Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.559exploits catalogados

34.978CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8.542Nuclei 4.243Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2012-1124

CVE-2012-1124—

SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2012-6667

CVE-2012-6667—

Cross-site scripting (XSS) vulnerability in vbshout.php in DragonByte Technologies vBShout module for vBulletin allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMyInventory 2.8 - 'global.inc.php' Remote File Inclusion

CVE-2007-3270—webappsphp

PHP remote file inclusion vulnerability in Includes/global.inc.php in phpMyInventory 2.8 allows remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2018-7703

CVE-2018-7703—

Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitr

23RISCO

abrir ↗

Referência

CVE-2013-7136

CVE-2013-7136—

The UPC Ireland Cisco EPC 2425 router (aka Horizon Box) does not have a sufficiently large number of possible WPA-PSK pa

23RISCO

abrir ↗

Referência

CVE-2017-12954

CVE-2017-12954—

The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of

23RISCO

abrir ↗

Referência

CVE-2017-12953

CVE-2017-12953—

The gig::Instrument::UpdateRegionKeyTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin Wordspew - SQL Injection

CVE-2008-0682—webappsphp

SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2014-6312

CVE-2014-6312—

Cross-site request forgery (CSRF) vulnerability in the Login Widget With Shortcode (login-sidebar-widget) plugin before

23RISCO

abrir ↗

Referência✓ VexDay Proof

PostcardMentor - 'cat_fldAuto' SQL Injection

CVE-2008-2132—webappsasp

SQL injection vulnerability in step1.asp in Systementor PostcardMentor allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2017-2443

CVE-2017-2443—

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Intel Graph

23RISCO

abrir ↗

Referência

CVE-2018-11242

CVE-2018-11242—

An issue was discovered in the MakeMyTrip application 7.2.4 for Android. The databases (locally stored) are not encrypte

23RISCO

abrir ↗

Referência

CVE-2024-0725

CVE-2024-0725MEDIUM

ProSSHD denial of service

33RISCO

abrir ↗

Referência

CVE-2018-6225

CVE-2018-6225—

An XML external entity injection (XXE) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenti

23RISCO

abrir ↗

Referência

CVE-2014-3081

CVE-2014-3081—

prodtest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote aut

23RISCO

abrir ↗

Referência

CVE-2014-3081

CVE-2014-3081—

prodtest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote aut

23RISCO

abrir ↗

Referência

CVE-2012-6046

CVE-2012-6046—

Static code injection vulnerability in admin/banners.php in PHP Enter allows remote attackers to inject arbitrary PHP co

23RISCO

abrir ↗

Referência

CVE-2007-6218

CVE-2007-6218—

Multiple PHP remote file inclusion vulnerabilities in Ossigeno CMS 2.2 pre1 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2019-14418

CVE-2019-14418CRITICAL

An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. When uploading an application bundle, a dir

48RISCO

abrir ↗

Referência

CVE-2017-7064

CVE-2017-7064—

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iClo

23RISCO

abrir ↗

Referência

CVE-2016-5304

CVE-2016-5304—

Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6

23RISCO

abrir ↗

Referência✓ VexDay Proof

Crafty Syntax Image Gallery 3.1g - Remote Code Execution

CVE-2006-1668—webappsphp

newimage.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka PHP thumbnail Photo Gallery) 3.1g and earlier allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

CentiPaid 1.4.2 - 'centipaid_class.php' Remote File Inclusion

CVE-2006-6976—webappsphp

PHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.2 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2012-4260

CVE-2012-4260—

Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary SQL commands via the (1)

23RISCO

abrir ↗

Referência

CVE-2012-1208

CVE-2012-1208—

Multiple cross-site scripting (XSS) vulnerabilities in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other

23RISCO

abrir ↗

Referência✓ VexDay Proof

Weblogicnet - 'files_dir' Multiple Remote File Inclusions

CVE-2007-4715—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Weblogicnet allow remote attackers to execute arbitrary PHP code v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cplinks 1.03 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2008-2181—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in search.php in cpLinks 1.03 allow remote attackers to inject arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

NULL FTP Server 1.1.0.7 - 'Site' Command Injection

CVE-2008-6534—remotewindows

Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute

23RISCO

abrir ↗

Referência

CVE-2010-0702

CVE-2010-0702—

SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2010-0702

CVE-2010-0702—

SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to e

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.