Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.008exploits catalogados

34.638CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.662 exploits

Referência

CVE-2010-1703

CVE-2010-1703—

Multiple cross-site scripting (XSS) vulnerabilities in index_search.php in 2daybiz Polls (aka Advanced Poll) Script allo

23RISCO

abrir ↗

Referência

CVE-2015-6541

CVE-2015-6541—

Multiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in Zimbra Collaboration Server (ZCS) be

23RISCO

abrir ↗

Referência

CVE-2021-4462

CVE-2021-4462CRITICAL

Employee Records System v1.0 Arbitrary File Upload RCE

63RISCO

abrir ↗

Referência

CVE-2010-1921

CVE-2010-1921—

Multiple PHP remote file inclusion vulnerabilities in OpenMairie openAnnuaire 2.00, when register_globals is enabled, al

23RISCO

abrir ↗

Referência

CVE-2010-1921

CVE-2010-1921—

Multiple PHP remote file inclusion vulnerabilities in OpenMairie openAnnuaire 2.00, when register_globals is enabled, al

23RISCO

abrir ↗

Referência✓ VexDay Proof

JulmaCMS 1.4 - 'file.php' Remote File Disclosure

CVE-2007-2324—webappsphp

Directory traversal vulnerability in file.php in JulmaCMS 1.4 allows remote attackers to read arbitrary files via a .. (

23RISCO

abrir ↗

Referência✓ VexDay Proof

Crysis 1.1.1.5879 - Remote Format String Denial of Service (PoC)

CVE-2008-1127—doswindows

Format string vulnerability in the cryactio function in Crysis 1.1.1.5879 allows remote authenticated users to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

KISGB (tmp_theme) 5.1.1 - Local File Inclusion

CVE-2008-1635—webappsphp

Directory traversal vulnerability in view_private.php in Keep It Simple Guest Book (KISGB) 5.0.0 and earlier allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Carbon Communities 2.4 - Multiple Vulnerabilities

CVE-2008-1896—webappsasp

Multiple cross-site scripting (XSS) vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inje

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebSVN 2.0 - Cross-Site Scripting / File Handling / Code Execution

CVE-2008-5920—webappsphp

The create_anchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a craft

23RISCO

abrir ↗

Referência

CVE-2020-12504

CVE-2020-12504CRITICAL

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

48RISCO

abrir ↗

Referência

CVE-2020-12504

CVE-2020-12504CRITICAL

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

48RISCO

abrir ↗

Referência

CVE-2014-1401

CVE-2014-1401—

Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2014-1401

CVE-2014-1401—

Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2016-5845

CVE-2016-5845—

SAP SAPCAR does not check the return value of file operations when extracting files, which allows remote attackers to ca

23RISCO

abrir ↗

Referência

CVE-2016-5845

CVE-2016-5845—

SAP SAPCAR does not check the return value of file operations when extracting files, which allows remote attackers to ca

23RISCO

abrir ↗

Referência

YouPHPTube 7.2 - 'userCreate.json.php' SQL Injection

CVE-2019-14430—webappsphp

plugin/Audit/Objects/AuditTable.php in YouPHPTube through 7.2 allows SQL Injection.

23RISCO

abrir ↗

Referência

CVE-2017-6411

CVE-2017-6411—

Cross Site Request Forgery (CSRF) on D-Link DSL-2730U C1 IN_1.00 devices allows remote attackers to change the DNS or fi

23RISCO

abrir ↗

Referência

CVE-2019-6146

CVE-2019-6146—

It has been reported that cross-site scripting (XSS) is possible in Forcepoint Web Security, version 8.x, via host heade

23RISCO

abrir ↗

Referência✓ VexDay Proof

neuron news 1.0 - 'index.php?q' Local File Inclusion

CVE-2007-5050—webappsphp

Directory traversal vulnerability in index.php in Neuron News 1.0 allows remote attackers to include and execute arbitra

23RISCO

abrir ↗

Referência

CVE-2016-9018

CVE-2016-9018—

Improper handling of a repeating VRAT chunk in qcpfformat.dll allows attackers to cause a Null pointer dereference and c

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke addon Nuke Mobile Entartainment 1.0 - Local File Inclusion

CVE-2007-5069—webappsphp

Directory traversal vulnerability in data/compatible.php in the Nuke Mobile Entertainment 1 addon for PHP-Nuke allows re

23RISCO

abrir ↗

Referência

CVE-2017-9767

CVE-2017-9767—

Multiple cross-site scripting (XSS) vulnerabilities in Quali CloudShell before 8 allow remote authenticated users to inj

23RISCO

abrir ↗

Referência

CVE-2010-1742

CVE-2010-1742—

Cross-site scripting (XSS) vulnerability in projects.php in Scratcher allows remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência

CVE-2010-1742

CVE-2010-1742—

Cross-site scripting (XSS) vulnerability in projects.php in Scratcher allows remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência✓ VexDay Proof

LiteNews 0.1 - Insecure Cookie Handling

CVE-2008-3508—webappsphp

LiteNews 0.1 (aka 01), and possibly 1.2 and earlier, allows remote attackers to bypass authentication and gain administr

23RISCO

abrir ↗

Referência

CVE-2017-9767

CVE-2017-9767—

Multiple cross-site scripting (XSS) vulnerabilities in Quali CloudShell before 8 allow remote authenticated users to inj

23RISCO

abrir ↗

Referência

CVE-2009-4753

CVE-2009-4753—

Multiple buffer overflows in the FTP server on the Addonics NAS Adapter NASU2FW41 with loader 1.17 allow remote attacker

23RISCO

abrir ↗

Referência

CVE-2019-6249

CVE-2019-6249—

An issue was discovered in HuCart v5.7.4. There is a CSRF vulnerability that can add an admin account via /adminsys/inde

23RISCO

abrir ↗

Referência

CVE-2017-7056

CVE-2017-7056—

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iClo

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.