Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.647exploits catalogados

34.986CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2010-2312

CVE-2010-2312—

SQL injection vulnerability in index.php in HauntmAx Haunted House Directory Listing CMS allows remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2019-0805

CVE-2019-0805—

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak

23RISCO

abrir ↗

Referência

CVE-2019-0805

CVE-2019-0805—

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak

23RISCO

abrir ↗

Referência

CVE-2010-0984

CVE-2010-0984—

Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which al

23RISCO

abrir ↗

Referência

CVE-2010-0984

CVE-2010-0984—

Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which al

23RISCO

abrir ↗

Referência✓ VexDay Proof

Site-Assistant 0990 - 'paths[version]' Remote File Inclusion

CVE-2007-0867—webappsphp

PHP remote file inclusion vulnerability in classes/menu.php in Site-Assistant 0990 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

ttCMS 4 - 'ez_sql.php?lib_path' Remote File Inclusion

CVE-2007-1708—webappsphp

PHP remote file inclusion vulnerability in lib/db/ez_sql.php in ttCMS 4 and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

CyBoards PHP Lite 1.21 - 'script_path' Remote File Inclusion

CVE-2007-1983—webappsphp

PHP remote file inclusion vulnerability in include/default_header.php in Cyboards PHP Lite 1.21 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sisplet CMS 05.10 - 'site_path' Remote File Inclusion

CVE-2007-2347—webappsphp

PHP remote file inclusion vulnerability in main/forum/komentar.php in OneClick CMS (aka Sisplet CMS) 05.10 and earlier a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sendcard 3.4.1 - 'sendcard.php?form' Local File Inclusion

CVE-2007-2471—webappsphp

Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to read arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

6ALBlog - 'newsid' SQL Injection

CVE-2007-3451—webappsphp

PHP remote file inclusion vulnerability in admin/index.php in 6ALBlog allows remote authenticated administrators to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS 2.0.18 - Local File Inclusion / URL Redirecting

CVE-2008-0612—webappsphp

Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote attackers to include and exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Web Slider 0.6 - Insecure Cookie/Authentication Handling

CVE-2008-2298—webappsphp

Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin co

23RISCO

abrir ↗

Referência✓ VexDay Proof

txtSQL 2.2 Final - 'startup.php' Remote File Inclusion

CVE-2008-3595—webappsphp

PHP remote file inclusion vulnerability in examples/txtSQLAdmin/startup.php in txtSQL 2.2 Final allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

PhpBlock a8.5 - Multiple Remote File Inclusions

CVE-2008-5210—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PhpBlock A8.5 allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência

CVE-2010-1469

CVE-2010-1469—

Directory traversal vulnerability in the Ternaria Informatica JProject Manager (com_jprojectmanager) component 1.0 for J

38RISCO

abrir ↗

Referência

CVE-2015-5075

CVE-2015-5075—

Cross-site request forgery (CSRF) vulnerability in X2Engine X2CRM before 5.2 allows remote attackers to hijack the authe

23RISCO

abrir ↗

Referência

CVE-2015-5075

CVE-2015-5075—

Cross-site request forgery (CSRF) vulnerability in X2Engine X2CRM before 5.2 allows remote attackers to hijack the authe

23RISCO

abrir ↗

Referência

CVE-2018-10619

CVE-2018-10619—

An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.

23RISCO

abrir ↗

Referência✓ VexDay Proof

netForo! 0.1 - 'down.php?file_to_download' Remote File Disclosure

CVE-2007-1392—webappsphp

Directory traversal vulnerability in down.php in netForo! 0.1g allows remote attackers to read arbitrary files via a ..

23RISCO

abrir ↗

Referência

CVE-2011-5026

CVE-2011-5026—

Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d a

23RISCO

abrir ↗

Referência✓ VexDay Proof

CzarNews 1.14 - 'tpath' Remote File Inclusion

CVE-2006-3685—webappsphp

PHP remote file inclusion vulnerability in CzarNews 1.12 through 1.14 allows remote attackers to execute arbitrary PHP c

23RISCO

abrir ↗

Referência

CVE-2018-2698

CVE-2018-2698—

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th

23RISCO

abrir ↗

Referência

CVE-2011-4803

CVE-2011-4803—

SQL injection vulnerability in wptouch/ajax.php in the WPTouch plugin for WordPress allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2013-5757

CVE-2013-5757—

Absolute path traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpsyncml 0.1.2 - Remote File Inclusion

CVE-2007-4978—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpSyncML 0.1.2 and earlier allow remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2013-7185

CVE-2013-7185—

PotPlayer 1.5.40688: .avi File Memory Corruption

23RISCO

abrir ↗

Referência

CVE-2017-7725

CVE-2017-7725—

concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "ca

23RISCO

abrir ↗

Referência

CVE-2017-7725

CVE-2017-7725—

concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "ca

23RISCO

abrir ↗

Referência✓ VexDay Proof

mutiple timesheets 5.0 - Multiple Vulnerabilities

CVE-2008-1415—webappsphp

Directory traversal vulnerability in index.php in Multiple Time Sheets (MTS) 5.0 and earlier allows remote attackers to

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.