Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

22.492 exploits

Referência✓ VexDay Proof

elvin bts 1.2.0 - Multiple Vulnerabilities

CVE-2009-2124—webappsphp

Directory traversal vulnerability in page.php in Elvin 1.2.0 allows remote attackers to include and execute arbitrary lo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component EventList 0.8 - 'did' SQL Injection

CVE-2007-4509—webappsphp

SQL injection vulnerability in index.php in the EventList component (com_eventlist) 0.8 and earlier for Joomla! allows r

23RISCO

abrir ↗

Referência

CVE-2009-3330

CVE-2009-3330—

SQL injection vulnerability in index.php in cP Creator 2.7.1, when magic_quotes_gpc is disabled, allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2015-3080

CVE-2015-3080—

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows

35RISCO

abrir ↗

Referência

CVE-2015-4074

CVE-2015-4074—

Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read ar

50RISCO

abrir ↗

Referência

CVE-2015-4074

CVE-2015-4074—

Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read ar

50RISCO

abrir ↗

Referência

CVE-2013-0249

CVE-2013-0249—

Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7

28RISCO

abrir ↗

Referência

CVE-2016-0784

CVE-2016-0784—

Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1

35RISCO

abrir ↗

Referência

CVE-2016-0784

CVE-2016-0784—

Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1

35RISCO

abrir ↗

Referência★ 19

watchtowrlabs/watchTowr-vs-FortiSIEM-CVE-2025-25256

CVE-2025-25256CRITICAL

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vul

75RISCO

abrir ↗

Referência

CVE-2015-0313

CVE-2015-0313HIGHsob ataque

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows

100RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows - GDI Image Parsing Stack Overflow (MS08-021)

CVE-2008-1087—localwindows

Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 200

35RISCO

abrir ↗

Referência✓ VexDay Proof

iDB 0.2.5pa SVN 243 - 'skin' Local File Inclusion

CVE-2009-1498—webappsphp

Directory traversal vulnerability in inc/profilemain.php in Game Maker 2k Internet Discussion Boards (iDB) 0.2.5 Pre-Alp

23RISCO

abrir ↗

Referência

CVE-2017-6019

CVE-2017-6019—

An issue was discovered in Schneider Electric Conext ComBox, model 865-1058, all firmware versions prior to V3.03 BN 830

35RISCO

abrir ↗

Referência✓ VexDay Proof

eLitius 1.0 - 'banner-details.php?id' SQL Injection

CVE-2009-1506—webappsphp

SQL injection vulnerability in classes/Xp.php in eLitius 1.0 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

Firefox ESR 115.11 - PDF.js Arbitrary JavaScript execution

CVE-2024-4367MEDIUMremotemultiple

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js c

55RISCO

abrir ↗

Referência✓ VexDay Proof

X-Forum 0.6.2 - Remote Command Execution

CVE-2009-1508—webappsphp

SQL injection vulnerability in the xforum_validateUser function in Common.php in X-Forum 0.6.2 allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2009-2308

CVE-2009-2308—

Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation (aka Affiliates) module 1.1.0 and earlier fo

23RISCO

abrir ↗

Referência

CVE-2019-5825

CVE-2019-5825MEDIUMsob ataque

Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploi

90RISCO

abrir ↗

Referência

CVE-2009-3334

CVE-2009-3334—

SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component (aka JINC or com_jin

23RISCO

abrir ↗

Referência

CVE-2017-8635

CVE-2017-8635—

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve

35RISCO

abrir ↗

Referência

CVE-2018-0935

CVE-2018-0935—

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Se

35RISCO

abrir ↗

Referência

CVE-2019-11708

CVE-2019-11708CRITICALsob ataque

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result

90RISCO

abrir ↗

Referência

CVE-2019-7255

CVE-2019-7255—

Linear eMerge E3-Series devices allow XSS.

50RISCO

abrir ↗

Referência✓ VexDay Proof

Focus/SIS 1.0/2.2 - Remote File Inclusion

CVE-2007-4807—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Focus/SIS 2.2 allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência

CVE-2009-2392

CVE-2009-2392—

SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft SQL Server - Distributed Management Objects Buffer Overflow

CVE-2007-4814—remotewindows

Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.200

35RISCO

abrir ↗

Referência

CVE-2013-0807

CVE-2013-0807—

Cross-site scripting (XSS) vulnerability in the NewSectionPrompt function in include/tool/editing_page.php in gpEasy CMS

23RISCO

abrir ↗

Referência

CVE-2013-0928

CVE-2013-0928—

The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote

50RISCO

abrir ↗

Referência

CVE-2013-1080

CVE-2013-1080—

The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform a

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.