Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

22.910 exploits

Referência✓ VexDay Proof

E-topbiz Dating 3 PHP Script - 'mail_id' SQL Injection

CVE-2008-3490—webappsphp

SQL injection vulnerability in members/mail.php in E-topbiz Online Dating 3 1.0 allows remote authenticated users to exe

23RISCO

abrir ↗

Referência

CVE-2020-8816

CVE-2020-8816CRITICALsob ataque

Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static l

100RISCO

abrir ↗

Referência

CVE-2020-8816

CVE-2020-8816CRITICALsob ataque

Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static l

100RISCO

abrir ↗

Referência✓ VexDay Proof

Mercury/32 Mail Server 4.01 - 'Pegasus' IMAP Buffer Overflow (3)

CVE-2004-2513—remotewindows

Buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Scripts24 iPost 1.0.1 - 'id' SQL Injection

CVE-2008-3491—webappsphp

SQL injection vulnerability in go.php in Scripts24 iPost 1.0.1 and iTGP 1.0.4 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

QMail Mailing List Manager 1.2 - Database Disclosure

CVE-2008-5606—webappsasp

Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control,

23RISCO

abrir ↗

Referência

CVE-2019-6249

CVE-2019-6249—

An issue was discovered in HuCart v5.7.4. There is a CSRF vulnerability that can add an admin account via /adminsys/inde

23RISCO

abrir ↗

Referência

CVE-2019-8926

CVE-2019-8926—

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zon

23RISCO

abrir ↗

Referência

CVE-2019-8928

CVE-2019-8928—

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in /netflow/jspui/userMan

23RISCO

abrir ↗

Referência✓ VexDay Proof

BlueBird Pre-Release - Authentication Bypass

CVE-2009-0740—webappsphp

SQL injection vulnerability in login.php in BlueBird Prelease allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

smNews 1.0 - Authentication Bypass / Column Truncation

CVE-2009-0750—webappsphp

SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to ex

23RISCO

abrir ↗

Referência

CVE-2014-5005

CVE-2014-5005—

Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers

60RISCO

abrir ↗

Referência

CVE-2017-1000117

CVE-2017-1000117—

A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL ca

60RISCO

abrir ↗

Referência

CVE-2019-12840

CVE-2019-12840—

In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root pr

60RISCO

abrir ↗

Referência✓ VexDay Proof

Scripts24 iTGP 1.0.4 - 'id' SQL Injection

CVE-2008-3491—webappsphp

SQL injection vulnerability in go.php in Scripts24 iPost 1.0.1 and iTGP 1.0.4 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

RealVNC Windows Client 4.1.2 - Remote Denial of Service Crash (PoC)

CVE-2008-3493—doswindows

vncviewer.exe in RealVNC Windows Client 4.1.2.0 allows remote VNC servers to cause a denial of service (application cras

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyPHP CMS 0.3.1 - 'pid' SQL Injection

CVE-2008-3497—webappsphp

SQL injection vulnerability in pages.php in MyPHP CMS 0.3.1 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência

CVE-2020-8012

CVE-2020-8012—

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerabi

60RISCO

abrir ↗

Referência

CVE-2020-8012

CVE-2020-8012—

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerabi

60RISCO

abrir ↗

Referência✓ VexDay Proof

polypager 1.0rc2 - SQL Injection / Cross-Site Scripting

CVE-2008-3505—webappsphp

Cross-site scripting (XSS) vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to inject arbitrary we

23RISCO

abrir ↗

Referência✓ VexDay Proof

AdminBot 9.0.5 - 'live_status.lib.php' Remote File Inclusion

CVE-2007-2986—webappsphp

PHP remote file inclusion vulnerability in lib/live_status.lib.php in AdminBot MX 9.0.5 allows remote attackers to execu

35RISCO

abrir ↗

Referência

CVE-2012-4267

CVE-2012-4267—

Cross-site scripting (XSS) vulnerability in user/register in Sockso 1.5 and earlier allows remote attackers to inject ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

LiteNews 0.1 - 'id' SQL Injection

CVE-2008-3507—webappsphp

SQL injection vulnerability in index.php in LiteNews 0.1 (aka 01), and possibly 1.2 and earlier, allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2019-6279

CVE-2019-6279—

ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect Access Control vulnera

23RISCO

abrir ↗

Referência

CVE-2018-9059

CVE-2018-9059—

Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code

60RISCO

abrir ↗

Referência

CVE-2018-9059

CVE-2018-9059—

Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code

60RISCO

abrir ↗

Referência✓ VexDay Proof

MDPro Module My_eGallery - 'pid' SQL Injection

CVE-2009-0728—webappsphp

SQL injection vulnerability in the My_eGallery module for MAXdev MDPro (MD-Pro) and Postnuke allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2009-2567

CVE-2009-2567—

SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 5.6.2 for Joomla! allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2017-0290

CVE-2017-0290—

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serve

45RISCO

abrir ↗

Referência

CVE-2012-4361

CVE-2012-4361—

lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to exe

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.