Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

22.573 exploits

Referência

CVE-2018-0777

CVE-2018-0777—

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitra

45RISCO

abrir ↗

Referência✓ VexDay Proof

PHP infoBoard 7 - Plus Insecure Cookie Handling

CVE-2008-4334—webappsphp

PHP infoBoard V.7 Plus allows remote attackers to bypass authentication and gain administrative access by setting the in

23RISCO

abrir ↗

Referência✓ VexDay Proof

Talkback 2.3.6 - Multiple Local File Inclusion / PHPInfo Disclosure Vulnerabilities

CVE-2008-4346—webappsphp

Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

pNews 2.03 - 'newsid' SQL Injection

CVE-2008-4347—webappsphp

SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpsmartcom 0.2 - Local File Inclusion / SQL Injection

CVE-2008-4352—webappsphp

SQL injection vulnerability in inc/pages/viewprofile.php in phpSmartCom 0.2 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

iBoutique 4.0 - 'cat' SQL Injection

CVE-2008-4354—webappsphp

SQL injection vulnerability in the products module in NetArt Media iBoutique 4.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

pForum 1.30 - 'showprofil.php' SQL Injection

CVE-2008-4355—webappsphp

SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum (aka PHP Forum or pForum) 1.30 and earlier allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

DESlock+ < 3.2.7 - 'probe read' Local Kernel Denial of Service (PoC)

CVE-2008-4363—doswindows

DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) or potentially exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Devalcms 1.4a - Cross-Site Scripting / Remote Code Execution

CVE-2008-6983—webappsphp

modules/tool/hitcounter.php in devalcms 1.4a allows remote attackers to execute arbitrary PHP code via the HTTP Referer

23RISCO

abrir ↗

Referência

CVE-2012-2227

CVE-2012-2227—

Directory traversal vulnerability in update/index.php in PluXml before 5.1.6 allows remote attackers to include and exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

ParsaWeb CMS - 'Search' SQL Injection

CVE-2008-4364—webappsasp

SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2012-2234

CVE-2012-2234—

Cross-site scripting (XSS) vulnerability in sources/users.queries.php in TeamPass before 2.1.6 allows remote authenticat

23RISCO

abrir ↗

Referência

CVE-2018-5999

CVE-2018-5999—

An issue was discovered in AsusWRT before 3.0.0.4.384_10007. In the handle_request function in router/httpd/httpd.c, pro

60RISCO

abrir ↗

Referência

CVE-2018-5999

CVE-2018-5999—

An issue was discovered in AsusWRT before 3.0.0.4.384_10007. In the handle_request function in router/httpd/httpd.c, pro

60RISCO

abrir ↗

Referência

CVE-2018-0101

CVE-2018-0101—

A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Softw

45RISCO

abrir ↗

Referência✓ VexDay Proof

AjPortal2Php - 'PagePrefix' Remote File Inclusion

CVE-2007-2142—webappsphp

Multiple PHP remote file inclusion vulnerabilities in AjPortal2Php allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência✓ VexDay Proof

AvailScript Photo Album - 'pics.php' Multiple Vulnerabilities

CVE-2008-4370—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

AvailScript Jobs Portal Script - 'jid' SQL Injection

CVE-2008-4373—webappsphp

SQL injection vulnerability in job_seeker/applynow.php in AvailScript Job Portal Script allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

AvailScript Classmate Script - 'viewprofile.php' SQL Injection

CVE-2008-4375—webappsphp

SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Live TV Script - 'index.php?mid' SQL Injection

CVE-2008-4376—webappsphp

SQL injection vulnerability in index.php in Live TV Script allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2019-11358

CVE-2019-11358—

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) becaus

45RISCO

abrir ↗

Referência

CVE-2019-11358

CVE-2019-11358—

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) becaus

45RISCO

abrir ↗

Referência

CVE-2019-11358

CVE-2019-11358—

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) becaus

45RISCO

abrir ↗

Referência✓ VexDay Proof

BBlog 0.7.6 - 'mod' SQL Injection

CVE-2008-4436—webappsphp

SQL injection vulnerability in bblog_plugins/builtin.help.php in bBlog 0.7.6 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2022-31706

CVE-2022-31706CRITICAL

The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject fi

85RISCO

abrir ↗

Referência

CVE-2022-31706

CVE-2022-31706CRITICAL

The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject fi

85RISCO

abrir ↗

Referência

D-Link DWL-2600AP - Multiple OS Command Injection

CVE-2019-20500HIGHsob ataquewebappshardware

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configura

93RISCO

abrir ↗

Referência✓ VexDay Proof

Natterchat 1.1 - Authentication Bypass

CVE-2008-7049—webappsphp

Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2009-2310

CVE-2009-2310—

SQL injection vulnerability in include/get_read.php in Extensible-BioLawCom CMS (X-BLC) 0.2.0 and earlier allows remote

23RISCO

abrir ↗

Referência

CVE-2008-4447

CVE-2008-4447—

Cross-site scripting (XSS) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote atta

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.