Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.107exploits catalogados

36.322CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

22.573 exploits

Referência✓ VexDay Proof

Joomla! Component Joomtracker 1.01 - SQL Injection

CVE-2008-6088—webappsphp

SQL injection vulnerability in the Joomtracker (com_joomtracker) 1.01 module for Joomla! allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

BMForum 5.6 - 'tagname' SQL Injection

CVE-2008-6091—webappsphp

SQL injection vulnerability in plugins.php in BMForum 5.6, when magic_quotes_gpc is disabled, allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2022-28810

CVE-2022-28810MEDIUMsob ataque

Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary

100RISCO

abrir ↗

Referência

CVE-2016-7288

CVE-2016-7288—

The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

45RISCO

abrir ↗

Referência✓ VexDay Proof

phpscripts Ranking Script - Insecure Cookie Handling

CVE-2008-6092—webappsphp

phpscripts Ranking Script allows remote attackers to bypass authentication and gain administrative access by sending an

23RISCO

abrir ↗

Referência✓ VexDay Proof

Noname CMS 1.0 - Multiple SQL Injections

CVE-2008-6093—webappsphp

SQL injection vulnerability in index.php in Noname CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2017-8634

CVE-2017-8634—

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current u

45RISCO

abrir ↗

Referência

CVE-2012-4869

CVE-2012-4869—

The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attacke

60RISCO

abrir ↗

Referência

CVE-2012-4869

CVE-2012-4869—

The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attacke

60RISCO

abrir ↗

Referência✓ VexDay Proof

Discussion Forums 2k 3.3 - Multiple SQL Injections

CVE-2008-6100—webappsphp

Multiple SQL injection vulnerabilities in Discussion Forums 2k 3.3, when magic_quotes_gpc is disabled, allow remote atta

23RISCO

abrir ↗

Referência

CVE-2021-2109

CVE-2021-2109HIGH

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

63RISCO

abrir ↗

Referência

CVE-2015-4495

CVE-2015-4495HIGHsob ataque

The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote

98RISCO

abrir ↗

Referência

CVE-2009-2847

CVE-2009-2847—

The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when runnin

23RISCO

abrir ↗

Referência

CVE-2021-45010

CVE-2021-45010—

A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7

45RISCO

abrir ↗

Referência

CVE-2008-6104

CVE-2008-6104—

SQL injection vulnerability in A4Desk PHP Event Calendar allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência✓ VexDay Proof

ZeroShell 1.0beta11 - Remote Code Execution

CVE-2009-0545—remotehardware

cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell meta

60RISCO

abrir ↗

Referência✓ VexDay Proof

e107 Plugin ZoGo-Shop 1.15.4 - 'product' SQL Injection

CVE-2008-6114—webappsphp

SQL injection vulnerability in product_details.php in the Mytipper Zogo-shop 1.15.4 plugin for e107 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Thyme 1.0 - SQL Injection

CVE-2008-6116—webappsphp

SQL injection vulnerability in the EXtrovert Software Thyme (com_thyme) 1.0 component for Joomla! allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2018-8291

CVE-2018-8291—

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft brow

45RISCO

abrir ↗

Referência

CVE-2018-8288

CVE-2018-8288—

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft brow

45RISCO

abrir ↗

Referência✓ VexDay Proof

Goople CMS 1.7 - Insecure Cookie Handling

CVE-2008-6118—webappsphp

win/content/upload.php in Goople CMS 1.7 allows remote attackers to bypass authentication and gain administrative access

23RISCO

abrir ↗

Referência

CVE-2019-7257

CVE-2019-7257—

Linear eMerge E3-Series devices allow Unrestricted File Upload.

35RISCO

abrir ↗

Referência

CVE-2016-0185

CVE-2016-0185HIGHsob ataque

Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary

83RISCO

abrir ↗

Referência

CVE-2021-32682

CVE-2021-32682CRITICAL

Multiple vulnerabilities leading to RCE

75RISCO

abrir ↗

Referência

CVE-2015-5082

CVE-2015-5082—

Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW

50RISCO

abrir ↗

Referência

CVE-2015-5082

CVE-2015-5082—

Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW

50RISCO

abrir ↗

Referência

CVE-2015-5082

CVE-2015-5082—

Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW

50RISCO

abrir ↗

Referência

CVE-2015-5082

CVE-2015-5082—

Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW

50RISCO

abrir ↗

Referência

CVE-2014-8517

CVE-2014-8517—

The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 thro

50RISCO

abrir ↗

Referência

CVE-2016-1106

CVE-2016-1106—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.