-2006-4051—webappsphp

PHP remote file inclusion vulnerability in global.php in Turnkey Web Tools PHP Live Helper 2.0 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

MobilePublisherPHP 1.5 RC2 - Remote File Inclusion

CVE-2006-4849—webappsphp

PHP remote file inclusion vulnerability in header.php in MobilePublisherPHP 1.5 RC2 and earlier allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2014-7288

CVE-2014-7288—

Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrator

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebChat 0.77 - 'defines.php?WEBCHATPATH' Remote File Inclusion

CVE-2007-0485—webappsphp

PHP remote file inclusion vulnerability in defines.php in WebChat 0.77 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

TeamSpeak 2.0 (Windows Release) - Remote Denial of Service

CVE-2007-3956—doswindows

TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which al

23RISCO

abrir ↗

Referência

CVE-2015-6787

CVE-2015-6787—

Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service o

23RISCO

abrir ↗

Referência

CVE-2015-6787

CVE-2015-6787—

Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service o

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.