Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.107exploits catalogados

36.322CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

22.936 exploits

Referência

CVE-2018-1612

CVE-2018-1612MEDIUM

IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and

60RISCO

abrir ↗

Referência

CVE-2021-45428

CVE-2021-45428—

TLR-2005KSH is affected by an incorrect access control vulnerability. THe PUT method is enabled so an attacker can uploa

50RISCO

abrir ↗

Referência

CVE-2018-9205

CVE-2018-9205—

Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path.

50RISCO

abrir ↗

Referência✓ VexDay Proof

WBB Plugin rGallery 1.09 - 'itemID' Blind SQL Injection

CVE-2008-4627—webappsphp

SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows remote attackers to execu

23RISCO

abrir ↗

Referência

CVE-2016-3222

CVE-2016-3222—

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

35RISCO

abrir ↗

Referência

CVE-2016-3222

CVE-2016-3222—

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

35RISCO

abrir ↗

Referência

CVE-2015-4553

CVE-2015-4553—

A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell.

35RISCO

abrir ↗

Referência

CVE-2010-3971

CVE-2010-3971—

Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in msh

60RISCO

abrir ↗

Referência

CVE-2010-3971

CVE-2010-3971—

Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in msh

60RISCO

abrir ↗

Referência✓ VexDay Proof

mystats - 'hits.php' Multiple Vulnerabilities

CVE-2008-4643—webappsphp

SQL injection vulnerability in hits.php in myWebland myStats allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

NVR SP2 2.0 'nvUtility.dll 1.0.14.0' - 'SaveXMLFile()' Insecure Method

CVE-2007-4583—remotewindows

Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in nvUtility.dll 1.0.14.0 in

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPWebGallery 1.7.2 - Session Hijacking / Code Execution

CVE-2008-4645—webappsphp

plugins/event_tracer/event_list.php in PhpWebGallery 1.7.2 and earlier allows remote authenticated administrators to exe

23RISCO

abrir ↗

Referência

CVE-2008-4648

CVE-2008-4648—

Cross-site scripting (XSS) vulnerability in index.php in Elxis CMS 2008.1 revision 2204 allows remote attackers to injec

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebFileExplorer 3.1 - 'db.mdb' Database Disclosure

CVE-2009-1495—webappsphp

Web File Explorer 3.1 stores sensitive information under the web root with insufficient access control, which allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

TorrentTrader Classic 1.09 - Multiple Vulnerabilities

CVE-2009-2160—webappsphp

TorrentTrader Classic 1.09 allows remote attackers to (1) obtain configuration information via a direct request to phpin

23RISCO

abrir ↗

Referência

CVE-2009-3330

CVE-2009-3330—

SQL injection vulnerability in index.php in cP Creator 2.7.1, when magic_quotes_gpc is disabled, allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2015-3080

CVE-2015-3080—

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows

35RISCO

abrir ↗

Referência

CVE-2015-4074

CVE-2015-4074—

Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read ar

50RISCO

abrir ↗

Referência

CVE-2015-4074

CVE-2015-4074—

Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read ar

50RISCO

abrir ↗

Referência

CVE-2013-0249

CVE-2013-0249—

Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7

28RISCO

abrir ↗

Referência

CVE-2016-0784

CVE-2016-0784—

Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1

35RISCO

abrir ↗

Referência

CVE-2016-0784

CVE-2016-0784—

Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1

35RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module makale 0.26 - SQL Injection

CVE-2008-4653—webappsphp

SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module for XOOPS, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

XAMPP 1.6.8 - Cross-Site Request Forgery (Change Administrative Password)

CVE-2008-6499—remotewindows

security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows re

23RISCO

abrir ↗

Referência★ 19

watchtowrlabs/watchTowr-vs-FortiSIEM-CVE-2025-25256

CVE-2025-25256CRITICAL

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vul

75RISCO

abrir ↗

Referência

CVE-2015-0313

CVE-2015-0313HIGHsob ataque

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows

100RISCO

abrir ↗

Referência

CVE-2017-6019

CVE-2017-6019—

An issue was discovered in Schneider Electric Conext ComBox, model 865-1058, all firmware versions prior to V3.03 BN 830

35RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows - GDI Image Parsing Stack Overflow (MS08-021)

CVE-2008-1087—localwindows

Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 200

35RISCO

abrir ↗

Referência✓ VexDay Proof

iDB 0.2.5pa SVN 243 - 'skin' Local File Inclusion

CVE-2009-1498—webappsphp

Directory traversal vulnerability in inc/profilemain.php in Game Maker 2k Internet Discussion Boards (iDB) 0.2.5 Pre-Alp

23RISCO

abrir ↗

Referência

CVE-2019-9053

CVE-2019-9053—

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.