Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.066exploits catalogados
34.679CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.692GitHub PoC 13.771VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentespopularesrisco
21.662 exploits
Referência
CVE-2014-2008
CVE-2014-2008—
SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attacker
23RISCO
abrir ↗
Referência
CVE-2013-5317
CVE-2013-5317—
Cross-site scripting (XSS) vulnerability in RiteCMS 1.0.0 allows remote authenticated users to inject arbitrary web scri
23RISCO
abrir ↗
Referência
CVE-2013-5317
CVE-2013-5317—
Cross-site scripting (XSS) vulnerability in RiteCMS 1.0.0 allows remote authenticated users to inject arbitrary web scri
23RISCO
abrir ↗
Referência
CVE-2013-7194
CVE-2013-7194—
Multiple cross-site scripting (XSS) vulnerabilities in www/administrator.php in eFront 3.6.14 (build 18012) allow remote
23RISCO
abrir ↗
Referência
CVE-2013-7194
CVE-2013-7194—
Multiple cross-site scripting (XSS) vulnerabilities in www/administrator.php in eFront 3.6.14 (build 18012) allow remote
23RISCO
abrir ↗
Referência
CVE-2014-5276
CVE-2014-5276—
Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated u
23RISCO
abrir ↗
Referência
CVE-2012-10054
CVE-2012-10054CRITICAL
Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE
63RISCO
abrir ↗
Referência
CVE-2017-16841
CVE-2017-16841—
LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx.
23RISCO
abrir ↗
Referência
CVE-2012-10054
CVE-2012-10054CRITICAL
Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE
63RISCO
abrir ↗
Referência
CVE-2012-10054
CVE-2012-10054CRITICAL
Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE
63RISCO
abrir ↗
Referência
CVE-2014-4162
CVE-2014-4162—
Multiple cross-site request forgery (CSRF) vulnerabilities in the Zyxel P-660HW-T1 (v3) wireless router allow remote att
23RISCO
abrir ↗
Referência
CVE-2014-4162
CVE-2014-4162—
Multiple cross-site request forgery (CSRF) vulnerabilities in the Zyxel P-660HW-T1 (v3) wireless router allow remote att
23RISCO
abrir ↗
Referência
CVE-2009-4224
CVE-2009-4224—
Multiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and earlier allow remote attackers to exec
23RISCO
abrir ↗
Referência
CVE-2009-4224
CVE-2009-4224—
Multiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and earlier allow remote attackers to exec
23RISCO
abrir ↗
Referência
CVE-2009-2231
CVE-2009-2231—
MIDAS 1.43 allows remote attackers to bypass authentication and obtain administrative access via an admin account record
23RISCO
abrir ↗
Referência
CVE-2014-7281
CVE-2014-7281—
Cross-site request forgery (CSRF) vulnerability in Shenzhen Tenda Technology Tenda A32 Router with firmware 5.07.53_CN a
23RISCO
abrir ↗
Referência
CVE-2014-7281
CVE-2014-7281—
Cross-site request forgery (CSRF) vulnerability in Shenzhen Tenda Technology Tenda A32 Router with firmware 5.07.53_CN a
23RISCO
abrir ↗
Referência
CVE-2012-1900
CVE-2012-1900—
Cross-site request forgery (CSRF) vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier allows remote attackers
23RISCO
abrir ↗
Referência
CVE-2012-1900
CVE-2012-1900—
Cross-site request forgery (CSRF) vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier allows remote attackers
23RISCO
abrir ↗
Referência
CVE-2015-7865
CVE-2015-7865—
nvSCPAPISvr.exe in the Stereoscopic 3D Driver Service in the NVIDIA GPU graphics driver R340 before 341.92, R352 before
23RISCO
abrir ↗
Referência
CVE-2015-7865
CVE-2015-7865—
nvSCPAPISvr.exe in the Stereoscopic 3D Driver Service in the NVIDIA GPU graphics driver R340 before 341.92, R352 before
23RISCO
abrir ↗
Referência
CVE-2018-25080
CVE-2018-25080LOW
MobileDetect Example session_example.php initLayoutType cross site scripting
28RISCO
abrir ↗
Referência
CVE-2009-4546
CVE-2009-4546—
globepersonnel_login.asp in Logoshows BBS 2.0 allows remote attackers to bypass authentication and gain administrative a
23RISCO
abrir ↗
Referência✓ VexDay Proof
empris r20020923 - 'phormationdir' Remote File Inclusion
CVE-2006-2962—webappsphp
PHP remote file inclusion vulnerability in sql_fcnsOLD.php in Emergenices Personnel Information System (Empris) 20020923
23RISCO
abrir ↗
Referência✓ VexDay Proof
registroTL - 'main.php' Remote File Inclusion
CVE-2006-5316—webappsphp
registroTL stores sensitive information under the web root with insufficient access control, which allows remote attacke
23RISCO
abrir ↗
Referência✓ VexDay Proof
AS-GasTracker 1.0.0 - Insecure Cookie Handling
CVE-2008-2269—webappsphp
AustinSmoke GasTracker (AS-GasTracker) 1.0.0 allows remote attackers to bypass authentication and gain privileges by set
23RISCO
abrir ↗
Referência✓ VexDay Proof
phpscripts Ranking Script - Insecure Cookie Handling
CVE-2008-6092—webappsphp
phpscripts Ranking Script allows remote attackers to bypass authentication and gain administrative access by sending an
23RISCO
abrir ↗
Referência
CVE-2018-19041
CVE-2018-19041—
The Media File Manager plugin 1.4.2 for WordPress allows XSS via the dir parameter of an mrelocator_getdir action to the
23RISCO
abrir ↗
Referência
CVE-2022-47877
CVE-2022-47877CRITICAL
A Stored cross-site scripting vulnerability in Jedox 2020.2.5 allows remote, authenticated users to inject arbitrary web
48RISCO
abrir ↗
Referência
CVE-2017-12971
CVE-2017-12971—
Cross-site scripting (XSS) vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script or
23RISCO
abrir ↗
← anteriorpágina 284 / 723próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.