Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

22.573 exploits

Referência

CVE-2021-20837

CVE-2021-20837—

Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movab

60RISCO

abrir ↗

Referência

CVE-2021-20837

CVE-2021-20837—

Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movab

60RISCO

abrir ↗

Referência✓ VexDay Proof

CYASK 3.x - 'neturl' Local File Disclosure

CVE-2008-4151—webappsphp

Directory traversal vulnerability in collect.php in CYASK 3.x allows remote attackers to read arbitrary files via a .. (

23RISCO

abrir ↗

Referência

CVE-2020-35729

CVE-2020-35729—

KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter.

60RISCO

abrir ↗

Referência

CVE-2017-17411

CVE-2017-17411—

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0. Authe

60RISCO

abrir ↗

Referência✓ VexDay Proof

CustomCMS 4.0 - 'print.php' SQL Injection

CVE-2008-4156—webappsphp

SQL injection vulnerability in print.php in CustomCms (CCMS) Gaming Portal 4.0, when magic_quotes_gpc is disabled, allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zanfi CMS lite / Jaw Portal free - 'page' SQL Injection

CVE-2008-4159—webappsphp

SQL injection vulnerability in index.php in Jaw Portal and Zanfi CMS lite and allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Collabtive 0.4.8 - Cross-Site Scripting / Authentication Bypass / Arbitrary File Upload

CVE-2008-6947—webappsphp

Collabtive 0.4.8 allows remote attackers to bypass authentication and create new users, including administrators, via un

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_pcchess - Blind SQL Injection

CVE-2009-0379—webappsphp

SQL injection vulnerability in the Prince Clan Chess Club (com_pcchess) component for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2015-2080

CVE-2015-2080—

The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive informat

60RISCO

abrir ↗

Referência

CVE-2012-2156

CVE-2012-2156—

Multiple cross-site scripting (XSS) vulnerabilities in Plume CMS 1.2.4 and earlier allow remote attackers to inject arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

iScripts EasyIndex - 'produid' SQL Injection

CVE-2008-4169—webappsphp

SQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2009-2276

CVE-2009-2276—

SQL injection vulnerability in voteforus.php in the Vote For Us extension 1.0.1 and earlier for PunBB allows remote atta

23RISCO

abrir ↗

Referência

CVE-2004-2466

CVE-2004-2466—

chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username

60RISCO

abrir ↗

Referência

CVE-2004-2466

CVE-2004-2466—

chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username

60RISCO

abrir ↗

Referência✓ VexDay Proof

ProArcadeScript 1.3 - 'random' SQL Injection

CVE-2008-4173—webappsphp

SQL injection vulnerability in ProArcadeScript 1.3 allows remote attackers to execute arbitrary SQL commands via the ran

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre Real Estate Listings - 'search.php' SQL Injection

CVE-2008-4177—webappsphp

SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

XAMPP for Windows 1.6.0a - 'mssql_connect()' Remote Buffer Overflow

CVE-2007-2080—remotewindows

Multiple SQL injection vulnerabilities in XAMPP 1.6.0a for Windows allow remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Discuz! 6.x/7.x - Remote Code Execution

CVE-2008-6958—webappsphp

wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via

23RISCO

abrir ↗

Referência

CVE-2016-1542

CVE-2016-1542—

The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and U

60RISCO

abrir ↗

Referência

CVE-2016-1542

CVE-2016-1542—

The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and U

60RISCO

abrir ↗

Referência

CVE-2016-1542

CVE-2016-1542—

The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and U

60RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! / Mambo Component New Article 1.1 - Remote File Inclusion

CVE-2007-2089—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo and

23RISCO

abrir ↗

Referência

CVE-2018-7357

CVE-2018-7357MEDIUM

ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper acc

55RISCO

abrir ↗

Referência✓ VexDay Proof

Downline Goldmine Category Addon - SQL Injection

CVE-2008-4178—webappsphp

SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and D

23RISCO

abrir ↗

Referência

CVE-2020-8605

CVE-2020-8605—

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitr

60RISCO

abrir ↗

Referência

CVE-2020-8605

CVE-2020-8605—

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitr

60RISCO

abrir ↗

Referência

CVE-2017-11610

CVE-2017-11610—

The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows rem

60RISCO

abrir ↗

Referência

CVE-2019-11409

CVE-2019-11409—

app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerabili

60RISCO

abrir ↗

Referência

CVE-2019-11409

CVE-2019-11409—

app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerabili

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.