Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

22.233 exploits

Referência

CVE-2013-0292

CVE-2013-0292—

The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ovidentia 6.6.5 - 'item' SQL Injection

CVE-2008-4423—webappsphp

SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência

CVE-2024-52544

CVE-2024-52544CRITICAL

Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow

48RISCO

abrir ↗

Referência

CVE-2010-2846

CVE-2010-2846—

Cross-site scripting (XSS) vulnerability in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! al

23RISCO

abrir ↗

Referência

CVE-2010-2847

CVE-2010-2847—

Multiple SQL injection vulnerabilities in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! allo

23RISCO

abrir ↗

Referência

CVE-2015-7895

CVE-2015-7895—

Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).

23RISCO

abrir ↗

Referência

CVE-2015-7895

CVE-2015-7895—

Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).

23RISCO

abrir ↗

Referência

CVE-2012-4325

CVE-2012-4325—

Cross-site request forgery (CSRF) vulnerability in upload/users.php in Utopia News Pro (UNP) 1.4.0 and earlier allows re

23RISCO

abrir ↗

Referência

CVE-2012-1220

CVE-2012-1220—

Cross-site request forgery (CSRF) vulnerability in modules/config/admin_utente.php in GAzie 5.20 and earlier allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-Smart Cart 1.0 - 'Product_ID' SQL Injection

CVE-2007-0092—webappsasp

SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2013-4952

CVE-2013-4952—

SQL injection vulnerability in functions/global.php in Elemata CMS RC 3.0 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2015-2572

CVE-2015-2572—

Unspecified vulnerability in the Oracle Hyperion Smart View for Office component in Oracle Hyperion 11.1.2.5.216 and ear

23RISCO

abrir ↗

Referência

CVE-2015-2572

CVE-2015-2572—

Unspecified vulnerability in the Oracle Hyperion Smart View for Office component in Oracle Hyperion 11.1.2.5.216 and ear

23RISCO

abrir ↗

Referência

CVE-2023-53872

CVE-2023-53872CRITICAL

Wp2Fac 1.0 OS Command Injection via send.php Endpoint

48RISCO

abrir ↗

Referência

CVE-2012-5891

CVE-2012-5891—

Multiple cross-site request forgery (CSRF) vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow

23RISCO

abrir ↗

Referência

CVE-2012-5891

CVE-2012-5891—

Multiple cross-site request forgery (CSRF) vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow

23RISCO

abrir ↗

Referência

CVE-2016-7660

CVE-2016-7660—

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchO

23RISCO

abrir ↗

Referência✓ VexDay Proof

Einstein 1.01 - Local Password Disclosure

CVE-2005-0619—localwindows

Einstein 1.0.1 stores sensitive information such as usernames and passwords in plaintext in the registry, which allows l

23RISCO

abrir ↗

Referência

CVE-2022-3603

CVE-2022-3603CRITICAL

Export customers list CSV for WooCommerce < 2.0.69 - CSV Injection

48RISCO

abrir ↗

Referência

CVE-2020-13866

CVE-2020-13866—

WinGate v9.4.1.5998 has insecure permissions for the installation directory, which allows local users to gain privileges

23RISCO

abrir ↗

Referência✓ VexDay Proof

xweblog 2.1 - 'kategori.asp' SQL Injection

CVE-2006-5023—webappsasp

SQL injection vulnerability in kategori.asp in xweblog 2.1 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

eDocStore - 'doc.php?doc_id' SQL Injection

CVE-2007-3452—webappsphp

SQL injection vulnerability in essentials/minutes/doc.php in eDocStore allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

ScriptMagix FAQ Builder 2.0 - 'index.php' SQL Injection

CVE-2007-1618—webappsphp

SQL injection vulnerability in index.php in ScriptMagix FAQ Builder 2.0 and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Glossarie 1.7 - 'sid' SQL Injection

CVE-2007-2738—webappsphp

SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Krazy Image Hosting 0.7a - 'display.php' SQL Injection

CVE-2006-5140—webappsphp

SQL injection vulnerability in display.php in Lappy512 PHP Krazy Image Host Script (phpkimagehost) 0.7a allows remote at

23RISCO

abrir ↗

Referência

CVE-2017-14219

CVE-2017-14219—

XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless cre

23RISCO

abrir ↗

Referência

CVE-2022-4445

CVE-2022-4445CRITICAL

FL3R FeelBox <= 8.1 - Unauthenticated SQLi

48RISCO

abrir ↗

Referência

CVE-2013-4953

CVE-2013-4953—

SQL injection vulnerability in play.php in Top Games Script 1.2 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2017-14355

CVE-2017-14355—

A potential security vulnerability has been identified in HPE Connected Backup versions 8.6 and 8.8.6. The vulnerability

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Simple Shop Galore 3.x - 'catid' SQL Injection

CVE-2008-2568—webappsphp

SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component 3.4 and earlier for Joomla! allows remo

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.