Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.652exploits catalogados

34.545CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.581GitHub PoC 13.708VulnCheck XDB 8.225Nuclei 4.228Metasploit 3.467✓ só verificadosrecentes populares risco

21.581 exploits

Referência

CVE-2020-7680

CVE-2020-7680—

docsify prior to 4.11.4 is susceptible to Cross-site Scripting (XSS). Docsify.js uses fragment identifiers (parameters a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PPC Search Engine 1.61 - 'INC' Multiple Remote File Inclusions

CVE-2007-0167—webappsphp

Multiple PHP file inclusion vulnerabilities in WGS-PPC (aka PPC Search Engine), as distributed with other aliases, allow

28RISCO

abrir ↗

Referência✓ VexDay Proof

fresh email script 1.0 - Multiple Vulnerabilities

CVE-2008-7043—webappsphp

Cross-site scripting (XSS) vulnerability in register.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remo

23RISCO

abrir ↗

Referência

CVE-2022-3982

CVE-2022-3982CRITICAL

Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload

63RISCO

abrir ↗

Referência

CVE-2014-2045

CVE-2014-2045—

Multiple cross-site scripting (XSS) vulnerabilities in the old and new interfaces in Viprinet Multichannel VPN Router 30

23RISCO

abrir ↗

Referência

CVE-2014-2045

CVE-2014-2045—

Multiple cross-site scripting (XSS) vulnerabilities in the old and new interfaces in Viprinet Multichannel VPN Router 30

23RISCO

abrir ↗

Referência

CVE-2010-1528

CVE-2010-1528—

PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when register_globals is enabled, allows

23RISCO

abrir ↗

Referência

CVE-2009-4823

CVE-2009-4823—

Cross-site scripting (XSS) vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote a

23RISCO

abrir ↗

Referência

CVE-2019-10849

CVE-2019-10849—

Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.

23RISCO

abrir ↗

Referência

CVE-2021-30149

CVE-2021-30149—

Composr 10.0.36 allows upload and execution of PHP files.

28RISCO

abrir ↗

Referência

CVE-2015-2291

CVE-2015-2291HIGHsob ataqueransomware

(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows all

71RISCO

abrir ↗

Referência✓ VexDay Proof

WMNews 0.2a - 'base_datapath' Remote File Inclusion

CVE-2006-3928—webappsphp

PHP remote file inclusion vulnerability in index.php in WMNews 0.2a and earlier allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2017-5631

CVE-2017-5631—

An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter (i.e., "usr"

38RISCO

abrir ↗

Referência

CVE-2012-6534

CVE-2012-6534—

Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/

23RISCO

abrir ↗

Referência

CVE-2020-1027

CVE-2020-1027HIGHsob ataque

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Window

71RISCO

abrir ↗

Referência✓ VexDay Proof

Dyncms Release 6 - 'x_admindir' Remote File Inclusion

CVE-2006-4589—webappsphp

PHP remote file inclusion vulnerability in 0_admin/modules/Wochenkarte/frontend/index.php in DynCMS 6 and earlier allows

23RISCO

abrir ↗

Referência

CVE-2018-19799

CVE-2018-19799—

Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS.

23RISCO

abrir ↗

Referência

CVE-2018-19799

CVE-2018-19799—

Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS.

23RISCO

abrir ↗

Referência

CVE-2022-21723

CVE-2022-21723CRITICAL

Out-of-bounds read in multipart parsing in PJSIP

48RISCO

abrir ↗

Referência

CVE-2019-7273

CVE-2019-7273—

Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF).

23RISCO

abrir ↗

Referência

CVE-2023-31703

CVE-2023-31703CRITICAL

Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allo

48RISCO

abrir ↗

Referência✓ VexDay Proof

hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities

CVE-2007-6500—webappsasp

Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to delete

23RISCO

abrir ↗

Referência

CVE-2018-20782

CVE-2018-20782—

The GloBee plugin before 1.1.2 for WooCommerce mishandles IPN messages.

28RISCO

abrir ↗

Referência

CVE-2010-1535

CVE-2010-1535—

Directory traversal vulnerability in the TRAVELbook (com_travelbook) component 1.0.1 for Joomla! allows remote attackers

43RISCO

abrir ↗

Referência

CVE-2021-28379

CVE-2021-28379—

web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allow

23RISCO

abrir ↗

Referência

CVE-2013-2474

CVE-2013-2474—

Directory traversal vulnerability in AWS XMS 2.5 allows remote attackers to view arbitrary files via the 'what' paramete

28RISCO

abrir ↗

Referência

CVE-2013-0238

CVE-2013-0238—

The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which allo

23RISCO

abrir ↗

Referência

CVE-2015-2291

CVE-2015-2291HIGHsob ataqueransomware

(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows all

71RISCO

abrir ↗

Referência

CVE-2018-7538

CVE-2018-7538—

A SQL injection vulnerability in the tracker functionality of Enalean Tuleap software engineering platform before 9.18 a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hewlett Packard 1.0.0.309 - 'hpqvwocx.dll' ActiveX Magview Overflow (PoC)

CVE-2007-2656—doswindows

Stack-based buffer overflow in the Hewlett-Packard (HP) Magview ActiveX control in hpqvwocx.dll 1.0.0.309 allows remote

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.