Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.589exploits catalogados

34.508CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8.216Nuclei 4.223Metasploit 3.464✓ só verificadosrecentes populares risco

21.534 exploits

Referência

CVE-2018-10619

CVE-2018-10619—

An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.

23RISCO

abrir ↗

Referência

CVE-2010-2848

CVE-2010-2848—

Directory traversal vulnerability in assets/captcha/includes/alikon/playcode.php in the InterJoomla ArtForms (com_artfor

23RISCO

abrir ↗

Referência

CVE-2010-2848

CVE-2010-2848—

Directory traversal vulnerability in assets/captcha/includes/alikon/playcode.php in the InterJoomla ArtForms (com_artfor

23RISCO

abrir ↗

Referência

CVE-2011-5026

CVE-2011-5026—

Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d a

23RISCO

abrir ↗

Referência

CVE-2018-2698

CVE-2018-2698—

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th

23RISCO

abrir ↗

Referência

CVE-2011-4803

CVE-2011-4803—

SQL injection vulnerability in wptouch/ajax.php in the WPTouch plugin for WordPress allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2013-5757

CVE-2013-5757—

Absolute path traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary

23RISCO

abrir ↗

Referência

CVE-2013-7185

CVE-2013-7185—

PotPlayer 1.5.40688: .avi File Memory Corruption

23RISCO

abrir ↗

Referência

CVE-2017-7725

CVE-2017-7725—

concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "ca

23RISCO

abrir ↗

Referência

CVE-2017-7725

CVE-2017-7725—

concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "ca

23RISCO

abrir ↗

Referência✓ VexDay Proof

CzarNews 1.14 - 'tpath' Remote File Inclusion

CVE-2006-3685—webappsphp

PHP remote file inclusion vulnerability in CzarNews 1.12 through 1.14 allows remote attackers to execute arbitrary PHP c

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpQuiz 0.1.2 - SQL Injection / Code Execution

CVE-2006-4979—webappsphp

Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

netForo! 0.1 - 'down.php?file_to_download' Remote File Disclosure

CVE-2007-1392—webappsphp

Directory traversal vulnerability in down.php in netForo! 0.1g allows remote attackers to read arbitrary files via a ..

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpsyncml 0.1.2 - Remote File Inclusion

CVE-2007-4978—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpSyncML 0.1.2 and earlier allow remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

mutiple timesheets 5.0 - Multiple Vulnerabilities

CVE-2008-1415—webappsphp

Directory traversal vulnerability in index.php in Multiple Time Sheets (MTS) 5.0 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Velocity Web-Server 1.0 - Directory Traversal

CVE-2008-7084—remotewindows

Directory traversal vulnerability in the web server 1.0 in Velocity Security Management System allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Gravy Media Photo Host 1.0.8 - Local File Disclosure

CVE-2009-2184—webappsphp

Absolute path traversal vulnerability in forcedownload.php in Gravy Media Photo Host 1.0.8 allows remote attackers to re

23RISCO

abrir ↗

Referência

CVE-2013-2945

CVE-2013-2945—

SQL injection vulnerability in blogs/admin.php in b2evolution before 4.1.7 allows remote authenticated administrators to

23RISCO

abrir ↗

Referência

CVE-2015-2701

CVE-2015-2701—

Cross-site request forgery (CSRF) vulnerability in CS-Cart 4.2.4 allows remote attackers to hijack the authentication of

23RISCO

abrir ↗

Referência

CVE-2012-1200

CVE-2012-1200—

Multiple PHP remote file inclusion vulnerabilities in Nova CMS allow remote attackers to execute arbitrary PHP code via

23RISCO

abrir ↗

Referência

CVE-2022-21661

CVE-2022-21661HIGH

SQL injection in WordPress

78RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyDirectory 10.4.4 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-2521—webappsphp

PHP remote file inclusion vulnerability in cron.php in phpMyDirectory 10.4.4 and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2017-5264

CVE-2017-5264—

Versions of Nexpose prior to 6.4.66 fail to adequately validate the source of HTTP requests intended for the Automated A

23RISCO

abrir ↗

Referência

CVE-2012-2442

CVE-2012-2442—

Buffer overflow in the Video Manager in Nokia PC Suite 7.1.180.64 and earlier allows remote attackers to cause a denial

23RISCO

abrir ↗

Referência

CVE-2012-2442

CVE-2012-2442—

Buffer overflow in the Video Manager in Nokia PC Suite 7.1.180.64 and earlier allows remote attackers to cause a denial

23RISCO

abrir ↗

Referência

CVE-2019-14346

CVE-2019-14346—

Internal/Views/config.php in Schben Adive 2.0.7 allows admin/config CSRF to change a user password.

23RISCO

abrir ↗

Referência

CVE-2009-3912

CVE-2009-3912—

Directory traversal vulnerability in index.php in TFTgallery 0.13 allows remote attackers to read arbitrary files via a

23RISCO

abrir ↗

Referência

CVE-2009-4434

CVE-2009-4434—

Directory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier allows remote attackers to read arbi

23RISCO

abrir ↗

Referência

CVE-2009-4434

CVE-2009-4434—

Directory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier allows remote attackers to read arbi

23RISCO

abrir ↗

Referência

CVE-2009-3123

CVE-2009-3123—

Directory traversal vulnerability in gallery/gallery.php in Wap-Motor before 18.1 allows remote attackers to read arbitr

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.