Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.510exploits catalogados
35.602CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.407GitHub PoC 14.242VulnCheck XDB 8.649Nuclei 4.287Metasploit 3.474✓ só verificadosrecentespopularesrisco
22.367 exploits
Referência✓ VexDay Proof
MWOpen E-Commerce - 'leggi_commenti.asp' SQL Injection
CVE-2007-6292—webappsasp
SQL injection vulnerability in leggi_commenti.asp in MWOpen 1.4 and earlier allows remote attackers to execute arbitrary
23RISCO
abrir ↗
Referência✓ VexDay Proof
Falt4 CMS rc4 10.9.2007 - Multiple Vulnerabilities
CVE-2007-6310—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in Falt4Extreme RC4 10.9.2007 allow remote attackers to inject arbit
23RISCO
abrir ↗
Referência✓ VexDay Proof
xml2owl 0.1.1 - 'filedownload.php' Remote File Disclosure
CVE-2007-6322—webappsphp
Directory traversal vulnerability in filedownload.php in xml2owl 0.1.1 allows remote attackers to read arbitrary files v
23RISCO
abrir ↗
Referência✓ VexDay Proof
HP Compaq Notebooks - ActiveX Remote Code Execution
CVE-2007-6331—remotewindows
Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP
35RISCO
abrir ↗
Referência✓ VexDay Proof
HP Compaq Notebooks - ActiveX Remote Code Execution
CVE-2007-6333—remotewindows
The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 i
23RISCO
abrir ↗
Referência✓ VexDay Proof
ClamAV 0.91.2 - libclamav MEW PE Buffer Overflow
CVE-2007-6335—remotelinux
Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW
28RISCO
abrir ↗
Referência✓ VexDay Proof
SineCMS 2.3.4 - Calendar SQL Injection
CVE-2007-6366—webappsphp
Multiple SQL injection vulnerabilities in SineCMS 2.3.4 and earlier allow remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗
Referência✓ VexDay Proof
WordPress Plugin PictPress 0.91 - Remote File Disclosure
CVE-2007-6369—webappsphp
Multiple directory traversal vulnerabilities in resize.php in the PictPress 0.91 and earlier plugin for WordPress allow
23RISCO
abrir ↗
Referência✓ VexDay Proof
BadBlue 2.72 - PassThru Remote Buffer Overflow
CVE-2007-6377—remotewindows
Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attacker
50RISCO
abrir ↗
Referência
CVE-2018-12524
CVE-2018-12524—
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /lib/ provi
23RISCO
abrir ↗
Referência
CVE-2018-13108
CVE-2018-13108—
All ADB broadband gateways / routers based on the Epicentro platform are affected by a local root jailbreak vulnerabilit
23RISCO
abrir ↗
Referência
CVE-2018-12525
CVE-2018-12525—
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /images/ pr
23RISCO
abrir ↗
Referência
CVE-2018-12584
CVE-2018-12584—
The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows rem
28RISCO
abrir ↗
Referência
CVE-2018-12584
CVE-2018-12584—
The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows rem
28RISCO
abrir ↗
Referência
CVE-2018-12604
CVE-2018-12604—
GreenCMS 2.3.0603 allows remote attackers to obtain sensitive information via a direct request for Data/Log/year_month_d
28RISCO
abrir ↗
Referência
CVE-2018-12613
CVE-2018-12613—
An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute
60RISCO
abrir ↗
Referência
CVE-2018-12613
CVE-2018-12613—
An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute
60RISCO
abrir ↗
Referência
CVE-2018-12613
CVE-2018-12613—
An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute
60RISCO
abrir ↗
Referência
CVE-2018-12908
CVE-2018-12908—
Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensiti
28RISCO
abrir ↗
Referência
CVE-2018-12912
CVE-2018-12912—
An issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0. There is a SQL Injection vulnerability via a
23RISCO
abrir ↗
Referência
MCL-Net 4.3.5.8788 - Information Disclosure
CVE-2023-34834—webappshardware
A Directory Browsing vulnerability in MCL-Net version 4.3.5.8788 webserver running on default port 5080, allows attacker
23RISCO
abrir ↗
Referência
CVE-2018-14485
CVE-2018-14485—
BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.
28RISCO
abrir ↗
Referência
CVE-2018-14575
CVE-2018-14575—
Trash Bin plugin 1.1.3 for MyBB has cross-site scripting (XSS) via a thread subject and a cross-site request forgery (CS
23RISCO
abrir ↗
Referência
CVE-2018-14728
CVE-2018-14728—
upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.
60RISCO
abrir ↗
Referência
CVE-2018-14894
CVE-2018-14894—
CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker (who is able to edit permissions of a file
23RISCO
abrir ↗
Referência
CVE-2018-17383
CVE-2018-17383—
SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filter_order or filter_order_Dir para
23RISCO
abrir ↗
Referência
CVE-2002-1230
CVE-2002-1230—
NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute
23RISCO
abrir ↗
Referência
CVE-2018-15437
CVE-2018-15437MEDIUM
Cisco Immunet and Cisco AMP for Endpoints System Scan Denial of Service Vulnerability
33RISCO
abrir ↗
Referência
CVE-2018-15442
CVE-2018-15442HIGH
Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability
61RISCO
abrir ↗
Referência
CVE-2018-17377
CVE-2018-17377—
SQL Injection exists in the Questions 1.4.3 component for Joomla! via the term, userid, users, or groups parameter.
23RISCO
abrir ↗
← anteriorpágina 469 / 746próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.