Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.107exploits catalogados

36.322CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

22.573 exploits

Referência✓ VexDay Proof

Active Business Directory 2 - Blind SQL Injection

CVE-2008-5972—webappsphp

SQL injection vulnerability in default.asp in Active Business Directory 2 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2014-4880

CVE-2014-4880—

Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote atta

60RISCO

abrir ↗

Referência✓ VexDay Proof

Active Web Mail 4 - Authentication Bypass

CVE-2008-5973—webappsasp

SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active Price Comparison 4 - Authentication Bypass

CVE-2008-5974—webappsasp

Multiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2025-34299

CVE-2025-34299CRITICAL

Monsta FTP <= 2.11 Unauthenticated Arbitrary File Upload

85RISCO

abrir ↗

Referência✓ VexDay Proof

Ocean12 Mailing List Manager Gold - File Disclosure / SQL Injection / Cross-Site Scripting

CVE-2008-5978—webappsphp

Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2017-16709

CVE-2017-16709—

Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote

60RISCO

abrir ↗

Referência

CVE-2017-8540

CVE-2017-8540HIGHsob ataque

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serve

93RISCO

abrir ↗

Referência

CVE-2013-3623

CVE-2013-3623—

Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Managemen

60RISCO

abrir ↗

Referência

CVE-2010-2263

CVE-2010-2263—

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or

60RISCO

abrir ↗

Referência✓ VexDay Proof

Jetik Emlak ESA 2.0 - Multiple SQL Injections

CVE-2008-5992—webappsphp

Multiple SQL injection vulnerabilities in Jetik Emlak Sistem A (ESA) 2.0 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2019-0568

CVE-2019-0568—

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

35RISCO

abrir ↗

Referência

CVE-2012-0209

CVE-2012-0209—

Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November

60RISCO

abrir ↗

Referência

CVE-2024-25735

CVE-2024-25735CRITICAL

An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext password

75RISCO

abrir ↗

Referência

CVE-2016-1543

CVE-2016-1543—

The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux a

60RISCO

abrir ↗

Referência

CVE-2016-1543

CVE-2016-1543—

The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux a

60RISCO

abrir ↗

Referência

CVE-2016-1543

CVE-2016-1543—

The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux a

60RISCO

abrir ↗

Referência

CVE-2024-12084

CVE-2024-12084CRITICAL

Rsync: heap buffer overflow in rsync due to improper checksum length handling

70RISCO

abrir ↗

Referência

CVE-2019-6453

CVE-2019-6453—

mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The a

35RISCO

abrir ↗

Referência

CVE-2010-3973

CVE-2010-3973—

The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in

60RISCO

abrir ↗

Referência

CVE-2015-2845

CVE-2015-2845—

The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arb

60RISCO

abrir ↗

Referência

CVE-2015-2845

CVE-2015-2845—

The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arb

60RISCO

abrir ↗

Referência

CVE-2011-0267

CVE-2011-0267—

Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remote at

60RISCO

abrir ↗

Referência

CVE-2014-9727

CVE-2014-9727—

AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter t

60RISCO

abrir ↗

Referência

CVE-2019-19509

CVE-2019-19509—

An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a

60RISCO

abrir ↗

Referência

CVE-2019-19509

CVE-2019-19509—

An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a

60RISCO

abrir ↗

Referência

CVE-2017-8641

CVE-2017-8641—

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve

45RISCO

abrir ↗

Referência

Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE

CVE-2025-24514HIGHremotemultiple

ingress-nginx controller - configuration injection via unsanitized auth-url annotation

68RISCO

abrir ↗

Referência✓ VexDay Proof

webcp 0.5.7 - 'filelocation' Remote File Disclosure

CVE-2008-6002—webappsphp

Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when register_globals is enabled, allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

SuperCali PHP Event Calendar 0.4.0 - SQL Injection

CVE-2007-3582—webappsphp

SQL injection vulnerability in index.php in SuperCali PHP Event Calendar 0.4.0 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.