Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.620exploits catalogados

35.647CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.429GitHub PoC 14.270VulnCheck XDB 8.693Nuclei 4.299Metasploit 3.474✓ só verificadosrecentes populares risco

22.429 exploits

Referência

CVE-2019-16662

CVE-2019-16662—

An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to a

60RISCO

abrir ↗

Referência

CVE-2022-33891

CVE-2022-33891HIGHsob ataque

Apache Spark shell command injection vulnerability via Spark UI

100RISCO

abrir ↗

Referência

CVE-2023-41892

CVE-2023-41892CRITICAL

Craft CMS Remote Code Execution vulnerability

85RISCO

abrir ↗

Referência

CVE-2019-15976

CVE-2019-15976CRITICAL

Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

70RISCO

abrir ↗

Referência

CVE-2022-21907

CVE-2022-21907CRITICAL

HTTP Protocol Stack Remote Code Execution Vulnerability

70RISCO

abrir ↗

Referência✓ VexDay Proof

HotScripts Clone - 'cid' SQL Injection

CVE-2008-6405—webappsphp

SQL injection vulnerability in showcategory.php in Hotscripts Clone allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ol BookMarks Manager 0.7.5 - Local File Inclusion / Remote File Inclusion / SQL Injection

CVE-2008-6408—webappsphp

PHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2012-1297

CVE-2012-1297—

Multiple cross-site request forgery (CSRF) vulnerabilities in main.php in Contao (formerly TYPOlight) 2.11.0 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ol BookMarks Manager 0.7.5 - Local File Inclusion / Remote File Inclusion / SQL Injection

CVE-2008-6409—webappsphp

SQL injection vulnerability in index.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2012-1297

CVE-2012-1297—

Multiple cross-site request forgery (CSRF) vulnerabilities in main.php in Contao (formerly TYPOlight) 2.11.0 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

AJ Auction Pro Platinum Skin - 'item_id' SQL Injection

CVE-2008-6414—webappsphp

SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Social Site Generator 2.0 - 'sgc_id' SQL Injection

CVE-2008-6419—webappsphp

Multiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0 allow remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Social Site Generator 2.0 - Multiple Remote File Disclosure Vulnerabilities

CVE-2008-6420—webappsphp

Social Site Generator (SSG) 2.0 allows remote attackers to read arbitrary files via the file parameter to (1) filedload.

23RISCO

abrir ↗

Referência

CVE-2022-40022

CVE-2022-40022CRITICAL

Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability.

85RISCO

abrir ↗

Referência

CVE-2023-23488

CVE-2023-23488CRITICAL

The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerabilit

85RISCO

abrir ↗

Referência

CVE-2021-40870

CVE-2021-40870CRITICALsob ataque

An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous

100RISCO

abrir ↗

Referência

CVE-2022-24706

CVE-2022-24706CRITICALsob ataque

Remote Code Execution Vulnerability in Packaging

100RISCO

abrir ↗

Referência✓ VexDay Proof

e107 Plugin BLOG Engine 2.2 - 'uid' SQL Injection

CVE-2008-6438—webappsphp

SQL injection vulnerability in macgurublog_menu/macgurublog.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

EasyMail - ActiveX 'emmailstore.dll 6.5.0.3' Remote Buffer Overflow

CVE-2008-6447—remotewindows

Buffer overflow in emmailstore.dll 6.5.0.3 in the QuikSoft EasyMail MailStore ActiveX control allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2020-1350

CVE-2020-1350CRITICALsob ataque

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RISCO

abrir ↗

Referência✓ VexDay Proof

jPORTAL 2 - 'humor.php' SQL Injection

CVE-2008-6451—webappsphp

SQL injection vulnerability in humor.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

TSplus 16.0.2.14 - Remote Access Insecure Files and Folders Permissions

CVE-2023-31067—remotewindows

An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on so

23RISCO

abrir ↗

Referência✓ VexDay Proof

Oceandir 2.9 - 'show_vote.php' SQL Injection

CVE-2008-6452—webappsphp

SQL injection vulnerability in show_vote.php in Oceandir 2.9 and earlier allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Diesel Pay Script - 'area' SQL Injection

CVE-2008-6468—webappsphp

SQL injection vulnerability in index.php in Diesel Pay allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

TSplus 16.0.0.0 - Remote Work Insecure Files and Folders

CVE-2023-31068—remotewindows

An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on so

23RISCO

abrir ↗

Referência✓ VexDay Proof

Plaincart 1.1.2 - 'p' SQL Injection

CVE-2008-6469—webappsphp

SQL injection vulnerability in index.php in PlainCart 1.1.2 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

easyLink 1.1.0 - 'detail.php' SQL Injection

CVE-2008-6471—webappsphp

SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hunkaray Duyuru Scripti - 'tr' SQL Injection

CVE-2007-0688—webappsasp

SQL injection vulnerability in oku.asp in Hunkaray Duyuru Scripti allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Blogator-script 0.95 - Change User Password

CVE-2008-6473—webappsphp

_blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary u

23RISCO

abrir ↗

Referência

Inosoft VisiWin 7 2022-2.1 - Insecure Folders Permissions

CVE-2023-31468HIGHlocalwindows

An issue was discovered in Inosoft VisiWin 7 through 2022-2.1 (Runtime RT7.3 RC3 20221209.5). The "%PROGRAMFILES(X86)%\I

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.