Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.444exploits catalogados

35.552CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.367GitHub PoC 14.223VulnCheck XDB 8.646Nuclei 4.283Metasploit 3.474✓ só verificadosrecentes populares risco

22.301 exploits

Referência

CVE-2017-16542

CVE-2017-16542—

Zoho ManageEngine Applications Manager 13 before build 13500 allows Post-authentication SQL injection via the name param

23RISCO

abrir ↗

Referência

CVE-2017-16777

CVE-2017-16777—

If HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but VMware Fusion is not, a loc

23RISCO

abrir ↗

Referência

CVE-2017-16836

CVE-2017-16836—

Arris TG1682G devices with Comcast TG1682_2.0s7_PRODse 10.0.59.SIP.PC20.CT software allow Unauthenticated Stored XSS via

23RISCO

abrir ↗

Referência

CVE-2017-17585

CVE-2017-17585—

FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17585

CVE-2017-17585—

FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17586

CVE-2017-17586—

FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17586

CVE-2017-17586—

FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17588

CVE-2017-17588—

FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or show_misc_video.php id par

23RISCO

abrir ↗

Referência

CVE-2017-17589

CVE-2017-17589—

FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parame

23RISCO

abrir ↗

Referência

CVE-2017-17589

CVE-2017-17589—

FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parame

23RISCO

abrir ↗

Referência

CVE-2017-17592

CVE-2017-17592—

Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17592

CVE-2017-17592—

Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17594

CVE-2017-17594—

DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17594

CVE-2017-17594—

DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17595

CVE-2017-17595—

Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter.

23RISCO

abrir ↗

Referência

CVE-2022-38580

CVE-2022-38580CRITICAL

Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).

53RISCO

abrir ↗

Referência

CVE-2022-39291

CVE-2022-39291MEDIUM

Denial of service through logs in zoneminder

33RISCO

abrir ↗

Referência

CVE-2017-17596

CVE-2017-17596—

Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17598

CVE-2017-17598—

Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17617

CVE-2017-17617—

Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.

23RISCO

abrir ↗

Referência

CVE-2022-40946

CVE-2022-40946HIGH

On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via t

41RISCO

abrir ↗

Referência

CVE-2022-41358

CVE-2022-41358MEDIUM

A stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows attackers to execute arbitrary

33RISCO

abrir ↗

Referência

CVE-2022-41413

CVE-2022-41413MEDIUM

perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attack

33RISCO

abrir ↗

Referência

CVE-2022-42889

CVE-2022-42889—

Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

60RISCO

abrir ↗

Referência

CVE-2022-46770

CVE-2022-46770HIGH

qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of s

61RISCO

abrir ↗

Referência

CVE-2022-47076

CVE-2022-47076HIGH

An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to view sensitive information via Display

41RISCO

abrir ↗

Referência

CVE-2022-47636

CVE-2022-47636—

A DLL hijacking vulnerability has been discovered in OutSystems Service Studio 11 11.53.30 build 61739. When a user open

23RISCO

abrir ↗

Referência

CVE-2022-47874

CVE-2022-47874MEDIUM

Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of dat

38RISCO

abrir ↗

Referência

CVE-2022-47875

CVE-2022-47875HIGH

A Directory Traversal vulnerability in /be/erpc.php in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to ex

46RISCO

abrir ↗

Referência

CVE-2022-47876

CVE-2022-47876CRITICAL

The integrator in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to create Jobs to execute arbitrary code v

48RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.