Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

22.266 exploits

Referência

CVE-2017-15358

CVE-2017-15358—

Race condition in the Charles Proxy Settings suid binary in Charles Proxy before 4.2.1 allows local users to gain privil

23RISCO

abrir ↗

Referência

CVE-2009-3252

CVE-2009-3252—

Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2017-15580

CVE-2017-15580—

osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats. However, it does not properly v

28RISCO

abrir ↗

Referência✓ VexDay Proof

Butterfly ORGanizer 2.0.0 - SQL Injection / Cross-Site Scripting

CVE-2008-6328—webappsphp

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Linkarity - 'link.php' SQL Injection

CVE-2008-4353—webappsphp

SQL injection vulnerability in link.php in Linkarity allows remote attackers to execute arbitrary SQL commands via the c

23RISCO

abrir ↗

Referência✓ VexDay Proof

CFAGCMS 1 - SQL Injection

CVE-2008-5781—webappsphp

SQL injection vulnerability in right.php in Cant Find A Gaming CMS (CFAGCMS) 1.0 Beta 1 allows remote attackers to execu

23RISCO

abrir ↗

Referência

CVE-2010-1365

CVE-2010-1365—

SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2010-1365

CVE-2010-1365—

SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2010-2335

CVE-2010-2335—

SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote at

23RISCO

abrir ↗

Referência

CVE-2017-15806

CVE-2017-15806—

The send function in the ezcMailMtaTransport class in Zeta Components Mail before 1.8.2 does not properly restrict the s

28RISCO

abrir ↗

Referência

CVE-2010-4925

CVE-2010-4925—

SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2009-4673

CVE-2009-4673—

SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active PHP BookMarks 1.1.02 - SQL Injection

CVE-2008-3748—webappsphp

SQL injection vulnerability in view_group.php in Active PHP Bookmarks (APB) 1.1.02 and 1.2.06 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active Force Matrix 2 - Authentication Bypass

CVE-2008-5634—webappsasp

SQL injection vulnerability in account.asp in Active Force Matrix 2.0 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2009-4477

CVE-2009-4477—

SQL injection vulnerability in page.html in Xstate Real Estate 1.0 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2009-3967

CVE-2009-3967—

SQL injection vulnerability in browse.php in Ed Charkow SuperCharged Linking allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyioSoft Ajax Portal 3.0 - Authentication Bypass

CVE-2008-5653—webappsphp

SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft AjaxPortal 3.0 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ktools Photostore 3.5.1 - 'gid' SQL Injection

CVE-2008-6647—webappsphp

SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Tiger Dms - Authentication Bypass

CVE-2009-1503—webappsphp

Multiple SQL injection vulnerabilities in login.php in Tiger Document Management System (DMS) allow remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

MaxCMS 2.0 - 'm_username' Arbitrary Create Admin

CVE-2009-1818—webappsphp

SQL injection vulnerability in admin/admin_manager.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Frontis 3.9.01.24 - 'source_class' SQL Injection

CVE-2009-2013—webappsphp

SQL injection vulnerability in bin/aps_browse_sources.php in Frontis 3.9.01.24 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2010-3026

CVE-2010-3026—

Cross-site request forgery (CSRF) vulnerability in application/modules/admin/controllers/users.php in Tomaz Muraus Open

23RISCO

abrir ↗

Referência

CVE-2017-15921

CVE-2017-15921—

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer

23RISCO

abrir ↗

Referência

CVE-2017-15921

CVE-2017-15921—

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer

23RISCO

abrir ↗

Referência

CVE-2010-4911

CVE-2010-4911—

SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

w-Agora 4.2.1 - 'cat' SQL Injection

CVE-2007-6647—webappsphp

SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module eEmpregos - 'cid' SQL Injection

CVE-2008-0874—webappsphp

SQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2017-15944

CVE-2017-15944CRITICALsob ataque

Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote

100RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Freelancers - 'project' SQL Injection

CVE-2008-1864—webappsphp

SQL injection vulnerability in project.php in Prozilla Freelancers allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2017-15944

CVE-2017-15944CRITICALsob ataque

Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.