Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência

CVE-2015-7245

CVE-2015-7245—

Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remot

43RISCO

abrir ↗

Referência

CVE-2011-5046

CVE-2011-5046—

The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Window

35RISCO

abrir ↗

Referência

CVE-2011-0506

CVE-2011-0506—

Directory traversal vulnerability in modules/profile/user.php in Ax Developer CMS (AxDCMS) 0.1.1 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft SQL Server - Distributed Management Objects 'sqldmo.dll' Buffer Overflow (PoC)

CVE-2007-4814—doswindows

Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.200

35RISCO

abrir ↗

Referência✓ VexDay Proof

WebDesktop 0.1 - Remote File Inclusion

CVE-2007-5388—webappsphp

Multiple PHP remote file inclusion vulnerabilities in WebDesktop 0.1 allow remote attackers to execute arbitrary PHP cod

35RISCO

abrir ↗

Referência

CVE-2021-29003

CVE-2021-29003—

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacter

35RISCO

abrir ↗

Referência

CVE-2014-9312

CVE-2014-9312—

Unrestricted File Upload vulnerability in Photo Gallery 1.2.5.

50RISCO

abrir ↗

Referência

CVE-2020-1147

CVE-2020-1147HIGHsob ataque

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the softwar

100RISCO

abrir ↗

Referência

CVE-2020-1147

CVE-2020-1147HIGHsob ataque

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the softwar

100RISCO

abrir ↗

Referência

CVE-2018-15535

CVE-2018-15535—

/filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 uses external input to construct a pathname

43RISCO

abrir ↗

Referência

CVE-2019-0803

CVE-2019-0803HIGHsob ataqueransomware

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

83RISCO

abrir ↗

Referência

CVE-2011-2386

CVE-2011-2386—

VisiWaveReport.exe in AZO Technologies, Inc. VisiWave Site Survey before 2.1.9 allows user-assisted remote attackers to

50RISCO

abrir ↗

Referência✓ VexDay Proof

CuteNews 1.1.1 - 'html.php' Remote Code Execution

CVE-2008-4557—webappsphp

plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 (aka Strawberry) allows remote attackers to execute

35RISCO

abrir ↗

Referência✓ VexDay Proof

PicoFlat CMS 0.4.14 - 'index.php' Remote File Inclusion

CVE-2007-5390—webappsphp

PHP remote file inclusion vulnerability in index.php in PicoFlat CMS 0.4.14 and earlier allows remote attackers to execu

23RISCO

abrir ↗

Referência

CVE-2017-0145

CVE-2017-0145HIGHsob ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

abrir ↗

Referência

CVE-2019-13344

CVE-2019-13344—

An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthent

35RISCO

abrir ↗

Referência

CVE-2015-8426

CVE-2015-8426—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISCO

abrir ↗

Referência

CVE-2023-36844

CVE-2023-36844MEDIUMsob ataque

Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables

100RISCO

abrir ↗

Referência

CVE-2008-5063

CVE-2008-5063—

PHP remote file inclusion vulnerability in Admin/ADM_Pagina.php in OTManager 2.4 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2008-5064

CVE-2008-5064—

SQL injection vulnerability in liga.php in H&H WebSoccer 2.80 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pluck CMS 4.6.1 - 'module_pages_site.php' Local File Inclusion

CVE-2008-6842—webappsphp

Directory traversal vulnerability in data/modules/blog/module_pages_site.php in Pluck 4.6.1 allows remote attackers to i

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPSlash 0.8.1.1 - Remote Code Execution

CVE-2009-0517—webappsphp

Eval injection vulnerability in index.php in phpSlash 0.8.1.1 and earlier allows remote attackers to execute arbitrary P

35RISCO

abrir ↗

Referência✓ VexDay Proof

VIDEOSCRIPT.us - Authentication Bypass

CVE-2009-1804—webappsphp

Multiple SQL injection vulnerabilities in admin/index.php in VideoScript.us YouTube Video Script allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2022-30525

CVE-2022-30525CRITICALsob ataque

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RISCO

abrir ↗

Referência✓ VexDay Proof

Agares ThemeSiteScript 1.0 - 'loadadminpage' Remote File Inclusion

CVE-2008-5066—webappsphp

PHP remote file inclusion vulnerability in upload/admin/frontpage_right.php in Agares Media ThemeSiteScript 1.0 allows r

23RISCO

abrir ↗

Referência

CVE-2020-12029

CVE-2020-12029CRITICAL

Rockwell Automation FactoryTalk View SE

75RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Plus 1.53 - 'phpbb_root_path' Remote File Inclusion

CVE-2007-5009—webappsphp

PHP remote file inclusion vulnerability in language/lang_german/lang_main_album.php in phpBB Plus 1.53, and 1.53a before

35RISCO

abrir ↗

Referência✓ VexDay Proof

TikiWiki 1.9.8 - Remote PHP Injection

CVE-2007-5423—webappsphp

tiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via PHP sequences in the f ar

60RISCO

abrir ↗

Referência

CVE-2009-3712

CVE-2009-3712—

Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência✓ VexDay Proof

my-colex 1.4.2 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2009-1810—webappsphp

Multiple SQL injection vulnerabilities in myColex 1.4.2 allow remote attackers to execute arbitrary SQL commands via (1)

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.