Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência

CVE-2024-11680

CVE-2024-11680CRITICALsob ataque

ProjectSend Unauthenticated Configuration Modification

100RISCO

abrir ↗

Referência

CVE-2024-11680

CVE-2024-11680CRITICALsob ataque

ProjectSend Unauthenticated Configuration Modification

100RISCO

abrir ↗

Referência

CVE-2024-11680

CVE-2024-11680CRITICALsob ataque

ProjectSend Unauthenticated Configuration Modification

100RISCO

abrir ↗

Referência✓ VexDay Proof

FAQEngine 4.16.03 - 'question.php?questionref' SQL Injection

CVE-2007-2749—webappsphp

SQL injection vulnerability in question.php in FAQEngine 4.16.03 and earlier allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Build it Fast (bif3) 0.4.1 - Multiple Remote File Inclusions

CVE-2007-2762—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Build it Fast (bif3) 0.4.1 allow remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2022-26352

CVE-2022-26352CRITICALsob ataqueransomware

An issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02. Attackers can craft a multipart form req

100RISCO

abrir ↗

Referência

CVE-2017-16806

CVE-2017-16806—

The Process function in RemoteTaskServer/WebServer/HttpServer.cs in Ulterius before 1.9.5.0 allows HTTP server directory

60RISCO

abrir ↗

Referência✓ VexDay Proof

SunLight CMS 5.3 - 'root' Remote File Inclusion

CVE-2007-2774—webappsphp

Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to execute arbitrary PHP c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ol BookMarks Manager 0.7.4 - SQL Injection

CVE-2007-2817—webappsphp

SQL injection vulnerability in read/index.php in ol'bookmarks 0.7.4 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

newsmanager 2.0 - Remote File Inclusion / File Disclosure / SQL Injection

CVE-2008-2340—webappsphp

Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2017-3066

CVE-2017-3066CRITICALsob ataque

Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier hav

100RISCO

abrir ↗

Referência✓ VexDay Proof

newsmanager 2.0 - Remote File Inclusion / File Disclosure / SQL Injection

CVE-2008-2342—webappsphp

Directory traversal vulnerability in attachments.php in News Manager 2.0 allows remote attackers to read arbitrary files

23RISCO

abrir ↗

Referência

CVE-2021-42321

CVE-2021-42321HIGHsob ataqueransomware

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2021-42321

CVE-2021-42321HIGHsob ataqueransomware

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2022-31137

CVE-2022-31137CRITICAL

Unauthenticated Remote Code Execution in Roxy-WI

85RISCO

abrir ↗

Referência

CVE-2022-31137

CVE-2022-31137CRITICAL

Unauthenticated Remote Code Execution in Roxy-WI

85RISCO

abrir ↗

Referência

CVE-2022-31137

CVE-2022-31137CRITICAL

Unauthenticated Remote Code Execution in Roxy-WI

85RISCO

abrir ↗

Referência

CVE-2022-31137

CVE-2022-31137CRITICAL

Unauthenticated Remote Code Execution in Roxy-WI

85RISCO

abrir ↗

Referência

CVE-2019-17220

CVE-2019-17220—

Rocket.Chat before 2.1.0 allows XSS via a URL on a ![title] line.

23RISCO

abrir ↗

Referência✓ VexDay Proof

HP Software Update - 'Hpufunction.dll 4.0.0.1' Insecure Method

CVE-2008-2390—remotewindows

Hpufunction.dll 4.0.0.1 in HP Software Update exposes the unsafe (1) ExecuteAsync and (2) Execute methods, which allows

23RISCO

abrir ↗

Referência

CVE-2017-9554

CVE-2017-9554—

An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allo

60RISCO

abrir ↗

Referência✓ VexDay Proof

TAGWORX.CMS 3.00.02 - Multiple SQL Injections

CVE-2008-2394—webappsphp

Multiple SQL injection vulnerabilities in TAGWORX.CMS 3.00.02 allow remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

XnView 1.93.6 - '.taac' Local Buffer Overflow

CVE-2008-2427—localwindows

Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD a

28RISCO

abrir ↗

Referência

CVE-2008-6515

CVE-2008-6515—

Cross-site scripting (XSS) vulnerability in Fritz Berger yet another php photo album - next generation (yappa-ng) allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

CaLogic Calendars 1.2.2 - 'langsel' SQL Injection

CVE-2008-2444—webappsphp

SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2012-1775

CVE-2012-1775—

Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code

50RISCO

abrir ↗

Referência✓ VexDay Proof

Web Group Communication Center (WGCC) 1.0.3 - SQL Injection

CVE-2008-2445—webappsphp

Cross-site scripting (XSS) vulnerability in profile.php in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and

23RISCO

abrir ↗

Referência✓ VexDay Proof

e-107 Plugin ZoGo-Shop 1.16 Beta 13 - SQL Injection

CVE-2008-2447—webappsphp

SQL injection vulnerability in products.php in the Mytipper ZoGo-shop plugin 1.15.5 and 1.16 Beta 13 for e107 allows rem

23RISCO

abrir ↗

Referência

CVE-2023-40044

CVE-2023-40044CRITICALsob ataqueransomware

WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability

100RISCO

abrir ↗

Referência

CVE-2020-17463

CVE-2020-17463CRITICALsob ataque

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.