Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.313exploits catalogados

34.834CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentes populares risco

21.797 exploits

Referência

CVE-2014-1944

CVE-2014-1944—

Cross-site scripting (XSS) vulnerability in Ilch CMS 2.0 and earlier allows remote attackers to inject arbitrary web scr

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPizabi 0.848b C1 HFP1 - Arbitrary File Upload

CVE-2008-0805—webappsphp

Unrestricted file upload vulnerability in image.php in PHPizabi 0.848b C1 HFP1 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2017-11120

CVE-2017-11120—

On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor repo

23RISCO

abrir ↗

Referência✓ VexDay Proof

SugarCRM Community Edition 4.5.1/5.0.0 - File Disclosure

CVE-2008-2045—webappsphp

Absolute path traversal vulnerability in SugarCRM Sugar Community Edition 4.5.1 and 5.0.0 allows remote attackers to rea

23RISCO

abrir ↗

Referência

CVE-2016-1755

CVE-2016-1755—

The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to exe

23RISCO

abrir ↗

Referência

CVE-2015-4591

CVE-2015-4591—

eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows remo

23RISCO

abrir ↗

Referência

CVE-2015-4591

CVE-2015-4591—

eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows remo

23RISCO

abrir ↗

Referência

CVE-2009-2766

CVE-2009-2766—

httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs unde

23RISCO

abrir ↗

Referência

CVE-2009-4453

CVE-2009-4453—

Insecure method vulnerability in SoftCab Sound Converter ActiveX control (sndConverter.ocx) 1.2 allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-2313

CVE-2010-2313—

Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic_qu

23RISCO

abrir ↗

Referência

CVE-2010-2313

CVE-2010-2313—

Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic_qu

23RISCO

abrir ↗

Referência

CVE-2019-1476

CVE-2019-1476—

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

23RISCO

abrir ↗

Referência

CVE-2019-1152

CVE-2019-1152HIGH

Microsoft Graphics Remote Code Execution Vulnerability

46RISCO

abrir ↗

Referência✓ VexDay Proof

PPLive 1.9.21 - '/LoadModule' URI Handlers Argument Injection

CVE-2009-1087—remotewindows

Multiple argument injection vulnerabilities in PPLive.exe in PPLive 1.9.21 and earlier allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebMatic 2.6 - 'index_album.php' Remote File Inclusion

CVE-2007-0839—webappsphp

Multiple PHP remote file inclusion vulnerabilities in index/index_album.php in Valarsoft WebMatic 2.6 allow remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

STWC-Counter 3.4.0 - 'downloadcounter.php' Remote File Inclusion

CVE-2007-1233—webappsphp

PHP remote file inclusion vulnerability in downloadcounter.php in STWC-Counter 3.4.0.0 and earlier allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2009-3714

CVE-2009-3714—

Cross-site scripting (XSS) vulnerability in admin_login.php in MCshoutbox 1.1 allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência

CVE-2015-2553

CVE-2015-2553—

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi

23RISCO

abrir ↗

Referência

CVE-2015-2553

CVE-2015-2553—

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi

23RISCO

abrir ↗

Referência

CVE-2015-2798

CVE-2015-2798—

SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2010-2018

CVE-2010-2018—

Directory traversal vulnerability in downlot.php in Lokomedia CMS 1.4.1 and 2.0 allows remote attackers to read arbitrar

38RISCO

abrir ↗

Referência

CVE-2014-3247

CVE-2014-3247—

Cross-site scripting (XSS) vulnerability in Collabtive 1.2 allows remote authenticated users to inject arbitrary web scr

23RISCO

abrir ↗

Referência✓ VexDay Proof

PUMA 1.0 RC 2 - 'config.php' Remote File Inclusion

CVE-2006-4713—webappsphp

PHP remote file inclusion vulnerability in config.php in PSYWERKS PUMA 1.0 RC2 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

compteur 2.0 - 'param_editor.php' Remote File Inclusion

CVE-2006-5259—webappsphp

PHP remote file inclusion vulnerability in param_editor.php in Compteur 2 allows remote attackers to execute arbitrary P

23RISCO

abrir ↗

Referência

CVE-2015-7901

CVE-2015-7901—

Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Segue CMS 1.5.8 - 'themesdir' Remote File Inclusion

CVE-2006-5497—webappsphp

PHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier, when reg

23RISCO

abrir ↗

Referência

CVE-2015-10137

CVE-2015-10137CRITICAL

Website Contact Form With File Upload <= 1.3.4 - Arbitrary File Upload

63RISCO

abrir ↗

Referência✓ VexDay Proof

a-ConMan 3.2b - 'common.inc.php' Remote File Inclusion

CVE-2006-6078—webappsphp

PHP remote file inclusion vulnerability in common.inc.php in a-ConMan 3.2 beta allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

CM68 News 12.02.06 - 'addpth' Remote File Inclusion

CVE-2006-6462—webappsphp

PHP remote file inclusion vulnerability in engine/oldnews.inc.php in CM68 News 12.02.06 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Macromedia Flash 8 (Flash8b.ocx) Internet Explorer 7 - Denial of Service

CVE-2006-6827—doswindows

Flash8b.ocx in Macromedia Flash 8 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.