Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.526exploits catalogados

34.478CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.534GitHub PoC 13.654VulnCheck XDB 8.213Nuclei 4.218Metasploit 3.464✓ só verificadosrecentes populares risco

21.534 exploits

Referência✓ VexDay Proof

LightNEasy sqlite / no database 1.2.2 - Multiple Vulnerabilities

CVE-2008-6593—webappsphp

SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

MemHT Portal 4.0.1 - Remote Code Execution

CVE-2009-0372—webappsphp

Unrestricted file upload vulnerability in index.php in Miltenovik Manojlo MemHT Portal 4.0.1 and earlier allows remote a

23RISCO

abrir ↗

Referência

CVE-2009-3247

CVE-2009-3247—

Cross-site scripting (XSS) vulnerability in the Activities module in vtiger CRM 5.0.4 allows remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2012-2109

CVE-2012-2109—

SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attack

23RISCO

abrir ↗

Referência

CVE-2020-7108

CVE-2020-7108—

The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field.

23RISCO

abrir ↗

Referência

CVE-2017-0214

CVE-2017-0214—

Windows COM in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2

23RISCO

abrir ↗

Referência

CVE-2022-1388

CVE-2022-1388CRITICALsob ataqueransomware

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

Referência✓ VexDay Proof

Squirrelcart 2.2.0 - 'cart_content.php' Remote File Inclusion

CVE-2006-2483—webappsphp

PHP remote file inclusion vulnerability in cart_content.php in Squirrelcart 2.2.2 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2022-1388

CVE-2022-1388CRITICALsob ataqueransomware

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

Referência✓ VexDay Proof

Built2Go PHP Movie Review 2B - Remote File Inclusion

CVE-2006-2008—webappsphp

PHP remote file inclusion vulnerability in movie_cls.php in Built2Go PHP Movie Review 2B and earlier allows remote attac

23RISCO

abrir ↗

Referência

CVE-2022-1388

CVE-2022-1388CRITICALsob ataqueransomware

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

Referência

CVE-2004-1493

CVE-2004-1493—

Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (server crash) via multiple c

23RISCO

abrir ↗

Referência✓ VexDay Proof

mg.applanix 1.3.1 - 'apx_root_path' Remote File Inclusion

CVE-2006-6341—webappsphp

Multiple PHP remote file inclusion vulnerabilities in mg.applanix 1.3.1 and earlier allow remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nuked-klaN 1.7.6 - Remote Code Execution

CVE-2007-2556—webappsphp

SQL injection vulnerability in Nuked-klaN 1.7.6 allows remote attackers to execute arbitrary SQL commands via the X-Forw

23RISCO

abrir ↗

Referência✓ VexDay Proof

sk.log 0.5.3 - 'skin_url' Remote File Inclusion

CVE-2007-5089—webappsphp

PHP remote file inclusion vulnerability in php-inc/log.inc.php in sk.log 0.5.3 and earlier allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

reSIProcate 1.3.2 - Remote Denial of Service (PoC)

CVE-2008-3210—dosmultiple

rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service (daem

23RISCO

abrir ↗

Referência✓ VexDay Proof

CCMS 3.1 - 'skin' Local File Inclusion

CVE-2008-4526—webappsphp

Multiple directory traversal vulnerabilities in CCMS 3.1 allow remote attackers to include and execute arbitrary local f

23RISCO

abrir ↗

Referência

CVE-2009-4194

CVE-2009-4194—

Directory traversal vulnerability in Golden FTP Server 4.30 Free and Professional, 4.50, and possibly other versions all

23RISCO

abrir ↗

Referência

CVE-2019-13658

CVE-2019-13658CRITICAL

CA Network Flow Analysis 9.x and 10.0.x have a default credential vulnerability that can allow a remote attacker to exec

48RISCO

abrir ↗

Referência

CVE-2013-6164

CVE-2013-6164—

SQL injection vulnerability in view/objectDetail.php in Project'Or RIA 3.4.0 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2013-6164

CVE-2013-6164—

SQL injection vulnerability in view/objectDetail.php in Project'Or RIA 3.4.0 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2017-6528

CVE-2017-6528—

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is affected by plaintext password storage (the /home/dna/

23RISCO

abrir ↗

Referência

CVE-2012-1199

CVE-2012-1199—

Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attac

23RISCO

abrir ↗

Referência

CVE-2007-6587

CVE-2007-6587—

SQL injection vulnerability in plog-rss.php in Plogger 1.0 Beta 3.0 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2007-6587

CVE-2007-6587—

SQL injection vulnerability in plog-rss.php in Plogger 1.0 Beta 3.0 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2015-1727

CVE-2015-1727—

Buffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Collabtive 0.4.8 - Cross-Site Scripting / Authentication Bypass / Arbitrary File Upload

CVE-2008-6946—webappsphp

Cross-site scripting (XSS) vulnerability in manageproject.php in Collabtive 0.4.8 allows user-assisted remote attackers

23RISCO

abrir ↗

Referência

CVE-2009-2544

CVE-2009-2544—

Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger and

23RISCO

abrir ↗

Referência

CVE-2011-5075

CVE-2011-5075—

translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive infor

23RISCO

abrir ↗

Referência

CVE-2009-2398

CVE-2009-2398—

Directory traversal vulnerability in test/index.php in PHP-Sugar 0.80 allows remote attackers to read arbitrary files vi

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.