Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.902exploits catalogados

34.597CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentes populares risco

21.581 exploits

Referência✓ VexDay Proof

SezHoo 0.1 - Remote File Inclusion

CVE-2008-4704—webappsphp

PHP remote file inclusion vulnerability in SezHooTabsAndActions.php in SezHoo 0.1 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

TemaTres 1.0.3 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2009-1583—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in TemaTres 1.0.3 and 1.031 allow remote attackers to inject arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Philips VOIP841 Firmware 1.0.4.800 - Multiple Vulnerabilities

CVE-2008-4874—remotehardware

The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 has a back door "service

23RISCO

abrir ↗

Referência✓ VexDay Proof

Agares ThemeSiteScript 1.0 - 'loadadminpage' Remote File Inclusion

CVE-2008-5066—webappsphp

PHP remote file inclusion vulnerability in upload/admin/frontpage_right.php in Agares Media ThemeSiteScript 1.0 allows r

23RISCO

abrir ↗

Referência

CVE-2017-5473

CVE-2017-5473—

Cross-site request forgery (CSRF) vulnerability in ntopng through 2.4 allows remote attackers to hijack the authenticati

23RISCO

abrir ↗

Referência

CVE-2005-0853

CVE-2005-0853—

betaparticle blog (bp blog) stores the database under the web root, which allows remote attackers to obtain sensitive in

23RISCO

abrir ↗

Referência

CVE-2015-6518

CVE-2015-6518—

Multiple cross-site scripting (XSS) vulnerabilities in phpLiteAdmin 1.1 allow remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Referência

CVE-2014-5308

CVE-2014-5308—

Multiple SQL injection vulnerabilities in TestLink 1.9.11 allow remote authenticated users to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2014-5308

CVE-2014-5308—

Multiple SQL injection vulnerabilities in TestLink 1.9.11 allow remote authenticated users to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2011-1569

CVE-2011-1569—

download.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of arbitrary files under the web ro

23RISCO

abrir ↗

Referência✓ VexDay Proof

StatIt 4 - 'statitpath' Remote File Inclusion

CVE-2006-2253—webappsphp

PHP remote file inclusion vulnerability in visible_count_inc.php in Statit 4 (060207) allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2019-19726

CVE-2019-19726—

OpenBSD through 6.6 allows local users to escalate to root because a check for LD_LIBRARY_PATH in setuid programs can be

38RISCO

abrir ↗

Referência

CVE-2019-19726

CVE-2019-19726—

OpenBSD through 6.6 allows local users to escalate to root because a check for LD_LIBRARY_PATH in setuid programs can be

38RISCO

abrir ↗

Referência

CVE-2019-19726

CVE-2019-19726—

OpenBSD through 6.6 allows local users to escalate to root because a check for LD_LIBRARY_PATH in setuid programs can be

38RISCO

abrir ↗

Referência

CVE-2014-3080

CVE-2014-3080—

Multiple cross-site scripting (XSS) vulnerabilities on IBM GCM16 and GCM32 Global Console Manager switches with firmware

23RISCO

abrir ↗

Referência

CVE-2014-3080

CVE-2014-3080—

Multiple cross-site scripting (XSS) vulnerabilities on IBM GCM16 and GCM32 Global Console Manager switches with firmware

23RISCO

abrir ↗

Referência

CVE-2014-0984

CVE-2014-0984—

The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation

23RISCO

abrir ↗

Referência

CVE-2010-0673

CVE-2010-0673—

SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress

23RISCO

abrir ↗

Referência

CVE-2010-0673

CVE-2010-0673—

SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress

23RISCO

abrir ↗

Referência

CVE-2021-30147

CVE-2021-30147—

DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php.

23RISCO

abrir ↗

Referência

CVE-2012-1669

CVE-2012-1669—

Directory traversal vulnerability in index.php in phpMoneyBooks before 1.0.3 allows remote attackers to include and exec

23RISCO

abrir ↗

Referência

CVE-2012-1669

CVE-2012-1669—

Directory traversal vulnerability in index.php in phpMoneyBooks before 1.0.3 allows remote attackers to include and exec

23RISCO

abrir ↗

Referência

CVE-2017-14838

CVE-2017-14838—

TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange.

23RISCO

abrir ↗

Referência

CVE-2017-14839

CVE-2017-14839—

TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover.

23RISCO

abrir ↗

Referência✓ VexDay Proof

ISPworker 1.21 - 'download.php' Remote File Disclosure

CVE-2007-5813—webappsphp

Multiple directory traversal vulnerabilities in download.php in ISPworker 1.21 allow remote attackers to read arbitrary

23RISCO

abrir ↗

Referência

CVE-2013-3527

CVE-2013-3527—

Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2013-3527

CVE-2013-3527—

Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-2892

CVE-2010-2892—

gsb/drivers.php in LANDesk Management Gateway 4.0 through 4.0-1.48 and 4.2 through 4.2-1.8 allows remote authenticated a

23RISCO

abrir ↗

Referência

CVE-2009-2238

CVE-2009-2238—

Unrestricted file upload vulnerability in includes/shared_scripts/wysiwyg_editor/assetmanager/assetmanager.asp in DMXRea

23RISCO

abrir ↗

Referência

CVE-2018-10110

CVE-2018-10110—

D-Link DIR-615 T1 devices allow XSS via the Add User feature.

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.