Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.526exploits catalogados

34.478CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.534GitHub PoC 13.654VulnCheck XDB 8.213Nuclei 4.218Metasploit 3.464✓ só verificadosrecentes populares risco

21.534 exploits

Referência

CVE-2015-3246

CVE-2015-3246—

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly mod

38RISCO

abrir ↗

Referência

CVE-2010-0690

CVE-2010-0690—

SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2014-5194

CVE-2014-5194—

Static code injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote authenticated users to inject arbi

23RISCO

abrir ↗

Referência

CVE-2009-4699

CVE-2009-4699—

Multiple cross-site scripting (XSS) vulnerabilities in SkaDate Dating allow remote attackers to inject arbitrary web scr

23RISCO

abrir ↗

Referência

CVE-2015-8283

CVE-2015-8283—

Directory traversal vulnerability in configure_manage.php in SeaWell Networks Spectrum SDC 02.05.00.

23RISCO

abrir ↗

Referência

CVE-2015-8283

CVE-2015-8283—

Directory traversal vulnerability in configure_manage.php in SeaWell Networks Spectrum SDC 02.05.00.

23RISCO

abrir ↗

Referência

CVE-2011-5162

CVE-2011-5162—

Stack-based buffer overflow in GOM Player 2.1.33.5071 allows user-assisted remote attackers to execute arbitrary code vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

eXtremail 2.1.1 - DNS Parsing Bugs Remote (PoC)

CVE-2007-2187—doslinux

Stack-based buffer overflow in eXtremail 2.1.1 and earlier allows remote attackers to execute arbitrary code via a long

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBBViet 02.03.2007 - 'phpbb_root_path' Remote File Inclusion

CVE-2007-6088—webappsphp

PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBBViet 02.03.07 and earlier allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

falcon CMS 1.4.3 - Remote File Inclusion / Cross-Site Scripting

CVE-2007-6489—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to inject arbi

23RISCO

abrir ↗

Referência

CVE-2015-3001

CVE-2015-3001—

SysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express user account, which al

23RISCO

abrir ↗

Referência

CVE-2018-6889

CVE-2018-6889—

An issue was discovered in Typesetter 5.1. It suffers from a Host header injection vulnerability, Using this attack, a m

23RISCO

abrir ↗

Referência

CVE-2016-1910

CVE-2016-1910—

The User Management Engine (UME) in SAP NetWeaver 7.4 allows attackers to decrypt unspecified data via unknown vectors,

23RISCO

abrir ↗

Referência✓ VexDay Proof

KnowledgeQuest 2.5 - Arbitrary Add Admin

CVE-2008-1727—webappsphp

KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2017-0085

CVE-2017-0085—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

28RISCO

abrir ↗

Referência

CVE-2017-2527

CVE-2017-2527—

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "CoreAnimati

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome - Carriage Return Null Object Memory Exhaustion

CVE-2008-4340—doswindows

Google Chrome 0.2.149.29 and 0.2.149.30 allows remote attackers to cause a denial of service (memory consumption) via an

23RISCO

abrir ↗

Referência✓ VexDay Proof

VideoScript 4.0.1.50 - Change Admin Password

CVE-2008-5219—webappsphp

The password change feature (admin/cp.php) in VideoScript 4.0.1.50 and earlier does not check for administrative authent

23RISCO

abrir ↗

Referência

CVE-2017-0119

CVE-2017-0119—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

28RISCO

abrir ↗

Referência

CVE-2010-0690

CVE-2010-0690—

SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2021-31673

CVE-2021-31673—

A Dom-based Cross-site scripting (XSS) vulnerability at registration account in Cyclos 4 PRO.14.7 and before allows remo

23RISCO

abrir ↗

Referência

CVE-2020-11457

CVE-2020-11457—

pfSense before 2.4.5 has stored XSS in system_usermanager_addprivs.php in the WebGUI via the descr parameter (aka full n

23RISCO

abrir ↗

Referência

CVE-2012-6509

CVE-2012-6509—

Unrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to execute arbitrary PHP c

23RISCO

abrir ↗

Referência

CVE-2015-1389

CVE-2015-1389—

Cross-site scripting (XSS) vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote at

23RISCO

abrir ↗

Referência

CVE-2015-1389

CVE-2015-1389—

Cross-site scripting (XSS) vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote at

23RISCO

abrir ↗

Referência

CVE-2023-2437

CVE-2023-2437CRITICAL

UserPro <= 5.1.1 - Authentication Bypass to Administrator

63RISCO

abrir ↗

Referência

CVE-2018-10653

CVE-2018-10653—

There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 befor

23RISCO

abrir ↗

Referência

CVE-2009-2557

CVE-2009-2557—

Directory traversal vulnerability in system/download.php in Admin News Tools 2.5 allows remote attackers to read arbitra

23RISCO

abrir ↗

Referência

CVE-2017-15639

CVE-2017-15639—

tasks/feed/readRSS.cfm in Mura CMS before 6.2 allows attackers to bypass intended access restrictions by leveraging the

23RISCO

abrir ↗

Referência✓ VexDay Proof

FreeWPS 2.11 - 'images.php' Remote Code Execution

CVE-2006-1363—webappsphp

images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.