Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.589exploits catalogados

34.508CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8.216Nuclei 4.223Metasploit 3.464✓ só verificadosrecentes populares risco

21.554 exploits

Referência

CVE-2019-6780

CVE-2019-6780—

The Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters/post/WiseChatLinksPost

23RISCO

abrir ↗

Referência✓ VexDay Proof

DigitalHive 2.0 RC2 - 'base_include.php' Remote File Inclusion

CVE-2006-5493—webappsphp

PHP remote file inclusion vulnerability in template/purpletech/base_include.php in DigitalHive 2.0 RC2 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpProfiles 3.1.2b - Multiple Remote File Inclusions

CVE-2006-6740—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpProfiles 3.1.2b and earlier allow remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

SCart 2.0 - 'page' Remote Code Execution

CVE-2006-7012—webappsphp

scart.cgi in SCart 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the page parame

23RISCO

abrir ↗

Referência

CVE-2011-0507

CVE-2011-0507—

FTPService.exe in Blackmoon FTP 3.1 Build 1735 and Build 1736 (3.1.7.1736), and possibly other versions before 3.1.8.173

23RISCO

abrir ↗

Referência

CVE-2014-1695

CVE-2014-1695—

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.20, 3.2.x before 3.2.15,

23RISCO

abrir ↗

Referência

CVE-2014-1695

CVE-2014-1695—

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.20, 3.2.x before 3.2.15,

23RISCO

abrir ↗

Referência

CVE-2018-5954

CVE-2018-5954—

phpFreeChat 1.7 and earlier allows remote attackers to cause a denial of service by sending a large number of connect co

23RISCO

abrir ↗

Referência

CVE-2018-5954

CVE-2018-5954—

phpFreeChat 1.7 and earlier allows remote attackers to cause a denial of service by sending a large number of connect co

23RISCO

abrir ↗

Referência✓ VexDay Proof

ViRC 2.0 - JOIN Response Remote Overwrite (SEH)

CVE-2007-3612—remotewindows

Stack-based buffer overflow in Visual IRC (ViRC) 2.0 allows remote IRC servers to execute arbitrary code via a long resp

23RISCO

abrir ↗

Referência

CVE-2012-5533

CVE-2012-5533—

The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial o

28RISCO

abrir ↗

Referência✓ VexDay Proof

Web Wiz Rich Text Editor 4.0 - Multiple Vulnerabilities

CVE-2008-0466—webappsasp

Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02,

23RISCO

abrir ↗

Referência✓ VexDay Proof

FAQ Manager 1.2 - 'header.php' Remote File Inclusion

CVE-2008-5288—webappsphp

PHP remote file inclusion vulnerability in include/header.php in Werner Hilversum FAQ Manager 1.2, when register_globals

23RISCO

abrir ↗

Referência

CVE-2012-5533

CVE-2012-5533—

The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial o

28RISCO

abrir ↗

Referência

CVE-2017-9125

CVE-2017-9125—

The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of se

23RISCO

abrir ↗

Referência

CVE-2019-1089

CVE-2019-1089—

An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an

23RISCO

abrir ↗

Referência

CVE-2006-5763

CVE-2006-5763—

Multiple PHP remote file inclusion vulnerabilities in Free File Hosting 1.1, and possibly earlier, when register_globals

23RISCO

abrir ↗

Referência

CVE-2009-3253

CVE-2009-3253—

Stack-based buffer overflow in TriceraSoft Swift Ultralite 1.032 allows remote attackers to cause a denial of service (c

23RISCO

abrir ↗

Referência

CVE-2007-5229

CVE-2007-5229—

Cross-site request forgery (CSRF) vulnerability in the FeedBurner FeedSmith 2.2 plugin for WordPress allows remote attac

23RISCO

abrir ↗

Referência

CVE-2013-6114

CVE-2013-6114—

Integer overflow in the OZDocument::parseElement function in Apple Motion 5.0.7 allows remote attackers to cause a denia

23RISCO

abrir ↗

Referência

CVE-2015-2321

CVE-2015-2321—

Cross-site scripting (XSS) vulnerability in the Job Manager plugin 0.7.22 and earlier for WordPress allows remote attack

23RISCO

abrir ↗

Referência

CVE-2015-2321

CVE-2015-2321—

Cross-site scripting (XSS) vulnerability in the Job Manager plugin 0.7.22 and earlier for WordPress allows remote attack

23RISCO

abrir ↗

Referência

CVE-2014-5347

CVE-2014-5347—

Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPress

23RISCO

abrir ↗

Referência

CVE-2014-5347

CVE-2014-5347—

Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPress

23RISCO

abrir ↗

Referência

CVE-2014-5347

CVE-2014-5347—

Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPress

23RISCO

abrir ↗

Referência✓ VexDay Proof

AllMyGuests 0.3.0 - 'AMG_serverpath' Remote File Inclusion

CVE-2007-0172—webappsphp

Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.3.0 and earlier allow remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Opera 9.60 - Persistent Cross-Site Scripting

CVE-2008-4725—remotewindows

Cross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web scri

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sepal SPBOARD 4.5 - 'board.cgi' Remote Command Execution

CVE-2008-4873—webappscgi

board.cgi in Sepal SPBOARD 4.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the fil

23RISCO

abrir ↗

Referência✓ VexDay Proof

i.Scribe SMTP Client 2.00b - 'wscanf' Remote Format String (PoC)

CVE-2008-7074—doswindows

Format string vulnerability in MemeCode Software i.Scribe 1.88 through 2.00 before Beta9 allows remote SMTP servers to c

23RISCO

abrir ↗

Referência✓ VexDay Proof

MPLAB IDE 8.30 - '.mcp' Universal Overwrite (SEH)

CVE-2009-1674—localwindows

Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.