Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.589exploits catalogados

34.508CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8.216Nuclei 4.223Metasploit 3.464✓ só verificadosrecentes populares risco

21.554 exploits

Referência

CVE-2017-9978

CVE-2017-9978—

On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, a flaw was found with the error message sent as a response

23RISCO

abrir ↗

Referência

CVE-2016-1821

CVE-2016-1821—

IOAudioFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quake 3 Engine Client - 'CG_ServerCommand()' Remote Overflow

CVE-2006-3400—doswindows

Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP)

23RISCO

abrir ↗

Referência✓ VexDay Proof

IrayoBlog 0.2.4 - '/inc/irayofuncs.php' Remote File Inclusion

CVE-2006-5849—webappsphp

PHP remote file inclusion vulnerability in inc/irayofuncs.php in IrayoBlog alpha-0.2.4 allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Omegaboard 1.0beta4 - 'functions.php' Remote File Inclusion

CVE-2007-0683—webappsphp

PHP remote file inclusion vulnerability in includes/functions.php in Omegaboard 1.0beta4 and earlier allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Htaccess Passwort Generator 1.1 - 'ht_pfad' Remote File Inclusion

CVE-2007-1013—webappsphp

PHP remote file inclusion vulnerability in generate.php in VirtualSystem Htaccess Passwort Generator 1.1 allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

ClassWeb 2.0.3 - 'BASE' Remote File Inclusion

CVE-2007-1640—webappsphp

Multiple PHP remote file inclusion vulnerabilities in ClassWeb 2.03 and earlier allow remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution

CVE-2007-4061—remotewindows

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attac

28RISCO

abrir ↗

Referência✓ VexDay Proof

eXeScope 6.50 - Local Buffer Overflow

CVE-2009-1063—localwindows

Buffer overflow in eXeScope 6.50 allows user-assisted remote attackers to execute arbitrary code via a crafted executabl

23RISCO

abrir ↗

Referência

CVE-2010-4821

CVE-2010-4821—

Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Referência

CVE-2010-1947

CVE-2010-1947—

Directory traversal vulnerability in scr/soustab.php in openMairie Openregistrecil 1.02, when register_globals is enable

23RISCO

abrir ↗

Referência

CVE-2010-1947

CVE-2010-1947—

Directory traversal vulnerability in scr/soustab.php in openMairie Openregistrecil 1.02, when register_globals is enable

23RISCO

abrir ↗

Referência

Veyon 4.4.1 - 'VeyonService' Unquoted Service Path

CVE-2020-15261HIGHlocalwindows

Unquoted service path vulnerability on Veyon

46RISCO

abrir ↗

Referência

CVE-2014-9178

CVE-2014-9178—

Multiple SQL injection vulnerabilities in classes/ajax.php in the Smarty Pants Plugins SP Project & Document Manager plu

23RISCO

abrir ↗

Referência

CVE-2014-9175

CVE-2014-9175—

SQL injection vulnerability in wpdatatables.php in the wpDataTables plugin 1.5.3 and earlier for WordPress allows remote

23RISCO

abrir ↗

Referência

CVE-2014-9175

CVE-2014-9175—

SQL injection vulnerability in wpdatatables.php in the wpDataTables plugin 1.5.3 and earlier for WordPress allows remote

23RISCO

abrir ↗

Referência

CVE-2012-1002

CVE-2012-1002—

SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2015-2216

CVE-2015-2216—

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2015-2216

CVE-2015-2216—

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2015-2090

CVE-2015-2090—

SQL injection vulnerability in the ajax_survey function in settings.php in the WordPress Survey and Poll plugin 1.1.7 fo

23RISCO

abrir ↗

Referência

CVE-2015-2090

CVE-2015-2090—

SQL injection vulnerability in the ajax_survey function in settings.php in the WordPress Survey and Poll plugin 1.1.7 fo

23RISCO

abrir ↗

Referência

CVE-2014-10013

CVE-2014-10013—

SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2014-10013

CVE-2014-10013—

SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sphider 1.3 - 'configset.php' Remote File Inclusion

CVE-2006-1784—webappsphp

PHP remote file inclusion vulnerability in admin/configset.php in Sphider 1.3 and earlier, when register_globals is disa

23RISCO

abrir ↗

Referência

CVE-2012-2276

CVE-2012-2276—

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote

23RISCO

abrir ↗

Referência

CVE-2017-18195

CVE-2017-18195—

An issue was discovered in tools/conversations/view_ajax.php in Concrete5 before 8.3.0. An unauthenticated user can enum

28RISCO

abrir ↗

Referência

CVE-2013-6793

CVE-2013-6793—

Multiple cross-site scripting (XSS) vulnerabilities in the Calendar module in Olat 7.8.0.1 (b20130821 N1) allow remote a

23RISCO

abrir ↗

Referência

CVE-2015-4667

CVE-2015-4667—

Multiple hardcoded credentials in Xsuite 2.x.

28RISCO

abrir ↗

Referência

CVE-2017-13869

CVE-2017-13869—

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS b

23RISCO

abrir ↗

Referência

CVE-2010-1302

CVE-2010-1302—

Directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs (com_dwgraphs) component 1.0 for Joomla! a

38RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.