Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.107exploits catalogados

34.679CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.692 exploits

Referência

CVE-2013-10054

CVE-2013-10054CRITICAL

LibrettoCMS File Manager Arbitrary File Upload

63RISCO

abrir ↗

Referência

CVE-2013-10054

CVE-2013-10054CRITICAL

LibrettoCMS File Manager Arbitrary File Upload

63RISCO

abrir ↗

Referência

CVE-2013-10054

CVE-2013-10054CRITICAL

LibrettoCMS File Manager Arbitrary File Upload

63RISCO

abrir ↗

Referência

CVE-2012-4281

CVE-2012-4281—

Multiple SQL injection vulnerabilities in Travelon Express 6.2.2 allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dokeos 1.6.5 - 'courseLog.php?scormcontopen' SQL Injection

CVE-2007-2889—webappsphp

SQL injection vulnerability in tracking/courseLog.php in Dokeos 1.6.5 and earlier allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Pony Gallery 1.5 - SQL Injection

CVE-2007-4046—webappsphp

SQL injection vulnerability in index.php in the Pony Gallery (com_ponygallery) 1.5 and earlier component for Joomla! all

23RISCO

abrir ↗

Referência✓ VexDay Proof

xGB 2.0 - 'xGB.php' Remote Security Bypass

CVE-2007-4637—webappsphp

xGB.php in xGB 2.0 does not require authentication for an admin edit action, which allows remote attackers to make unspe

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPizabi 0.848b C1 HFP3 - Database Information Disclosure

CVE-2008-2018—webappsphp

The AssignUser function in template.class.php in PHPizabi 0.848b C1 HFP3 performs unsafe macro expansions on strings del

23RISCO

abrir ↗

Referência✓ VexDay Proof

DreamNews Manager - 'id' SQL Injection

CVE-2008-3189—webappsphp

SQL injection vulnerability in dreamnews-rss.php in DreamNews Manager allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

CodeDB 1.1.1 - 'list.php' Local File Inclusion

CVE-2008-3190—webappsphp

Directory traversal vulnerability in list.php in 1Scripts CodeDB 1.1.1 allows remote attackers to include and execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

P2P Foxy - Out of Memory Denial of Service

CVE-2008-6742—doswindows

Foxy P2P software allows remote attackers to cause a denial of service (memory consumption) via a foxy URI with a downlo

23RISCO

abrir ↗

Referência

CVE-2008-0158

CVE-2008-0158—

Directory traversal vulnerability in index.php in Shop-Script 2.0 and possibly other versions allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2014-5104

CVE-2014-5104—

Multiple SQL injection vulnerabilities in ol-commerce 2.1.1 allow remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2017-5223

CVE-2017-5223—

An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML docume

23RISCO

abrir ↗

Referência

Flatpress Add Blog 1.0.3 - Persistent Cross-Site Scripting

CVE-2020-35241—webappsphp

FlatPress 1.0.3 is affected by cross-site scripting (XSS) in the Blog Content component. This vulnerability can allow an

23RISCO

abrir ↗

Referência

CVE-2024-6330

CVE-2024-6330CRITICAL

GEO my WordPress < 4.4.0.2 - Unauthenticated RCE via LFI

48RISCO

abrir ↗

Referência

CVE-2013-10038

CVE-2013-10038CRITICAL

FlashChat Arbitrary File Upload RCE

63RISCO

abrir ↗

Referência✓ VexDay Proof

Shop-Script 2.0 - 'index.php' Remote File Disclosure

CVE-2008-0158—webappsphp

Directory traversal vulnerability in index.php in Shop-Script 2.0 and possibly other versions allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2009-3511

CVE-2009-3511—

Multiple PHP remote file inclusion vulnerabilities in justVisual 1.2 allow remote attackers to execute arbitrary PHP cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

sma-db 0.3.12 - Remote File Inclusion / Cross-Site Scripting

CVE-2009-1450—webappsphp

PHP remote file inclusion vulnerability in format.php in SMA-DB 0.3.12 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

MFORUM 0.1a - Arbitrary Add Admin

CVE-2008-3191—webappsphp

Multiple SQL injection vulnerabilities in usercp.php in mForum 0.1a, when magic_quotes_gpc is disabled, allow remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

jsite 1.0 oe - SQL Injection / Local File Inclusion

CVE-2008-3193—webappsphp

SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page param

23RISCO

abrir ↗

Referência

Collabtive 3.1 - 'address' Persistent Cross-Site Scripting

CVE-2021-3298—webappsphp

Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit

23RISCO

abrir ↗

Referência

CVE-2007-1107

CVE-2007-1107—

SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users

23RISCO

abrir ↗

Referência

CVE-2015-1576

CVE-2015-1576—

Multiple SQL injection vulnerabilities in u5CMS before 3.9.4 allow remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência

CVE-2015-0919

CVE-2015-0919—

Multiple SQL injection vulnerabilities in the administrative backend in Sefrengo before 1.6.1 allow remote administrator

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zix Forum 1.12 - 'layid' SQL Injection

CVE-2006-2541—webappsasp

SQL injection vulnerability in settings.asp in Zixforum 1.12 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bitweaver 2.6 - 'saveFeed()' Remote Code Execution

CVE-2009-1677—webappsphp

Multiple static code injection vulnerabilities in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 an

23RISCO

abrir ↗

Referência

CVE-2012-1069

CVE-2012-1069—

Cross-site scripting (XSS) vulnerability in module/kb/search_word in the search module in lknSupport allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

The Bible Portal Project 2.12 - 'destination' File Inclusion

CVE-2006-3177—webappsphp

PHP remote file inclusion vulnerability in Admin/rtf_parser.php in The Bible Portal Project 2.12 and earlier allows remo

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.