Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.573 exploits

Referência

CVE-2018-17254

CVE-2018-17254—

The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter.

60RISCO

abrir ↗

Referência✓ VexDay Proof

MW6 Datamatrix - ActiveX 'Datamatrix.dll' Insecure Method

CVE-2008-4925—remotewindows

Multiple insecure method vulnerabilities in MW6 Technologies DataMatrix ActiveX control (DATAMATRIXLib.MW6DataMatrix, Da

23RISCO

abrir ↗

Referência

CVE-2019-7194

CVE-2019-7194CRITICALsob ataqueransomware

This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fi

100RISCO

abrir ↗

Referência

CVE-2019-14470

CVE-2019-14470—

cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has X

60RISCO

abrir ↗

Referência

CVE-2020-7980

CVE-2020-7980—

Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to th

60RISCO

abrir ↗

Referência

CVE-2018-16763

CVE-2018-16763—

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca

60RISCO

abrir ↗

Referência✓ VexDay Proof

MW6 PDF417 - ActiveX 'MW6PDF417.dll' Remote Insecure Method

CVE-2008-4926—remotewindows

Multiple insecure method vulnerabilities in MW6 Technologies PDF417 ActiveX control (MW6PDF417Lib.PDF417, MW6PDF417.dll)

23RISCO

abrir ↗

Referência✓ VexDay Proof

U-Mail Webmail 4.91 - 'edit.php' Arbitrary File Write

CVE-2008-4932—webappsphp

webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 allows remote attackers to overwrite arbitrary files v

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPX 3.5.16 - 'news_id' SQL Injection

CVE-2008-5000—webappsphp

SQL injection vulnerability in admin/includes/news.inc.php in PHPX 3.5.16, when magic_quotes_gpc is disabled, allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bloggie Lite 0.0.2 Beta - Insecure Cookie Handling / SQL Injection

CVE-2008-5004—webappsphp

SQL injection vulnerability in genscode.php in myWebland Bloggie Lite 0.0.2 beta allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2008-5037

CVE-2008-5037—

SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

FTP Now 2.6 Server - Response Remote Crash (PoC)

CVE-2008-5045—doswindows

Heap-based buffer overflow in Network-Client FTP Now 2.6, and possibly other versions, allows remote FTP servers to caus

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component JooBlog 0.1.1 - 'PostID' SQL Injection

CVE-2008-5051—webappsphp

SQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2019-0539

CVE-2019-0539—

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

45RISCO

abrir ↗

Referência✓ VexDay Proof

DevelopItEasy Membership System 1.3 - Authentication Bypass

CVE-2008-5054—webappsphp

Multiple SQL injection vulnerabilities in Develop It Easy Membership System 1.3 allow remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2008-5063

CVE-2008-5063—

PHP remote file inclusion vulnerability in Admin/ADM_Pagina.php in OTManager 2.4 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2008-5064

CVE-2008-5064—

SQL injection vulnerability in liga.php in H&H WebSoccer 2.80 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Agares ThemeSiteScript 1.0 - 'loadadminpage' Remote File Inclusion

CVE-2008-5066—webappsphp

PHP remote file inclusion vulnerability in upload/admin/frontpage_right.php in Agares Media ThemeSiteScript 1.0 allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple PHP NewsLetter 1.5 - Local File Inclusion

CVE-2009-0340—webappsphp

Multiple directory traversal vulnerabilities in Simple PHP Newsletter 1.5 allow remote attackers to read arbitrary files

23RISCO

abrir ↗

Referência

CVE-2019-1619

CVE-2019-1619CRITICAL

Cisco Data Center Network Manager Authentication Bypass Vulnerability

85RISCO

abrir ↗

Referência

CVE-2019-1619

CVE-2019-1619CRITICAL

Cisco Data Center Network Manager Authentication Bypass Vulnerability

85RISCO

abrir ↗

Referência

CVE-2012-5958

CVE-2012-5958—

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable

60RISCO

abrir ↗

Referência✓ VexDay Proof

PromoteWeb MySQL - 'id' SQL Injection

CVE-2008-5069—webappsphp

SQL injection vulnerability in go.php in Panuwat PromoteWeb MySQL, when magic_quotes_gpc is disabled, allows remote atta

23RISCO

abrir ↗

Referência

CVE-2014-4511

CVE-2014-4511—

Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in

60RISCO

abrir ↗

Referência✓ VexDay Proof

SebracCMS 0.4 - Multiple SQL Injections

CVE-2008-5195—webappsphp

Multiple SQL injection vulnerabilities in SebracCMS (sbcms) 0.4 allow remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2024-0769

CVE-2024-0769MEDIUMsob ataque

D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal

85RISCO

abrir ↗

Referência

CVE-2023-43208

CVE-2023-43208CRITICALsob ataqueransomware

NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that

100RISCO

abrir ↗

Referência

CVE-2015-5374

CVE-2015-5374—

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01;

60RISCO

abrir ↗

Referência✓ VexDay Proof

AcmlmBoard 1.A2 - 'pow' SQL Injection

CVE-2008-5198—webappsphp

SQL injection vulnerability in memberlist.php in Acmlmboard 1.A2 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

AJ Auction 6.2.1 - 'classifide_ad.php' SQL Injection

CVE-2008-5212—webappsphp

SQL injection vulnerability in classifide_ad.php in AJ Auction 6.2.1 and earlier allows remote attackers to execute arbi

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.