Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.505exploits catalogados

34.478CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.534GitHub PoC 13.648VulnCheck XDB 8.198Nuclei 4.218Metasploit 3.464✓ só verificadosrecentes populares risco

21.497 exploits

Referência✓ VexDay Proof

PicoFlat CMS 0.5.9 (Windows) - Local File Inclusion

CVE-2008-6604—webappsphp

Directory traversal vulnerability in index.php in PicoFlat CMS 0.5.9 allows remote attackers to include and execute arbi

23RISCO

abrir ↗

Referência

CVE-2014-5287

CVE-2014-5287—

A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input i

23RISCO

abrir ↗

Referência

CVE-2014-5287

CVE-2014-5287—

A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input i

23RISCO

abrir ↗

Referência

CVE-2014-0983

CVE-2014-0983—

Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/s

38RISCO

abrir ↗

Referência

Feng Office 3.7.0.5 - Remote Command Execution (Metasploit)

CVE-2019-9623—webappsphp

Feng Office 3.7.0.5 allows remote attackers to execute arbitrary code via "<!--#exec cmd=" in a .shtml file to ck_upload

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Live Helper 2.0 - 'abs_path' Remote File Inclusion

CVE-2006-4051—webappsphp

PHP remote file inclusion vulnerability in global.php in Turnkey Web Tools PHP Live Helper 2.0 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

MobilePublisherPHP 1.5 RC2 - Remote File Inclusion

CVE-2006-4849—webappsphp

PHP remote file inclusion vulnerability in header.php in MobilePublisherPHP 1.5 RC2 and earlier allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2014-7288

CVE-2014-7288—

Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrator

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebChat 0.77 - 'defines.php?WEBCHATPATH' Remote File Inclusion

CVE-2007-0485—webappsphp

PHP remote file inclusion vulnerability in defines.php in WebChat 0.77 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

TeamSpeak 2.0 (Windows Release) - Remote Denial of Service

CVE-2007-3956—doswindows

TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which al

23RISCO

abrir ↗

Referência

CVE-2015-6787

CVE-2015-6787—

Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service o

23RISCO

abrir ↗

Referência

CVE-2015-6787

CVE-2015-6787—

Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service o

23RISCO

abrir ↗

Referência

CVE-2021-43936

CVE-2021-43936CRITICAL

Distributed Data Systems WebHM

60RISCO

abrir ↗

Referência

CVE-2015-6787

CVE-2015-6787—

Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service o

23RISCO

abrir ↗

Referência

CVE-2015-7571

CVE-2015-7571—

Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploadin

23RISCO

abrir ↗

Referência

CVE-2015-7571

CVE-2015-7571—

Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploadin

23RISCO

abrir ↗

Referência

CVE-2017-3132

CVE-2017-3132—

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthor

38RISCO

abrir ↗

Referência

CVE-2017-9750

CVE-2017-9750—

opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2009-4202

CVE-2009-4202—

Directory traversal vulnerability in the Omilen Photo Gallery (com_omphotogallery) component Beta 0.5 for Joomla! allows

38RISCO

abrir ↗

Referência✓ VexDay Proof

BT-sondage 1.12 - 'gestion_sondage.php' Remote File Inclusion

CVE-2007-1812—webappsphp

PHP remote file inclusion vulnerability in utilitaires/gestion_sondage.php in BT-Sondage 112 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jasmine CMS 1.0 - SQL Injection / Remote Code Execution

CVE-2007-3313—webappsphp

Multiple SQL injection vulnerabilities in Jasmine CMS 1.0 allow remote attackers to execute arbitrary SQL commands via (

23RISCO

abrir ↗

Referência✓ VexDay Proof

Acoustica MP3 CD Burner 4.32 - Local Buffer Overflow (PoC)

CVE-2007-3006—doswindows

Buffer overflow in Acoustica MP3 CD Burner 4.32 allows user-assisted remote attackers to execute arbitrary code via a .a

23RISCO

abrir ↗

Referência

CVE-2020-9372

CVE-2020-9372—

The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields such as Description or

23RISCO

abrir ↗

Referência✓ VexDay Proof

BitDefender Online Scanner 8 - ActiveX Heap Overflow

CVE-2007-6189—remotewindows

A certain ActiveX control in (1) OScan8.ocx and (2) Oscan81.ocx in BitDefender Online Anti-Virus Scanner 8.0 allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Yahoo! JukeBox MediaGrid - 'AddBitmap()' ActiveX Buffer Overflow

CVE-2008-0625—remotewindows

Buffer overflow in the MediaGrid ActiveX control (mediagrid.dll) in Yahoo! Music Jukebox 2.2.2.56 allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Centreon 1.4.2.3 - 'get_image.php' Remote File Disclosure

CVE-2008-1119—webappsphp

Directory traversal vulnerability in include/doc/get_image.php in Centreon 1.4.2.3 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2016-9682

CVE-2016-9682—

The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabi

28RISCO

abrir ↗

Referência

CVE-2020-9374

CVE-2020-9374—

On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploit

35RISCO

abrir ↗

Referência✓ VexDay Proof

Maian Weblog 4.0 - Insecure Cookie Handling

CVE-2008-3318—webappsphp

admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication and gain administrative

23RISCO

abrir ↗

Referência

CVE-2014-9633

CVE-2014-9633—

The bdisk.sys driver in COMODO Backup before 4.4.1.23 allows remote attackers to gain privileges via a crafted device ha

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.