Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.401exploits catalogados

35.511CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.332GitHub PoC 14.209VulnCheck XDB 8.646Nuclei 4.289Metasploit 3.474✓ só verificadosrecentes populares risco

22.301 exploits

Referência

CVE-2011-4801

CVE-2011-4801—

SQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in Authenex Strong Authenticati

23RISCO

abrir ↗

Referência

CVE-2021-43326

CVE-2021-43326—

Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory.

23RISCO

abrir ↗

Referência

CVE-2014-10015

CVE-2014-10015—

SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Frogss CMS 0.7 - SQL Injection

CVE-2007-2299—webappsphp

Multiple SQL injection vulnerabilities in Frogss CMS 0.7 and earlier allow remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2020-8425

CVE-2020-8425—

Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account deletion via userdelete.php.

23RISCO

abrir ↗

Referência

CVE-2017-1000409

CVE-2017-1000409—

A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH environ

23RISCO

abrir ↗

Referência

CVE-2012-1911

CVE-2012-1911—

Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Tiger PHP News System 1.0b build 39 - SQL Injection

CVE-2008-0469—webappsphp

SQL injection vulnerability in index.php in Tiger Php News System (TPNS) 1.0b and earlier allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

eXV2 Module bamaGalerie 3.03 - SQL Injection

CVE-2008-1349—webappsphp

SQL injection vulnerability in viewcat.php in the bamaGalerie (Bama Galerie) 3.03 and 3.041 module for eXV2 2.0.6 allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBP RC3 (2.204) FIX4 - SQL Injection

CVE-2008-1408—webappsphp

SQL injection vulnerability in includes/functions/banners-external.php in phpBP 2 RC3 (2.204) FIX 4 allows remote attack

23RISCO

abrir ↗

Referência

CVE-2010-2618

CVE-2010-2618—

PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in AdaptCMS 2.0.0 Beta, when register_globals is ena

23RISCO

abrir ↗

Referência✓ VexDay Proof

Autodealers CMS AutOnline - 'pageid' SQL Injection

CVE-2008-4073—webappsphp

SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

D-iscussion Board 3.01 - 'topic' Local File Inclusion

CVE-2008-4075—webappsphp

Directory traversal vulnerability in index.php in D-iscussion Board 3.01 allows remote attackers to read arbitrary files

23RISCO

abrir ↗

Referência✓ VexDay Proof

Brim 2.0.0 - SQL Injection / Cross-Site Scripting

CVE-2008-4082—webappsphp

SQL injection vulnerability in the Tasks plugin in Brim 2.0.0, when magic_quotes_gpc is disabled, allows remote authenti

23RISCO

abrir ↗

Referência✓ VexDay Proof

team 1.x - File Disclosure / Cross-Site Scripting

CVE-2009-0761—webappsasp

Cross-site scripting (XSS) vulnerability in online.asp in Team Board 1.x allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência✓ VexDay Proof

Katalog Plyt Audio (pl) 1.0 - SQL Injection

CVE-2007-1612—webappsphp

SQL injection vulnerability in index.php in Katalog Plyt Audio 1.0 and earlier allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

ScriptMagix Lyrics 2.0 - 'index.php?recid' SQL Injection

CVE-2007-1616—webappsphp

SQL injection vulnerability in index.php in ScriptMagix Lyrics 2.0 and earlier allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

EQdkp 1.3.2 - 'listmembers.php' SQL Injection

CVE-2007-3077—webappsphp

SQL injection vulnerability in listmembers.php in EQdkp 1.3.2 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pagetool 1.07 - 'news_id' SQL Injection

CVE-2007-3402—webappsphp

SQL injection vulnerability in index.php in pagetool 1.07 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2017-11320

CVE-2017-11320—

Persistent XSS through the SSID of nearby Wi-Fi devices on Technicolor TC7337 routers 08.89.17.20.00 allows an attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

YouTube Clone Script - 'msg.php?id' SQL Injection

CVE-2007-3518—webappsphp

SQL injection vulnerability in msg.php in HispaH YouTube Clone Script (youtubeclone) allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

bcoos 1.0.10 - Local File Inclusion / SQL Injection

CVE-2007-6080—webappsphp

SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2012-10025

CVE-2012-10025CRITICAL

WordPress Plugin Advanced Custom Fields <= 3.5.1 Remote File Inclusion

63RISCO

abrir ↗

Referência

CVE-2012-10025

CVE-2012-10025CRITICAL

WordPress Plugin Advanced Custom Fields <= 3.5.1 Remote File Inclusion

63RISCO

abrir ↗

Referência

CVE-2012-10025

CVE-2012-10025CRITICAL

WordPress Plugin Advanced Custom Fields <= 3.5.1 Remote File Inclusion

63RISCO

abrir ↗

Referência✓ VexDay Proof

SimpleBlog 2.3 - 'id' SQL Injection

CVE-2006-4592—webappsasp

Incomplete blacklist vulnerability in default.asp in 8pixel.net Simple Blog 2.3 and earlier allows remote attackers to c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Coupon Script 4.0 - 'id' SQL Injection

CVE-2008-4090—webappsphp

SQL injection vulnerability in index.php in PHP Coupon Script 4.0 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência

CVE-2017-11357

CVE-2017-11357CRITICALsob ataqueransomware

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which a

100RISCO

abrir ↗

Referência✓ VexDay Proof

Web Directory Script 1.5.3 - 'site' SQL Injection

CVE-2008-4091—webappsphp

SQL injection vulnerability in index.php in Web Directory Script 1.5.3 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Yourownbux 3.1/3.2 Beta - SQL Injection

CVE-2008-4093—webappsphp

SQL injection vulnerability in memberstats.php in YourOwnBux 3.1 and 3.2 beta, when magic_quotes_gpc is disabled, allows

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.