Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.445exploits catalogados

34.432CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

21.497 exploits

Referência

CVE-2018-11442

CVE-2018-11442—

A CSRF issue was discovered in EasyService Billing 1.0, which was triggered via a quotation-new3-new2.php?add=true&id= U

23RISCO

abrir ↗

Referência

CVE-2020-15149

CVE-2020-15149CRITICAL

Account takeover in NodeBB

48RISCO

abrir ↗

Referência

CVE-2012-2437

CVE-2012-2437—

cookie_gen.php in ar web content manager (AWCM) 2.2 does not require authentication, which allows remote attackers to ge

23RISCO

abrir ↗

Referência

CVE-2019-1170

CVE-2019-1170HIGH

Windows NTFS Elevation of Privilege Vulnerability

41RISCO

abrir ↗

Referência

CVE-2011-5200

CVE-2011-5200—

Multiple SQL injection vulnerabilities in DeDeCMS, possibly 5.6, allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2012-2952

CVE-2012-2952—

SQL injection vulnerability in add_ons.php in Jaow 2.4.5 and earlier allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

FunkBoard CF0.71 - 'profile.php' Remote User Pass Change

CVE-2006-2896—webappsphp

profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form fie

23RISCO

abrir ↗

Referência

CVE-2017-14618

CVE-2017-14618—

Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2017-14618

CVE-2017-14618—

Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2019-0555

CVE-2019-0555—

An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape

23RISCO

abrir ↗

Referência✓ VexDay Proof

iWare Pro 5.0.4 - 'chat_panel.php' Remote Code Execution

CVE-2006-5837—webappsphp

Static code injection vulnerability in chat_panel.php in the SimpleChat 1.0.0 module for iWare Professional CMS allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

TorrentFlux 2.2 - 'downloaddetails.php' Local File Disclosure

CVE-2006-6598—webappsphp

Directory traversal vulnerability in viewnfo.php in (1) TorrentFlux before 2.2 and (2) torrentflux-b4rt before 2.1-b4rt-

23RISCO

abrir ↗

Referência✓ VexDay Proof

NewsCMSLite - 'newsCMS.mdb' Remote Password Disclosure

CVE-2007-0091—webappsasp

newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pakupaku CMS 0.4 - Arbitrary File Upload / Local File Inclusion

CVE-2007-4640—webappsphp

Unrestricted file upload vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to upload an

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Photo Gallery 1.0 - 'photo_id' SQL Injection

CVE-2008-1711—webappsphp

Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 stores passwords in cleartext in a MySQL database, which a

23RISCO

abrir ↗

Referência✓ VexDay Proof

TorrentTrader Classic 1.09 - Multiple Vulnerabilities

CVE-2009-2161—webappsphp

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-inse

23RISCO

abrir ↗

Referência

CVE-2017-14355

CVE-2017-14355—

A potential security vulnerability has been identified in HPE Connected Backup versions 8.6 and 8.8.6. The vulnerability

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenEMR 2.8.1 - 'fileroot' Remote File Inclusion

CVE-2006-2929—webappsphp

PHP remote file inclusion vulnerability in contrib/forms/evaluation/C_FormEvaluation.class.php in OpenEMR 2.8.1 and earl

23RISCO

abrir ↗

Referência

CVE-2012-1308

CVE-2012-1308—

Cross-site request forgery (CSRF) vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU_4.00 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPWebThings 1.4 - 'msg'/'forum' SQL Injection

CVE-2005-4218—webappsphp

SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2009-2332

CVE-2009-2332—

CMS Chainuk 1.2 and earlier allows remote attackers to obtain sensitive information via (1) a crafted id parameter to in

23RISCO

abrir ↗

Referência

CVE-2009-4466

CVE-2009-4466—

DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a crafted page parameter to misc.php, which rev

23RISCO

abrir ↗

Referência

CVE-2015-6911

CVE-2015-6911—

SQL injection vulnerability in Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2017-1000371

CVE-2017-1000371—

The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and 1

23RISCO

abrir ↗

Referência

CVE-2017-1000371

CVE-2017-1000371—

The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and 1

23RISCO

abrir ↗

Referência

CVE-2009-4472

CVE-2009-4472—

Multiple PHP remote file inclusion vulnerabilities in PHPope 1.0.0 and earlier allow remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2016-1596

CVE-2016-1596—

Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authentic

23RISCO

abrir ↗

Referência

CVE-2016-1596

CVE-2016-1596—

Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authentic

23RISCO

abrir ↗

Referência✓ VexDay Proof

Webace-Linkscript 1.3 SE - 'start.php' SQL Injection

CVE-2007-4846—webappsphp

SQL injection vulnerability in start.php in Webace-Linkscript (wls) 1.3 Special Edition (SE) allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

rgboard 3.0.12 - Remote File Inclusioni / Cross-Site Scripting

CVE-2008-2296—webappsphp

PHP remote file inclusion vulnerability in include/bbs.lib.inc.php in Rgboard 3.0.12 allows remote attackers to execute

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.