Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.902exploits catalogados

34.597CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentes populares risco

21.624 exploits

Referência✓ VexDay Proof

Htaccess Passwort Generator 1.1 - 'ht_pfad' Remote File Inclusion

CVE-2007-1013—webappsphp

PHP remote file inclusion vulnerability in generate.php in VirtualSystem Htaccess Passwort Generator 1.1 allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

ClassWeb 2.0.3 - 'BASE' Remote File Inclusion

CVE-2007-1640—webappsphp

Multiple PHP remote file inclusion vulnerabilities in ClassWeb 2.03 and earlier allow remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution

CVE-2007-4061—remotewindows

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attac

28RISCO

abrir ↗

Referência✓ VexDay Proof

eXeScope 6.50 - Local Buffer Overflow

CVE-2009-1063—localwindows

Buffer overflow in eXeScope 6.50 allows user-assisted remote attackers to execute arbitrary code via a crafted executabl

23RISCO

abrir ↗

Referência

CVE-2010-4821

CVE-2010-4821—

Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Referência

CVE-2010-1947

CVE-2010-1947—

Directory traversal vulnerability in scr/soustab.php in openMairie Openregistrecil 1.02, when register_globals is enable

23RISCO

abrir ↗

Referência

CVE-2010-1947

CVE-2010-1947—

Directory traversal vulnerability in scr/soustab.php in openMairie Openregistrecil 1.02, when register_globals is enable

23RISCO

abrir ↗

Referência

Veyon 4.4.1 - 'VeyonService' Unquoted Service Path

CVE-2020-15261HIGHlocalwindows

Unquoted service path vulnerability on Veyon

46RISCO

abrir ↗

Referência

CVE-2014-9178

CVE-2014-9178—

Multiple SQL injection vulnerabilities in classes/ajax.php in the Smarty Pants Plugins SP Project & Document Manager plu

23RISCO

abrir ↗

Referência

CVE-2014-9175

CVE-2014-9175—

SQL injection vulnerability in wpdatatables.php in the wpDataTables plugin 1.5.3 and earlier for WordPress allows remote

23RISCO

abrir ↗

Referência

CVE-2014-9175

CVE-2014-9175—

SQL injection vulnerability in wpdatatables.php in the wpDataTables plugin 1.5.3 and earlier for WordPress allows remote

23RISCO

abrir ↗

Referência

CVE-2012-1002

CVE-2012-1002—

SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2015-2216

CVE-2015-2216—

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2015-2216

CVE-2015-2216—

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2015-2090

CVE-2015-2090—

SQL injection vulnerability in the ajax_survey function in settings.php in the WordPress Survey and Poll plugin 1.1.7 fo

23RISCO

abrir ↗

Referência

CVE-2015-2090

CVE-2015-2090—

SQL injection vulnerability in the ajax_survey function in settings.php in the WordPress Survey and Poll plugin 1.1.7 fo

23RISCO

abrir ↗

Referência

CVE-2014-10013

CVE-2014-10013—

SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2014-10013

CVE-2014-10013—

SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sphider 1.3 - 'configset.php' Remote File Inclusion

CVE-2006-1784—webappsphp

PHP remote file inclusion vulnerability in admin/configset.php in Sphider 1.3 and earlier, when register_globals is disa

23RISCO

abrir ↗

Referência

CVE-2012-2276

CVE-2012-2276—

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote

23RISCO

abrir ↗

Referência

CVE-2017-18195

CVE-2017-18195—

An issue was discovered in tools/conversations/view_ajax.php in Concrete5 before 8.3.0. An unauthenticated user can enum

28RISCO

abrir ↗

Referência

CVE-2013-6793

CVE-2013-6793—

Multiple cross-site scripting (XSS) vulnerabilities in the Calendar module in Olat 7.8.0.1 (b20130821 N1) allow remote a

23RISCO

abrir ↗

Referência

CVE-2015-4667

CVE-2015-4667—

Multiple hardcoded credentials in Xsuite 2.x.

28RISCO

abrir ↗

Referência

CVE-2017-13869

CVE-2017-13869—

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS b

23RISCO

abrir ↗

Referência

CVE-2010-1302

CVE-2010-1302—

Directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs (com_dwgraphs) component 1.0 for Joomla! a

38RISCO

abrir ↗

Referência

CVE-2018-10504

CVE-2018-10504—

The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection.

23RISCO

abrir ↗

Referência

CVE-2021-43140

CVE-2021-43140—

SQL Injection vulnerability exists in Sourcecodester. Simple Subscription Website 1.0. via the login.

23RISCO

abrir ↗

Referência

CVE-2010-1186

CVE-2010-1186—

Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress a

23RISCO

abrir ↗

Referência

CVE-2015-4010

CVE-2015-4010—

Cross-site request forgery (CSRF) vulnerability in the Encrypted Contact Form plugin before 1.1 for WordPress allows rem

23RISCO

abrir ↗

Referência

CVE-2015-4010

CVE-2015-4010—

Cross-site request forgery (CSRF) vulnerability in the Encrypted Contact Form plugin before 1.1 for WordPress allows rem

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.