Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.652exploits catalogados

34.545CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.581GitHub PoC 13.708VulnCheck XDB 8.225Nuclei 4.228Metasploit 3.467✓ só verificadosrecentes populares risco

21.581 exploits

Referência

CVE-2022-3982

CVE-2022-3982CRITICAL

Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload

63RISCO

abrir ↗

Referência

CVE-2014-2045

CVE-2014-2045—

Multiple cross-site scripting (XSS) vulnerabilities in the old and new interfaces in Viprinet Multichannel VPN Router 30

23RISCO

abrir ↗

Referência

CVE-2014-2045

CVE-2014-2045—

Multiple cross-site scripting (XSS) vulnerabilities in the old and new interfaces in Viprinet Multichannel VPN Router 30

23RISCO

abrir ↗

Referência

CVE-2010-1528

CVE-2010-1528—

PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when register_globals is enabled, allows

23RISCO

abrir ↗

Referência

CVE-2009-4823

CVE-2009-4823—

Cross-site scripting (XSS) vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote a

23RISCO

abrir ↗

Referência

CVE-2019-10849

CVE-2019-10849—

Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.

23RISCO

abrir ↗

Referência

CVE-2021-30149

CVE-2021-30149—

Composr 10.0.36 allows upload and execution of PHP files.

28RISCO

abrir ↗

Referência

CVE-2015-2291

CVE-2015-2291HIGHsob ataqueransomware

(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows all

71RISCO

abrir ↗

Referência✓ VexDay Proof

WMNews 0.2a - 'base_datapath' Remote File Inclusion

CVE-2006-3928—webappsphp

PHP remote file inclusion vulnerability in index.php in WMNews 0.2a and earlier allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2017-5631

CVE-2017-5631—

An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter (i.e., "usr"

38RISCO

abrir ↗

Referência

CVE-2012-6534

CVE-2012-6534—

Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/

23RISCO

abrir ↗

Referência

CVE-2020-1027

CVE-2020-1027HIGHsob ataque

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Window

71RISCO

abrir ↗

Referência✓ VexDay Proof

Dyncms Release 6 - 'x_admindir' Remote File Inclusion

CVE-2006-4589—webappsphp

PHP remote file inclusion vulnerability in 0_admin/modules/Wochenkarte/frontend/index.php in DynCMS 6 and earlier allows

23RISCO

abrir ↗

Referência

CVE-2018-19799

CVE-2018-19799—

Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS.

23RISCO

abrir ↗

Referência

CVE-2018-19799

CVE-2018-19799—

Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS.

23RISCO

abrir ↗

Referência

CVE-2022-21723

CVE-2022-21723CRITICAL

Out-of-bounds read in multipart parsing in PJSIP

48RISCO

abrir ↗

Referência

CVE-2019-7273

CVE-2019-7273—

Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF).

23RISCO

abrir ↗

Referência

CVE-2023-31703

CVE-2023-31703CRITICAL

Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allo

48RISCO

abrir ↗

Referência✓ VexDay Proof

hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities

CVE-2007-6500—webappsasp

Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to delete

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component CopperminePhotoGalery - Remote File Inclusion

CVE-2006-4321—webappsphp

PHP remote file inclusion vulnerability in cpg.php in the Coppermine Photo Gallery component (com_cpg) 1.0 and earlier f

23RISCO

abrir ↗

Referência

CVE-2021-28417

CVE-2021-28417—

A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and t

23RISCO

abrir ↗

Referência

CVE-2010-1599

CVE-2010-1599—

SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2010-1599

CVE-2010-1599—

SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2010-1604

CVE-2010-1604—

Multiple SQL injection vulnerabilities in admin_login.php in NCT Jobs Portal Script allow remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2010-1604

CVE-2010-1604—

Multiple SQL injection vulnerabilities in admin_login.php in NCT Jobs Portal Script allow remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2010-1653

CVE-2010-1653—

Directory traversal vulnerability in graphics.php in the Graphics (com_graphics) component 1.0.6 and 1.5.0 for Joomla! a

43RISCO

abrir ↗

Referência

CVE-2010-1657

CVE-2010-1657—

Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0.0 for Joomla! allows remote attackers t

43RISCO

abrir ↗

Referência

CVE-2010-1657

CVE-2010-1657—

Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0.0 for Joomla! allows remote attackers t

43RISCO

abrir ↗

Referência

CVE-2010-1658

CVE-2010-1658—

Directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboard) component 1.3 for Joomla! allows remo

43RISCO

abrir ↗

Referência

CVE-2010-1658

CVE-2010-1658—

Directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboard) component 1.3 for Joomla! allows remo

43RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.