Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.652exploits catalogados

34.545CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.581GitHub PoC 13.708VulnCheck XDB 8.225Nuclei 4.228Metasploit 3.467✓ só verificadosrecentes populares risco

21.554 exploits

Referência✓ VexDay Proof

OpenH323 Opal SIP Protocol - Remote Denial of Service

CVE-2007-4924—doswindows

The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remo

28RISCO

abrir ↗

Referência

CVE-2018-17382

CVE-2018-17382—

SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filter_letter parameter.

23RISCO

abrir ↗

Referência

CVE-2018-17382

CVE-2018-17382—

SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filter_letter parameter.

23RISCO

abrir ↗

Referência

CVE-2018-18763

CVE-2018-18763—

SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fuju News 1.0 - Authentication Bypass / SQL Injection

CVE-2006-1837—webappsphp

SQL injection vulnerability in archiv2.php in Fuju News 1.0 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência

CVE-2021-26929

CVE-2021-26929—

An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library befor

23RISCO

abrir ↗

Referência

CVE-2021-26929

CVE-2021-26929—

An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library befor

23RISCO

abrir ↗

Referência✓ VexDay Proof

D-Bus Daemon < 1.2.4 - 'libdbus' Denial of Service

CVE-2008-3834—dosmultiple

The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a deni

23RISCO

abrir ↗

Referência

CVE-2023-39026

CVE-2023-39026—

Directory Traversal vulnerability in FileMage Gateway Windows Deployments v.1.10.8 and before allows a remote attacker t

43RISCO

abrir ↗

Referência

CVE-2020-6756

CVE-2020-6756CRITICAL

languageOptions.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows unauthenticated attackers to re

53RISCO

abrir ↗

Referência

CVE-2021-27370

CVE-2021-27370—

The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field.

23RISCO

abrir ↗

Referência

CVE-2015-6568

CVE-2015-6568—

Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse/

28RISCO

abrir ↗

Referência

CVE-2015-6568

CVE-2015-6568—

Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse/

28RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component ionFiles 4.4.2 - File Disclosure

CVE-2008-6080—webappsphp

Directory traversal vulnerability in download.php in the ionFiles (com_ionfiles) 4.4.2 component for Joomla! allows remo

43RISCO

abrir ↗

Referência

CVE-2010-1345

CVE-2010-1345—

Directory traversal vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote a

43RISCO

abrir ↗

Referência

CVE-2010-1346

CVE-2010-1346—

SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magic_quotes_gpc is disabled, allows remote

23RISCO

abrir ↗

Referência

CVE-2014-5201

CVE-2014-5201—

SQL injection vulnerability in the Gallery Objects plugin 0.4 for WordPress allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2014-9224

CVE-2014-9224—

Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management serve

23RISCO

abrir ↗

Referência

CVE-2010-1352

CVE-2010-1352—

Directory traversal vulnerability in the JOOFORGE Jutebox (com_jukebox) component 1.0 and 1.7 for Joomla! allows remote

43RISCO

abrir ↗

Referência

CVE-2010-0288

CVE-2010-0288—

A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12

28RISCO

abrir ↗

Referência

CVE-2010-1353

CVE-2010-1353—

Directory traversal vulnerability in the LoginBox Pro (com_loginbox) component for Joomla! allows remote attackers to re

43RISCO

abrir ↗

Referência

CVE-2010-1354

CVE-2010-1354—

Directory traversal vulnerability in the VJDEO (com_vjdeo) component 1.0 and 1.0.1 for Joomla! allows remote attackers t

43RISCO

abrir ↗

Referência

CVE-2010-1354

CVE-2010-1354—

Directory traversal vulnerability in the VJDEO (com_vjdeo) component 1.0 and 1.0.1 for Joomla! allows remote attackers t

43RISCO

abrir ↗

Referência

CVE-2010-1360

CVE-2010-1360—

Multiple PHP remote file inclusion vulnerabilities in FAQEngine 4.24.00 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência

CVE-2010-1360

CVE-2010-1360—

Multiple PHP remote file inclusion vulnerabilities in FAQEngine 4.24.00 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência

CVE-2020-23839

CVE-2020-23839—

A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpa

28RISCO

abrir ↗

Referência

CVE-2020-35754

CVE-2020-35754—

OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequentl

28RISCO

abrir ↗

Referência

CVE-2012-4768

CVE-2012-4768—

Cross-site scripting (XSS) vulnerability in the Download Monitor plugin before 3.3.5.9 for WordPress allows remote attac

43RISCO

abrir ↗

Referência✓ VexDay Proof

BulletProof FTP Client 2009 - '.bps' Local Buffer Overflow (SEH)

CVE-2008-5754—localwindows

Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .bp

23RISCO

abrir ↗

Referência

CVE-2016-6754

CVE-2016-6754—

A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.