Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.945exploits catalogados

36.198CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.978VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

22.573 exploits

Referência

CVE-2017-15222

CVE-2017-15222—

Buffer Overflow vulnerability in Ayukov NFTPD 2.0 and earlier allows remote attackers to execute arbitrary code.

50RISCO

abrir ↗

Referência

CVE-2017-3066

CVE-2017-3066CRITICALsob ataque

Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier hav

100RISCO

abrir ↗

Referência

CVE-2019-18818

CVE-2019-18818—

strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/s

60RISCO

abrir ↗

Referência

CVE-2021-42321

CVE-2021-42321HIGHsob ataqueransomware

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2021-42321

CVE-2021-42321HIGHsob ataqueransomware

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2022-31137

CVE-2022-31137CRITICAL

Unauthenticated Remote Code Execution in Roxy-WI

85RISCO

abrir ↗

Referência

CVE-2022-31137

CVE-2022-31137CRITICAL

Unauthenticated Remote Code Execution in Roxy-WI

85RISCO

abrir ↗

Referência

CVE-2022-31137

CVE-2022-31137CRITICAL

Unauthenticated Remote Code Execution in Roxy-WI

85RISCO

abrir ↗

Referência

CVE-2022-31137

CVE-2022-31137CRITICAL

Unauthenticated Remote Code Execution in Roxy-WI

85RISCO

abrir ↗

Referência✓ VexDay Proof

Discuz! 6.0.1 - 'searchid' SQL Injection

CVE-2008-3554—webappsphp

SQL injection vulnerability in index.php in Discuz! 6.0.1 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2017-9554

CVE-2017-9554—

An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allo

60RISCO

abrir ↗

Referência✓ VexDay Proof

Cisco WebEx Meeting Manager UCF - 'atucfobj.dll' ActiveX Remote Buffer Overflow

CVE-2008-3558—remotewindows

Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before

50RISCO

abrir ↗

Referência

CVE-2008-6515

CVE-2008-6515—

Cross-site scripting (XSS) vulnerability in Fritz Berger yet another php photo album - next generation (yappa-ng) allows

23RISCO

abrir ↗

Referência

CVE-2012-1775

CVE-2012-1775—

Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code

50RISCO

abrir ↗

Referência

CVE-2023-40044

CVE-2023-40044CRITICALsob ataqueransomware

WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability

100RISCO

abrir ↗

Referência✓ VexDay Proof

ABG Blocking Script 1.0a - 'abg_path' Remote File Inclusion

CVE-2008-3570—webappsphp

PHP remote file inclusion vulnerability in index.php in Africa Be Gone (ABG) 1.0a allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2020-17463

CVE-2020-17463CRITICALsob ataque

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.

100RISCO

abrir ↗

Referência

CVE-2017-8464

CVE-2017-8464HIGHsob ataque

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201

100RISCO

abrir ↗

Referência

CVE-2017-8464

CVE-2017-8464HIGHsob ataque

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201

100RISCO

abrir ↗

Referência✓ VexDay Proof

k-links directory - SQL Injection / Cross-Site Scripting

CVE-2008-3580—webappsphp

Multiple SQL injection vulnerabilities in Qsoft K-Links allow remote attackers to execute arbitrary SQL commands via (1)

23RISCO

abrir ↗

Referência

CVE-2019-12725

CVE-2019-12725—

Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web ap

60RISCO

abrir ↗

Referência✓ VexDay Proof

μTorrent (uTorrent) 1.6 build 474 - 'announce' Key Remote Heap Overflow

CVE-2007-0927—remotewindows

Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a c

35RISCO

abrir ↗

Referência✓ VexDay Proof

Total Video Player 1.20 - '.m3u' File Local Stack Buffer Overflow

CVE-2007-0949—localwindows

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers t

28RISCO

abrir ↗

Referência✓ VexDay Proof

Jupiter CMS 1.1.5 - Arbitrary File Upload

CVE-2007-0972—webappsphp

Unrestricted file upload vulnerability in modules/emoticons.php in Jupiter CMS 1.1.5 allows remote attackers to upload a

23RISCO

abrir ↗

Referência✓ VexDay Proof

ActSoft DVD-Tools - 'dvdtools.ocx' Remote Buffer Overflow

CVE-2007-0976—remotewindows

Buffer overflow in the ActSoft DVD-Tools ActiveX control (dvdtools.ocx) allows remote attackers to execute arbitrary cod

23RISCO

abrir ↗

Referência

CVE-2012-1784

CVE-2012-1784—

SQL injection vulnerability in MyJobList 0.1.3 allows remote attackers to execute arbitrary SQL commands via the eid par

23RISCO

abrir ↗

Referência

CVE-2017-3599

CVE-2017-3599—

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions t

45RISCO

abrir ↗

Referência

CVE-2018-11776

CVE-2018-11776HIGHsob ataque

Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN

100RISCO

abrir ↗

Referência

CVE-2017-0146

CVE-2017-0146HIGHsob ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

abrir ↗

Referência✓ VexDay Proof

k-links directory - SQL Injection / Cross-Site Scripting

CVE-2008-3581—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in Qsoft K-Links allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.