Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.107exploits catalogados

36.322CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

22.936 exploits

Referência

CVE-2008-4765

CVE-2008-4765—

SQL injection vulnerability in pollBooth.php in osCommerce Poll Booth Add-On 2.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2023-24078

CVE-2023-24078HIGH

Real Time Logic FuguHub v8.1 and earlier was discovered to contain a remote code execution (RCE) vulnerability via the c

53RISCO

abrir ↗

Referência

CVE-2008-3922

CVE-2008-3922—

awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences

50RISCO

abrir ↗

Referência

CVE-2019-9760

CVE-2019-9760—

FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-cont

50RISCO

abrir ↗

Referência✓ VexDay Proof

QuestCMS - Cross-Site Scripting / Directory Traversal / SQL Injection

CVE-2008-4773—webappsphp

Directory traversal vulnerability in main/main.php in QuestCMS allows remote attackers to read arbitrary local files via

23RISCO

abrir ↗

Referência

CVE-2016-7434

CVE-2016-7434—

The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a craf

35RISCO

abrir ↗

Referência

CVE-2019-11447

CVE-2019-11447—

An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce

35RISCO

abrir ↗

Referência

CVE-2019-11447

CVE-2019-11447—

An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce

35RISCO

abrir ↗

Referência✓ VexDay Proof

Dream4 Koobi Pro 6.25 Showimages - 'galid' SQL Injection

CVE-2008-4778—webappsphp

SQL injection vulnerability in the gallery module in Koobi CMS 4.3.0 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

KwsPHP 1.0 Member_Space Module - SQL Injection

CVE-2007-4956—webappsphp

Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) th

23RISCO

abrir ↗

Referência✓ VexDay Proof

KwsPHP 1.0 stats Module - SQL Injection

CVE-2007-4956—webappsphp

Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) th

23RISCO

abrir ↗

Referência✓ VexDay Proof

TugZip 3.00 Archiver - '.zip' Local Buffer Overflow

CVE-2008-4779—localwindows

Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary

50RISCO

abrir ↗

Referência

CVE-2020-1054

CVE-2020-1054HIGHsob ataque

Win32k Elevation of Privilege Vulnerability

98RISCO

abrir ↗

Referência

CVE-2009-3430

CVE-2009-3430—

SQL injection vulnerability in login.php in Allomani Mobile 2.5 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

GForge < 4.6b2 - 'skill_delete' SQL Injection

CVE-2007-4966—webappsphp

SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2017-13772

CVE-2017-13772—

Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated

35RISCO

abrir ↗

Referência

CVE-2017-8734

CVE-2017-8734—

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arb

35RISCO

abrir ↗

Referência

CVE-2013-1359

CVE-2013-1359—

An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5

60RISCO

abrir ↗

Referência

CVE-2022-26134

CVE-2022-26134CRITICALsob ataqueransomware

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

abrir ↗

Referência

CVE-2022-26134

CVE-2022-26134CRITICALsob ataqueransomware

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

abrir ↗

Referência✓ VexDay Proof

MyKtools 2.4 - 'langage' Local File Inclusion

CVE-2008-4781—webappsphp

Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2016-0710

CVE-2016-0710—

Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attacker

50RISCO

abrir ↗

Referência

CVE-2019-8953

CVE-2019-8953—

The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, re

35RISCO

abrir ↗

Referência

CVE-2019-13272

CVE-2019-13272HIGHsob ataque

In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce

98RISCO

abrir ↗

Referência

CVE-2020-11023

CVE-2020-11023MEDIUMsob ataque

Potential XSS vulnerability in jQuery

85RISCO

abrir ↗

Referência

CVE-2020-11456

CVE-2020-11456—

LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and applicati

45RISCO

abrir ↗

Referência

CVE-2020-11651

CVE-2020-11651CRITICALsob ataque

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RISCO

abrir ↗

Referência

CVE-2020-11652

CVE-2020-11652MEDIUMsob ataque

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RISCO

abrir ↗

Referência

CVE-2017-1000486

CVE-2017-1000486CRITICALsob ataque

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

100RISCO

abrir ↗

Referência

CVE-2020-11978

CVE-2020-11978HIGHsob ataque

An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was disco

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.