Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

22.492 exploits

Referência

CVE-2026-14603

CVE-2026-14603HIGH

WowOptin < 1.4.38 - Unauthenticated Opt-in Deactivation and Template Row Injection

41RISCO

abrir ↗

Referência✓ VexDay Proof

SAP MaxDB 7.6.03.07 - Remote Command Execution

CVE-2008-0244—remotemultiple

SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell me

60RISCO

abrir ↗

Referência

CVE-2019-1622

CVE-2019-1622MEDIUM

Cisco Data Center Network Manager Information Disclosure Vulnerability

70RISCO

abrir ↗

Referência

CVE-2019-1622

CVE-2019-1622MEDIUM

Cisco Data Center Network Manager Information Disclosure Vulnerability

70RISCO

abrir ↗

Referência

CVE-2017-17692

CVE-2017-17692—

Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive informat

60RISCO

abrir ↗

Referência

CVE-2017-17692

CVE-2017-17692—

Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive informat

60RISCO

abrir ↗

Referência✓ VexDay Proof

Squid < 3.1 5 - HTTP Version Number Parsing Denial of Service

CVE-2009-0478—dosmultiple

Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service v

45RISCO

abrir ↗

Referência✓ VexDay Proof

Audacity 1.2.6 - '.gro' Local Buffer Overflow (PoC)

CVE-2009-0490—doswindows

Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacit

28RISCO

abrir ↗

Referência

CVE-2020-6418

CVE-2020-6418HIGHsob ataque

Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corru

100RISCO

abrir ↗

Referência✓ VexDay Proof

ItCMS 2.1a - Authentication Bypass

CVE-2009-0493—webappsphp

SQL injection vulnerability in login.php in IT!CMS 2.1a and earlier allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2024-23897

CVE-2024-23897CRITICALsob ataqueransomware

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RISCO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft Template Seller Pro 3.25 - Remote Code Execution

CVE-2007-2777—webappsphp

Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Portfol 1.2 - 'vcatid' SQL Injection

CVE-2009-0494—webappsphp

SQL injection vulnerability in the Portfol (com_portfol) 1.2 component for Joomla! allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Libstats 1.0.3 - 'template_csv.php' Remote File Inclusion

CVE-2007-2779—webappsphp

PHP remote file inclusion vulnerability in template_csv.php in Libstats 1.0.3 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

LeadTools Thumbnail Browser Control - 'lttmb14E.ocx' Remote Buffer Overflow

CVE-2007-2787—remotewindows

Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in Lea

23RISCO

abrir ↗

Referência✓ VexDay Proof

Realtor 747 - 'define.php?INC_DIR' Remote File Inclusion

CVE-2009-0495—webappsphp

PHP remote file inclusion vulnerability in include/define.php in REALTOR 747 4.11 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Virtual Guestbook 2.1 - Remote Database Disclosure

CVE-2009-0498—webappsasp

Virtual GuestBook (vgbook) 2.1 stores sensitive information under the web root with insufficient access control, which a

23RISCO

abrir ↗

Referência✓ VexDay Proof

webframe 0.76 - Multiple File Inclusions

CVE-2009-0513—webappsphp

Multiple PHP remote file inclusion vulnerabilities in WebFrame 0.76 allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASPThai.Net WebBoard 6.0 - SQL Injection

CVE-2009-0703—webappsphp

SQL injection vulnerability in bview.asp in ASPThai.Net Webboard 6.0 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência

CVE-2019-9851

CVE-2019-9851—

LibreLogo global-event script execution

60RISCO

abrir ↗

Referência

CVE-2019-16113

CVE-2019-16113—

Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .j

60RISCO

abrir ↗

Referência✓ VexDay Proof

TROforum 0.1 - 'admin.php?site_url' Remote File Inclusion

CVE-2007-2937—webappsphp

PHP remote file inclusion vulnerability in admin/admin.php in TROforum 0.1 allows remote attackers to execute arbitrary

35RISCO

abrir ↗

Referência✓ VexDay Proof

WSN Guest 1.23 - 'Search' SQL Injection

CVE-2009-0704—webappsphp

SQL injection vulnerability in search.php in WSN Guest 1.23 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

HP Data Protector 4.00-SP1b43064 - Remote Memory Leak/Denial of Service

CVE-2009-0714—doswindows

Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express

35RISCO

abrir ↗

Referência✓ VexDay Proof

HP Data Protector 4.00-SP1b43064 - Remote Memory Leak/Denial of Service (Metasploit)

CVE-2009-0714—doswindows

Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express

35RISCO

abrir ↗

Referência✓ VexDay Proof

Free Arcade Script 1.0 - Local File Inclusion Command Execution

CVE-2009-0731—webappsphp

Directory traversal vulnerability in pages/play.php in Free Arcade Script 1.0 allows remote attackers to include and exe

23RISCO

abrir ↗

Referência

CVE-2009-2573

CVE-2009-2573—

Multiple SQL injection vulnerabilities in MiniTwitter 0.2 beta, when magic_quotes_gpc is disabled, allow remote authenti

23RISCO

abrir ↗

Referência

CVE-2016-0854

CVE-2016-0854—

Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess

60RISCO

abrir ↗

Referência

CVE-2018-15877

CVE-2018-15877—

The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell meta

60RISCO

abrir ↗

Referência

CVE-2018-15877

CVE-2018-15877—

The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell meta

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.