Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.107exploits catalogados

36.322CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

22.936 exploits

Referência

CVE-2018-7314

CVE-2018-7314—

SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! via the sessionid parameter, a different vulnerabil

50RISCO

abrir ↗

Referência

CVE-2009-3246

CVE-2009-3246—

SQL injection vulnerability in spnews.php in MyBuxScript PTC-BUX allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

asiCMS alpha 0.208 - Multiple Remote File Inclusions

CVE-2008-4529—webappsphp

Multiple PHP remote file inclusion vulnerabilities in asiCMS alpha 0.208 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência

CVE-2017-16249

CVE-2017-16249—

The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST requ

50RISCO

abrir ↗

Referência

CVE-2017-16249

CVE-2017-16249—

The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST requ

50RISCO

abrir ↗

Referência✓ VexDay Proof

Dayfox Blog 4 - 'postpost.php' Remote Code Execution

CVE-2007-1525—webappsphp

Direct static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute

35RISCO

abrir ↗

Referência

CVE-2015-1172

CVE-2015-1172—

Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme (aka holding_pattern) 0.6 a

50RISCO

abrir ↗

Referência

CVE-2018-0707

CVE-2018-0707—

Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could

50RISCO

abrir ↗

Referência

CVE-2018-0707

CVE-2018-0707—

Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could

50RISCO

abrir ↗

Referência

CVE-2018-0707

CVE-2018-0707—

Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could

50RISCO

abrir ↗

Referência

CVE-2022-2143

CVE-2022-2143CRITICAL

Advantech iView

75RISCO

abrir ↗

Referência

CVE-2016-9796

CVE-2016-9796—

Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP pro

28RISCO

abrir ↗

Referência✓ VexDay Proof

Ayco Okul Portali - 'linkid' SQL Injection

CVE-2008-4574—webappsasp

SQL injection vulnerability in default.asp in Ayco Okul Portali allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

CoolPlayer Portable 2.19.1 - 'Skin' Local Buffer Overflow

CVE-2009-1449—localwindows

Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.1 allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

MKPortal NoBoard Module (Beta) - Remote File Inclusion

CVE-2007-3813—webappsphp

PHP remote file inclusion vulnerability in include/user.php in the NoBoard BETA module for MKPortal allows remote attack

35RISCO

abrir ↗

Referência

CVE-2012-2576

CVE-2012-2576—

SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Prof

50RISCO

abrir ↗

Referência

CVE-2009-3260

CVE-2009-3260—

Cross-site scripting (XSS) vulnerability in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTM

23RISCO

abrir ↗

Referência

CVE-2025-34030

CVE-2025-34030CRITICAL

sar2html OS Command Injection

75RISCO

abrir ↗

Referência✓ VexDay Proof

Chilkat FTP ActiveX 2.0 - 'ChilkatCert.dll' Insecure Method

CVE-2008-4583—remotewindows

Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component (ChilkatCert.dll) allows remote attackers to over

23RISCO

abrir ↗

Referência

CVE-2008-2463

CVE-2008-2463—

The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snaps

50RISCO

abrir ↗

Referência

CVE-2017-17562

CVE-2017-17562HIGHsob ataque

Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. T

100RISCO

abrir ↗

Referência✓ VexDay Proof

EDraw Office Viewer Component 5.1 - HttpDownloadFile() Insecure Method

CVE-2007-4420—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in officeviewer.ocx 5.1.199.1 in EDraw Office Viewer

23RISCO

abrir ↗

Referência

CVE-2018-6065

CVE-2018-6065HIGHsob ataque

Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Ch

83RISCO

abrir ↗

Referência

CVE-2021-33393

CVE-2021-33393—

lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account. It

50RISCO

abrir ↗

Referência

CVE-2015-1503

CVE-2015-1503—

Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary

50RISCO

abrir ↗

Referência

CVE-2015-1503

CVE-2015-1503—

Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary

50RISCO

abrir ↗

Referência✓ VexDay Proof

Macrovision FlexNet DownloadManager - Insecure Methods

CVE-2008-4587—remotewindows

Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100.

28RISCO

abrir ↗

Referência✓ VexDay Proof

Shop Script Pro 2.12 - SQL Injection

CVE-2009-2023—webappsphp

SQL injection vulnerability in index.php in Shop-Script Pro 2.12, when magic_quotes_gpc is disabled, allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

yogurt 0.3 - Cross-Site Scripting / SQL Injection

CVE-2009-2034—webappsphp

SQL injection vulnerability in writemessage.php in Yogurt 0.3, when register_globals is enabled, allows remote authentic

23RISCO

abrir ↗

Referência

CVE-2009-3309

CVE-2009-3309—

SQL injection vulnerability in index.cfm in CF ShopKart 5.4 beta allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.