Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.533exploits catalogados

35.607CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8.663Nuclei 4.287Metasploit 3.474✓ só verificadosrecentes populares risco

22.407 exploits

Referência✓ VexDay Proof

Creative Software AutoUpdate Engine - ActiveX Stack Overflow

CVE-2008-0955—remotewindows

Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote atta

50RISCO

abrir ↗

Referência✓ VexDay Proof

SNMPv3 - HMAC Validation error Remote Authentication Bypass

CVE-2008-0960—remotemultiple

SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-S

35RISCO

abrir ↗

Referência✓ VexDay Proof

AuraCMS 2.2.1 - 'X-Forwarded-For' HTTP Header Blind SQL Injection

CVE-2008-1398—webappsphp

SQL injection vulnerability in online.php in AuraCMS 2.0 through 2.2.1 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

MG-SOFT Net Inspector 6.5.0.828 - Multiple Vulnerabilities

CVE-2008-1402—remotewindows

MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a (1) denial of service (except

23RISCO

abrir ↗

Referência✓ VexDay Proof

eXV2 Module Viso 2.0.4.3 - 'kid' SQL Injection

CVE-2008-1404—webappsphp

SQL injection vulnerability in index.php in the Viso (Industry Book) 2.04 and 2.03 module for eXV2 allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

acronis pxe server 2.0.0.1076 - Directory Traversal / Null Pointer

CVE-2008-1410—remotewindows

Directory traversal vulnerability in the PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpAuction GPL Enhanced 2.51 - Multiple Remote File Inclusions

CVE-2008-1416—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote attackers to execute arbitrary PH

35RISCO

abrir ↗

Referência✓ VexDay Proof

Easy-Clanpage 2.2 - 'id' SQL Injection

CVE-2008-1425—webappsphp

SQL injection vulnerability in index.php in the gallery module in Easy-Clanpage 2.2 allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2018-4404

CVE-2018-4404HIGH

In iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was addressed with improve

61RISCO

abrir ↗

Referência

CVE-2026-14574

CVE-2026-14574MEDIUM

In Eclipse Theia versions 0.7.0 and up until including 1.73.1, the `PreferenceUtils.merge` function in `@theia/core` rec

33RISCO

abrir ↗

Referência

CVE-2026-19006

CVE-2026-19006MEDIUM

mf-yang openclaw-cn Ggateway Exec Approval Flow bash-tools.exec.ts authorization

33RISCO

abrir ↗

Referência✓ VexDay Proof

BIND 9.x - Remote DNS Cache Poisoning

CVE-2008-1447—remotemultiple

The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windo

60RISCO

abrir ↗

Referência✓ VexDay Proof

RunCMS Module section - 'artid' SQL Injection

CVE-2008-1462—webappsphp

SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Home FTP Server 1.4.5 - Remote Denial of Service

CVE-2008-1478—doswindows

Home FTP Server 1.4.5.89 allows remote attackers to cause a denial of service (crash) by opening a FTP passive mode conn

23RISCO

abrir ↗

Referência✓ VexDay Proof

SunOS 5.10 Sun Cluster - 'rpc.metad' Denial of Service (PoC)

CVE-2008-1480—dossolaris

rpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service (daemon crash) via a malformed RPC requ

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASUS DPC Proxy 2.0.0.16/19 - Remote Buffer Overflow

CVE-2008-1491—remotewindows

Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 an

60RISCO

abrir ↗

Referência✓ VexDay Proof

PEEL CMS 3.x - Admin Hash Extraction / Arbitrary File Upload

CVE-2008-1495—webappsphp

Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote auth

23RISCO

abrir ↗

Referência✓ VexDay Proof

NetWin Surgemail 3.8k4-4 - IMAP (Authenticated) Remote LIST Universal

CVE-2008-1498—remotewindows

Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated user

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component custompages 1.1 - Remote File Inclusion

CVE-2008-1505—webappsphp

PHP remote file inclusion vulnerability in the SSTREAMTV custompages (com_custompages) 1.1 and earlier component for Joo

35RISCO

abrir ↗

Referência✓ VexDay Proof

Danneo CMS 0.5.1 - Blind SQL Injection

CVE-2008-1513—webappsphp

SQL injection vulnerability in index.php in Danneo CMS 0.5.1 and earlier, when the Referers statistics option is enabled

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke Platinum 7.6.b.5 - 'dynamic_titles.php' SQL Injection

CVE-2008-1539—webappsphp

SQL injection vulnerability in includes/dynamic_titles.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

RunCMS Module Photo 3.02 - 'cid' SQL Injection

CVE-2008-1551—webappsphp

SQL injection vulnerability in viewcat.php in the Photo 3.02 module for RunCMS allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

TopperMod 2.0 - SQL Injection

CVE-2008-1554—webappsphp

SQL injection vulnerability in account/index.php in TopperMod 2.0, when magic_quotes_gpc is disabled, allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

MPlayer 1.0 rc2 - 'sdpplin_parse()' Array Indexing Buffer Overflow (PoC)

CVE-2008-1558—doslinux

Uncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote att

28RISCO

abrir ↗

Referência

CVE-2026-67623

CVE-2026-67623HIGH

Mistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hook

41RISCO

abrir ↗

Referência

CVE-2026-67623

CVE-2026-67623HIGH

Mistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hook

41RISCO

abrir ↗

Referência

CVE-2026-66747

CVE-2026-66747CRITICAL

ENDLESSDOORS: Zbtlink Router rctl/kworker Phone-Home Root Implant

48RISCO

abrir ↗

Referência✓ VexDay Proof

PostNuke 0.764 - Blind SQL Injection

CVE-2008-1591—webappsphp

The pnVarPrepForStore function in PostNuke 0.764 and earlier skips input sanitization when magic_quotes_runtime is enabl

23RISCO

abrir ↗

Referência

CVE-2026-67181

CVE-2026-67181MEDIUM

Rouille 0.3.3 - 3.6.2 HTTP Request Smuggling via proxy Transfer-Encoding Header

33RISCO

abrir ↗

Referência

CVE-2026-18038

CVE-2026-18038MEDIUM

nextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosure

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.