Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência✓ VexDay Proof

Alstrasoft Template Seller Pro 3.25 - Remote Code Execution

CVE-2007-2777—webappsphp

Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Libstats 1.0.3 - 'template_csv.php' Remote File Inclusion

CVE-2007-2779—webappsphp

PHP remote file inclusion vulnerability in template_csv.php in Libstats 1.0.3 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Squid < 3.1 5 - HTTP Version Number Parsing Denial of Service

CVE-2009-0478—dosmultiple

Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service v

45RISCO

abrir ↗

Referência✓ VexDay Proof

Audacity 1.2.6 - '.gro' Local Buffer Overflow (PoC)

CVE-2009-0490—doswindows

Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacit

28RISCO

abrir ↗

Referência✓ VexDay Proof

LetterIt 2 - 'Language' Local File Inclusion

CVE-2008-3446—webappsphp

Directory traversal vulnerability in inc/wysiwyg.php in LetterIt 2 allows remote attackers to include and execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

F-PROT AntiVirus 6.2.1.4252 - Malformed Archive Infinite Loop Denial of Service

CVE-2008-3447—dosmultiple

The scanning engine in F-Prot Antivirus 6.2.1 4252 allows remote attackers to cause a denial of service (infinite loop)

23RISCO

abrir ↗

Referência

CVE-2017-0070

CVE-2017-0070—

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object

35RISCO

abrir ↗

Referência✓ VexDay Proof

eNdonesia 8.4 (Calendar Module) - SQL Injection

CVE-2008-3452—webappsphp

SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Hosting Directory 2.0 - Insecure Cookie Handling

CVE-2008-3454—webappsphp

JnSHosts PHP Hosting Directory 2.0 allows remote attackers to bypass authentication and gain administrative access by se

23RISCO

abrir ↗

Referência

CVE-2014-5301

CVE-2014-5301—

Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 t

60RISCO

abrir ↗

Referência✓ VexDay Proof

WebMaster Marketplace - SQL Injection

CVE-2008-5574—webappsphp

SQL injection vulnerability in member.php in Webmaster Marketplace allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2021-1732

CVE-2021-1732HIGHsob ataqueransomware

Windows Win32k Elevation of Privilege Vulnerability

100RISCO

abrir ↗

Referência

CVE-2021-1732

CVE-2021-1732HIGHsob ataqueransomware

Windows Win32k Elevation of Privilege Vulnerability

100RISCO

abrir ↗

Referência✓ VexDay Proof

Anzio Web Print Object 3.2.30 - ActiveX Buffer Overflow

CVE-2008-3480—remotewindows

Stack-based buffer overflow in the Anzio Web Print Object (WePO) ActiveX control 3.2.19 and 3.2.24, as used in Anzio Pri

28RISCO

abrir ↗

Referência

CVE-2019-9851

CVE-2019-9851—

LibreLogo global-event script execution

60RISCO

abrir ↗

Referência

CVE-2019-16113

CVE-2019-16113—

Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .j

60RISCO

abrir ↗

Referência✓ VexDay Proof

eStoreAff 0.1 - 'cid' SQL Injection

CVE-2008-3484—webappsphp

SQL injection vulnerability in eStoreAff 0.1 allows remote attackers to execute arbitrary SQL commands via the cid param

23RISCO

abrir ↗

Referência✓ VexDay Proof

TROforum 0.1 - 'admin.php?site_url' Remote File Inclusion

CVE-2007-2937—webappsphp

PHP remote file inclusion vulnerability in admin/admin.php in TROforum 0.1 allows remote attackers to execute arbitrary

35RISCO

abrir ↗

Referência✓ VexDay Proof

ASPThai.Net WebBoard 6.0 - SQL Injection

CVE-2009-0703—webappsphp

SQL injection vulnerability in bview.asp in ASPThai.Net Webboard 6.0 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência

CVE-2014-5005

CVE-2014-5005—

Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers

60RISCO

abrir ↗

Referência✓ VexDay Proof

E-topbiz Dating 3 PHP Script - 'mail_id' SQL Injection

CVE-2008-3490—webappsphp

SQL injection vulnerability in members/mail.php in E-topbiz Online Dating 3 1.0 allows remote authenticated users to exe

23RISCO

abrir ↗

Referência

CVE-2020-8816

CVE-2020-8816CRITICALsob ataque

Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static l

100RISCO

abrir ↗

Referência

CVE-2020-8816

CVE-2020-8816CRITICALsob ataque

Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static l

100RISCO

abrir ↗

Referência

CVE-2017-1000117

CVE-2017-1000117—

A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL ca

60RISCO

abrir ↗

Referência✓ VexDay Proof

Mercury/32 Mail Server 4.01 - 'Pegasus' IMAP Buffer Overflow (3)

CVE-2004-2513—remotewindows

Buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Scripts24 iPost 1.0.1 - 'id' SQL Injection

CVE-2008-3491—webappsphp

SQL injection vulnerability in go.php in Scripts24 iPost 1.0.1 and iTGP 1.0.4 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2019-8926

CVE-2019-8926—

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zon

23RISCO

abrir ↗

Referência✓ VexDay Proof

QMail Mailing List Manager 1.2 - Database Disclosure

CVE-2008-5606—webappsasp

Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control,

23RISCO

abrir ↗

Referência

CVE-2019-8928

CVE-2019-8928—

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in /netflow/jspui/userMan

23RISCO

abrir ↗

Referência

CVE-2019-6249

CVE-2019-6249—

An issue was discovered in HuCart v5.7.4. There is a CSRF vulnerability that can add an admin account via /adminsys/inde

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.