Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.496exploits catalogados

34.964CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8.510Nuclei 4.239Metasploit 3.468✓ só verificadosrecentes populares risco

21.861 exploits

Referência

CVE-2018-15768

CVE-2018-15768—

Insecure MySQL Configuration Vulnerability

23RISCO

abrir ↗

Referência

CVE-2012-5684

CVE-2012-5684—

Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência

CVE-2012-5684

CVE-2012-5684—

Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência

CVE-2013-6923

CVE-2013-6923—

Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331

23RISCO

abrir ↗

Referência

CVE-2013-6923

CVE-2013-6923—

Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331

23RISCO

abrir ↗

Referência

CVE-2015-8356

CVE-2015-8356—

Multiple SQL injection vulnerabilities in the mcart.xls module 6.5.2 and earlier for Bitrix allow remote authenticated u

23RISCO

abrir ↗

Referência

CVE-2012-3236

CVE-2012-3236—

fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and applic

28RISCO

abrir ↗

Referência

CVE-2013-1616

CVE-2013-1616—

The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbit

28RISCO

abrir ↗

Referência

CVE-2007-3806

CVE-2007-3806—

The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbi

28RISCO

abrir ↗

Referência

CVE-2013-3530

CVE-2013-3530—

SQL injection vulnerability in playlist.php in the Spiffy XSPF Player plugin 0.1 for WordPress allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

eCentrex VOIP Client module - 'uacomx.ocx 2.0.1' Remote Buffer Overflow

CVE-2007-4489—remotewindows

Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sejoong Namo ActiveSquare 6 - 'NamoInstaller.dll' ActiveX Buffer Overflow

CVE-2008-0634—remotewindows

Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1, as used in Sejoong Namo

23RISCO

abrir ↗

Referência✓ VexDay Proof

IntelliTamper 2.07 - 'imgsrc' Remote Buffer Overflow

CVE-2008-3583—remotewindows

Buffer overflow in the HTML parser in IntelliTamper 2.07 allows remote attackers to execute arbitrary code via a long UR

23RISCO

abrir ↗

Referência✓ VexDay Proof

dotCMS 1.6 - 'id' Local File Inclusion

CVE-2008-3708—webappsphp

Multiple directory traversal vulnerabilities in dotCMS 1.6.0.9 allow remote attackers to read arbitrary files via a .. (

23RISCO

abrir ↗

Referência✓ VexDay Proof

Advanced Electron Forum 1.0.6 - Remote Code Execution

CVE-2008-5090—webappsphp

Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code em

23RISCO

abrir ↗

Referência

CVE-2019-11537

CVE-2019-11537—

In osTicket before 1.12, XSS exists via /upload/file.php, /upload/scp/users.php?do=import-users, and /upload/scp/ajax.ph

23RISCO

abrir ↗

Referência

CVE-2018-18804

CVE-2018-18804—

Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb.

23RISCO

abrir ↗

Referência

CVE-2018-18804

CVE-2018-18804—

Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb.

23RISCO

abrir ↗

Referência

CVE-2018-13045

CVE-2018-13045—

SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to ex

23RISCO

abrir ↗

Referência

CVE-2018-13045

CVE-2018-13045—

SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cmaps v8.0 - SQL injection

CVE-2023-29809CRITICALwebappsphp

SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbit

53RISCO

abrir ↗

Referência

CVE-2014-9331

CVE-2014-9331—

Cross-site request forgery (CSRF) vulnerability in ZOHO ManageEngine Desktop Central before 9 build 90130 allows remote

23RISCO

abrir ↗

Referência

CVE-2014-9331

CVE-2014-9331—

Cross-site request forgery (CSRF) vulnerability in ZOHO ManageEngine Desktop Central before 9 build 90130 allows remote

23RISCO

abrir ↗

Referência

CVE-2017-6552

CVE-2017-6552—

Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fuju News 1.0 - Authentication Bypass / SQL Injection

CVE-2006-1838—webappsphp

edit_kategorie.php in Fuju News 1.0 allows remote attackers to bypass authentication by setting the authorized cookie.

23RISCO

abrir ↗

Referência

CVE-2014-5189

CVE-2014-5189—

SQL injection vulnerability in lib/optin/optin_page.php in the Lead Octopus plugin for WordPress allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

WFTPD Pro Server 3.23.1.1 - 'APPE' Remote Buffer Overflow (PoC)

CVE-2006-5826—doswindows

Buffer overflow in Texas Imperial Software WFTPD Pro Server 3.23.1.1 allows remote authenticated users to execute arbitr

28RISCO

abrir ↗

Referência✓ VexDay Proof

osTicket 1.11 - Cross-Site Scripting / Local File Inclusion

CVE-2019-11537—webappsphp

In osTicket before 1.12, XSS exists via /upload/file.php, /upload/scp/users.php?do=import-users, and /upload/scp/ajax.ph

23RISCO

abrir ↗

Referência✓ VexDay Proof

meBiblio 0.4.5 - 'action' Remote File Inclusion

CVE-2007-6089—webappsphp

PHP remote file inclusion vulnerability in index.php in meBiblio 0.4.5 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component mosDirectory 2.3.2 - 'catid' SQL Injection

CVE-2008-0690—webappsphp

SQL injection vulnerability in index.php in the mosDirectory (com_directory) 2.3.2 component for Joomla! allows remote a

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.