Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.151exploits catalogados

35.370CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8.617Nuclei 4.257Metasploit 3.474✓ só verificadosrecentes populares risco

22.233 exploits

Referência✓ VexDay Proof

MoinMoin 1.5.x - 'MOIND_ID' Cookie Login Bypass

CVE-2008-0782—webappsphp

Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via

28RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Live! 3.2.2 - 'questid' SQL Injection (1)

CVE-2008-0821—webappsphp

SQL injection vulnerability in admin/traffic/knowledge_searchm.php in OSI Codes Inc. PHP Live! 3.2.2 allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple CMS 1.0.3 - 'area' SQL Injection

CVE-2008-0835—webappsphp

SQL injection vulnerability in indexen.php in Simple CMS 1.0.3 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_clasifier - 'cat_id' SQL Injection

CVE-2008-0842—webappsphp

SQL injection vulnerability in index.php in the Classifier (com_clasifier) component for Joomla! allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_pccookbook - 'user_id' SQL Injection

CVE-2008-0844—webappsphp

SQL injection vulnerability in index.php in the PccookBook (com_pccookbook) component for Joomla! allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Now SMS/Mms Gateway 5.5 - Remote Buffer Overflow

CVE-2008-0871—remotewindows

Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute ar

50RISCO

abrir ↗

Referência

CVE-2010-2334

CVE-2010-2334—

Directory traversal vulnerability in themes/default/download.php in Yamamah Photo Gallery 1.00, as distributed before 20

23RISCO

abrir ↗

Referência

CVE-2010-2358

CVE-2010-2358—

PHP remote file inclusion vulnerability in modules/catalog/upload_photo.php in Nakid CMS 0.5.2, when magic_quotes_gpc is

23RISCO

abrir ↗

Referência

CVE-2010-2458

CVE-2010-2458—

Cross-site scripting (XSS) vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2010-2461

CVE-2010-2461—

SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2010-2461

CVE-2010-2461—

SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2010-2464

CVE-2010-2464—

Multiple cross-site scripting (XSS) vulnerabilities in the RSComments (com_rscomments) component 1.0.0 Rev 2 for Joomla!

23RISCO

abrir ↗

Referência

CVE-2021-42237

CVE-2021-42237CRITICALsob ataqueransomware

Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it

100RISCO

abrir ↗

Referência✓ VexDay Proof

PORAR WebBoard - 'question.asp' SQL Injection

CVE-2008-1039—webappsasp

SQL injection vulnerability in question.asp in PORAR WEBBOARD allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2016-1102

CVE-2016-1102—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RISCO

abrir ↗

Referência

CVE-2016-1103

CVE-2016-1103—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RISCO

abrir ↗

Referência

CVE-2016-1104

CVE-2016-1104—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RISCO

abrir ↗

Referência

CVE-2010-0796

CVE-2010-0796—

SQL injection vulnerability in the JE Quiz (com_jequizmanagement) component 1.b01 for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2010-0796

CVE-2010-0796—

SQL injection vulnerability in the JE Quiz (com_jequizmanagement) component 1.b01 for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2023-22515

CVE-2023-22515CRITICALsob ataqueransomware

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RISCO

abrir ↗

Referência

CVE-2018-7602

CVE-2018-7602CRITICALsob ataqueransomware

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

100RISCO

abrir ↗

Referência

CVE-2016-1105

CVE-2016-1105—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RISCO

abrir ↗

Referência✓ VexDay Proof

DESlock+ < 3.2.6 - Local Kernel Ring0 link list zero SYSTEM

CVE-2008-1139—localwindows

DESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain

23RISCO

abrir ↗

Referência✓ VexDay Proof

DESlock+ < 3.2.6 - 'DLMFDISK.sy's Local kernel Ring0 SYSTEM

CVE-2008-1140—localwindows

DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier allows local users to gain privileges via a certain DLKFDISK_IOCTL r

23RISCO

abrir ↗

Referência✓ VexDay Proof

DESlock+ < 3.2.6 - 'LIST' Local Kernel Memory Leak

CVE-2008-1141—localwindows

Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (kerne

23RISCO

abrir ↗

Referência

CVE-2020-10199

CVE-2020-10199HIGHsob ataque

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).

100RISCO

abrir ↗

Referência

CVE-2020-10199

CVE-2020-10199HIGHsob ataque

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).

100RISCO

abrir ↗

Referência

CVE-2010-0804

CVE-2010-0804—

Cross-site scripting (XSS) vulnerability in index.php in iBoutique 4.0 allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Referência

CVE-2017-8678

CVE-2017-8678—

The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpArcadeScript 3.0RC2 - 'userid' SQL Injection

CVE-2008-1163—webappsphp

SQL injection vulnerability in index.php in phpArcadeScript 1.0 through 3.0 RC2 allows remote attackers to execute arbit

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.