Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.107exploits catalogados

36.322CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

22.573 exploits

Referência

CVE-2022-22960

CVE-2022-22960HIGHsob ataque

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due t

98RISCO

abrir ↗

Referência

CVE-2022-22960

CVE-2022-22960HIGHsob ataque

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due t

98RISCO

abrir ↗

Referência✓ VexDay Proof

Sepcity Classified - 'ID' SQL Injection

CVE-2008-6150—webappsasp

SQL injection vulnerability in classdis.asp in SepCity Classified Ads allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sepcity Shopping Mall - SQL Injection

CVE-2008-6151—webappsasp

SQL injection vulnerability in shpdetails.asp in SepCity Shopping Mall allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2009-2926

CVE-2009-2926—

Multiple SQL injection vulnerabilities in PHP Competition System BETA 0.84 and earlier allow remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2018-8466

CVE-2018-8466—

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

35RISCO

abrir ↗

Referência✓ VexDay Proof

Sepcity Lawyer Portal - SQL Injection

CVE-2008-6152—webappsasp

SQL injection vulnerability in deptdisplay.asp in SepCity Faculty Portal allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência

CVE-2018-11646

CVE-2018-11646—

webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFavicon

50RISCO

abrir ↗

Referência

CVE-2018-10594

CVE-2018-10594—

Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPS

50RISCO

abrir ↗

Referência

CVE-2018-10594

CVE-2018-10594—

Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPS

50RISCO

abrir ↗

Referência

CVE-2021-34621

CVE-2021-34621CRITICAL

ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation

75RISCO

abrir ↗

Referência

CVE-2022-22960

CVE-2022-22960HIGHsob ataque

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due t

98RISCO

abrir ↗

Referência

CVE-2016-0099

CVE-2016-0099HIGHsob ataqueransomware

The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8

98RISCO

abrir ↗

Referência✓ VexDay Proof

Pixel8 Web Photo Album 3.0 - SQL Injection

CVE-2008-6153—webappsasp

SQL injection vulnerability in Photo.asp in Jay Patel Pixel8 Web Photo Album 3.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

HispaH textlinksads - 'index.php' SQL Injection

CVE-2008-6154—webappsphp

SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2020-0601

CVE-2020-0601HIGHsob ataque

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

Referência

CVE-2020-0601

CVE-2020-0601HIGHsob ataque

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

Referência

CVE-2014-6039

CVE-2014-6039—

ManageEngine EventLog Analyzer version 7 through 9.9 build 9002 has a Credentials Disclosure Vulnerability. Fixed versio

50RISCO

abrir ↗

Referência

CVE-2017-8670

CVE-2017-8670—

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code

35RISCO

abrir ↗

Referência

CVE-2012-5687

CVE-2012-5687—

Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13

50RISCO

abrir ↗

Referência

CVE-2016-7286

CVE-2016-7286—

The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

35RISCO

abrir ↗

Referência

CVE-2016-7286

CVE-2016-7286—

The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

35RISCO

abrir ↗

Referência

CVE-2018-10093

CVE-2018-10093—

AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.

50RISCO

abrir ↗

Referência

CVE-2018-10093

CVE-2018-10093—

AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.

50RISCO

abrir ↗

Referência

CVE-2015-7611

CVE-2015-7611—

Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary syst

50RISCO

abrir ↗

Referência

CVE-2015-7611

CVE-2015-7611—

Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary syst

50RISCO

abrir ↗

Referência✓ VexDay Proof

AdMan 1.1.20070907 - 'campaignId' SQL Injection

CVE-2008-6156—webappsphp

SQL injection vulnerability in editCampaign.php in AdMan 1.1.20070907 allows remote authenticated users to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bux.to Clone Script - Insecure Cookie Handling

CVE-2008-6162—webappsphp

Bux.to Clone script allows remote attackers to bypass authentication and gain administrative access by setting the logge

23RISCO

abrir ↗

Referência

CVE-2009-2227

CVE-2009-2227—

Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrar

50RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Kbase 1.0 - SQL Injection

CVE-2008-6166—webappsphp

SQL injection vulnerability in the KBase (com_kbase) 1.2 component for Joomla! allows remote attackers to execute arbitr

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.