Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.647exploits catalogados

34.986CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2012-3569

CVE-2012-3569—

Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Pl

50RISCO

abrir ↗

Referência

CVE-2013-2094

CVE-2013-2094HIGHsob ataque

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data t

83RISCO

abrir ↗

Referência

CVE-2013-2094

CVE-2013-2094HIGHsob ataque

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data t

83RISCO

abrir ↗

Referência

CVE-2018-1000811

CVE-2018-1000811—

bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages

35RISCO

abrir ↗

Referência

CVE-2015-3093

CVE-2015-3093—

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460

35RISCO

abrir ↗

Referência

CVE-2018-8544

CVE-2018-8544—

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows

35RISCO

abrir ↗

Referência

CVE-2011-5130

CVE-2011-5130—

dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers t

50RISCO

abrir ↗

Referência

CVE-2025-32463

CVE-2025-32463CRITICALsob ataque

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RISCO

abrir ↗

Referência✓ VexDay Proof

Softbiz Classifieds PLUS - 'id' SQL Injection

CVE-2007-5122—webappsphp

SQL injection vulnerability in store_info.php in SoftBiz Classifieds PLUS allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Novus 1.0 - 'notas.asp?nota_id' SQL Injection

CVE-2007-5123—webappsasp

SQL injection vulnerability in notas.asp in Novus 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

ActiveKB KnowledgeBase 2.x - 'catId' SQL Injection

CVE-2007-5131—webappsphp

SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

SyntaxCMS 1.3 - 'FCKeditor' Arbitrary File Upload

CVE-2007-5156—webappsphp

Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3.

23RISCO

abrir ↗

Referência✓ VexDay Proof

actSite 1.56 - 'news.php' Local File Inclusion

CVE-2007-5174—webappsphp

Directory traversal vulnerability in phpinc/news.php in actSite 1.56 allows remote attackers to include and execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component Mambads 1.5 - SQL Injection

CVE-2007-5177—webappsphp

SQL injection vulnerability in index.php in the MambAds (com_mambads) 1.5 and earlier component for Mambo allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

smbftpd 0.96 - SMBDirList-function Remote Format String

CVE-2007-5184—remotelinux

Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute a

28RISCO

abrir ↗

Referência✓ VexDay Proof

CyberLink PowerDVD - CreateNewFile Remote Rewrite Denial of Service

CVE-2007-5219—doswindows

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLA

28RISCO

abrir ↗

Referência

CVE-2007-5225

CVE-2007-5225—

Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Solaris 8/9/10 - 'fifofs I_PEEK' Local Kernel Memory Leak

CVE-2007-5225—localsolaris

Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zomplog 3.8.1 - Arbitrary File Upload

CVE-2007-5230—webappsphp

admin/upload_files.php in Zomplog 3.8.1 and earlier does not check for administrative credentials, which allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zomplog 3.8.1 - Arbitrary File Upload

CVE-2007-5231—webappsphp

Unrestricted file upload vulnerability in admin/upload_files.php in Zomplog 3.8.1 and earlier allows remote authenticate

23RISCO

abrir ↗

Referência✓ VexDay Proof

Web Template Management System 1.3 - SQL Injection

CVE-2007-5233—webappsphp

SQL injection vulnerability in index.php in Web Template Management System 1.3 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ossigeno CMS 2.2a3 - 'footer.php' Remote File Inclusion

CVE-2007-5234—webappsphp

PHP remote file inclusion vulnerability in upload/common/footer.php in Ossigeno CMS 2.2 alpha3 allows remote attackers t

35RISCO

abrir ↗

Referência✓ VexDay Proof

DM FileManager 3.9.2 - Authentication Bypass

CVE-2009-1741—webappsphp

Multiple SQL injection vulnerabilities in login.php in DM FileManager 3.9.2, when magic_quotes_gpc is disabled, allow re

23RISCO

abrir ↗

Referência✓ VexDay Proof

DGNews 3.0 Beta - 'id' SQL Injection

CVE-2009-1746—webappsphp

SQL injection vulnerability in berita.php in Dian Gemilang DGNews 3.0 Beta allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

jetAudio 7.x - ActiveX 'DownloadFromMusicStore()' Code Execution

CVE-2007-4983—remotewindows

Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in jetAudio 7.0.3 Basic an

35RISCO

abrir ↗

Referência✓ VexDay Proof

FSFDT v3.000 d9 - 'HELP' Remote Buffer Overflow

CVE-2007-5256—remotewindows

Multiple stack-based buffer overflows in FSD 2.052 d9 and earlier, and FSFDT FSD 3.000 d9 and earlier, allow (1) remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Trionic Cite CMS 1.2rev9 - Remote File Inclusion

CVE-2007-5271—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Trionic Cite CMS 1.2 rev9 and earlier allow remote attackers to ex

28RISCO

abrir ↗

Referência

CVE-2013-2010

CVE-2013-2010—

WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability

60RISCO

abrir ↗

Referência✓ VexDay Proof

Furkan Tastan Blog - SQL Injection

CVE-2007-5272—webappsasp

SQL injection vulnerability in kategori.asp in Furkan Tastan Blog allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zomplog 3.8.1 - Arbitrary File Upload

CVE-2007-5278—webappsphp

Zomplog 3.8.1 and earlier stores potentially sensitive information under the web root with insufficient access control,

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.