Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.523 exploits

Referência

CVE-2018-17310

CVE-2018-17310—

On the RICOH MP C1803 JPN printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of add

23RISCO

abrir ↗

Referência

CVE-2018-17313

CVE-2018-17313—

On the RICOH MP C307 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding a

23RISCO

abrir ↗

Referência

CVE-2018-17313

CVE-2018-17313—

On the RICOH MP C307 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding a

23RISCO

abrir ↗

Referência

CVE-2018-17376

CVE-2018-17376—

SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filter_order_Dir, cat, or filter

23RISCO

abrir ↗

Referência

CVE-2018-17377

CVE-2018-17377—

SQL Injection exists in the Questions 1.4.3 component for Joomla! via the term, userid, users, or groups parameter.

23RISCO

abrir ↗

Referência

CVE-2018-17377

CVE-2018-17377—

SQL Injection exists in the Questions 1.4.3 component for Joomla! via the term, userid, users, or groups parameter.

23RISCO

abrir ↗

Referência

CVE-2018-17378

CVE-2018-17378—

SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filter_order_Dir or filter_order p

23RISCO

abrir ↗

Referência

CVE-2018-17378

CVE-2018-17378—

SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filter_order_Dir or filter_order p

23RISCO

abrir ↗

Referência

CVE-2018-17380

CVE-2018-17380—

SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the start_date, m_start_date, or m_e

23RISCO

abrir ↗

Referência

CVE-2018-17380

CVE-2018-17380—

SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the start_date, m_start_date, or m_e

23RISCO

abrir ↗

Referência

CVE-2018-17383

CVE-2018-17383—

SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filter_order or filter_order_Dir para

23RISCO

abrir ↗

Referência

CVE-2018-17384

CVE-2018-17384—

SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filter_order_Dir or filter_order parameter.

23RISCO

abrir ↗

Referência

CVE-2018-17385

CVE-2018-17385—

SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radius[lat], radius[lng], or radius[radiu

23RISCO

abrir ↗

Referência

CVE-2018-17385

CVE-2018-17385—

SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radius[lat], radius[lng], or radius[radiu

23RISCO

abrir ↗

Referência

CVE-2018-17391

CVE-2018-17391—

SQL Injection exists in authors_post.php in Super Cms Blog Pro 1.0 via the author parameter.

23RISCO

abrir ↗

Referência

CVE-2018-17391

CVE-2018-17391—

SQL Injection exists in authors_post.php in Super Cms Blog Pro 1.0 via the author parameter.

23RISCO

abrir ↗

Referência

CVE-2018-17394

CVE-2018-17394—

SQL Injection exists in the Timetable Schedule 3.6.8 component for Joomla! via the eid parameter.

23RISCO

abrir ↗

Referência

CVE-2018-17394

CVE-2018-17394—

SQL Injection exists in the Timetable Schedule 3.6.8 component for Joomla! via the eid parameter.

23RISCO

abrir ↗

Referência

CVE-2018-17397

CVE-2018-17397—

SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter.

23RISCO

abrir ↗

Referência

CVE-2018-17397

CVE-2018-17397—

SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter.

23RISCO

abrir ↗

Referência

CVE-2018-17442

CVE-2018-17442—

An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. An unrestricted file upload vulnerabili

28RISCO

abrir ↗

Referência

CVE-2023-3844

CVE-2023-3844LOW

mooSocial mooDating URL friends cross site scripting

43RISCO

abrir ↗

Referência

CVE-2018-8449

CVE-2018-8449—

A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security F

23RISCO

abrir ↗

Referência✓ VexDay Proof

Xforum 1.4 - 'topic' SQL Injection

CVE-2008-0279—webappsphp

SQL injection vulnerability in liretopic.php in Xforum 1.4 and possibly others allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

DomPHP 0.81 - Remote Add Administrator

CVE-2008-0282—webappsphp

SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

ImageAlbum 2.0.0b2 - 'id' SQL Injection

CVE-2008-0288—webappsphp

Multiple SQL injection vulnerabilities in ImageAlbum 2.0.0b2 allow remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

SCO UnixWare < 7.1.4 p534589 - 'pkgadd' Local Privilege Escalation

CVE-2008-0310—localsco

Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append

23RISCO

abrir ↗

Referência✓ VexDay Proof

Aria 0.99-6 - 'page' Local File Inclusion

CVE-2008-0332—webappsphp

Directory traversal vulnerability in arias/help/effect.php in aria 0.99-6 allows remote attackers to include and execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPEcho CMS 2.0 - 'id' SQL Injection

CVE-2008-0355—webappsphp

SQL injection vulnerability in index.php in the forum module in PHPEcho CMS, probably 2.0-rc3 and earlier, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Small Axe 0.3.1 - 'cfile' Remote File Inclusion

CVE-2008-0376—webappsphp

PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.