Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.813exploits catalogados

35.788CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.549 exploits

Referência

CVE-2010-0759

CVE-2010-0759—

Directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Desi

43RISCO

abrir ↗

Referência

CVE-2019-6192

CVE-2019-6192MEDIUM

A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a

33RISCO

abrir ↗

Referência

CVE-2018-7705

CVE-2018-7705—

Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-mai

23RISCO

abrir ↗

Referência

CVE-2022-39195

CVE-2022-39195MEDIUM

A cross-site scripting (XSS) vulnerability in the LISTSERV 17 web interface allows remote attackers to inject arbitrary

48RISCO

abrir ↗

Referência

CVE-2013-1636

CVE-2013-1636—

Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in

23RISCO

abrir ↗

Referência

CVE-2013-1636

CVE-2013-1636—

Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebSVN 2.0 - Cross-Site Scripting / File Handling / Code Execution

CVE-2008-5919—webappsphp

Directory traversal vulnerability in rss.php in WebSVN 2.0 and earlier, when magic_quotes_gpc is disabled, allows remote

23RISCO

abrir ↗

Referência

CVE-2017-7043

CVE-2017-7043—

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iClo

23RISCO

abrir ↗

Referência

CVE-2017-7039

CVE-2017-7039—

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iClo

23RISCO

abrir ↗

Referência

CVE-2017-7040

CVE-2017-7040—

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iClo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flexcustomer 0.0.6 - Admin Authentication Bypass / Possible PHP Code Writing

CVE-2008-6761—webappsphp

Static code injection vulnerability in admin/install.php in Flexcustomer 0.0.6 might allow remote attackers to inject ar

23RISCO

abrir ↗

Referência

CVE-2018-1185

CVE-2018-1185—

An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0

23RISCO

abrir ↗

Referência✓ VexDay Proof

Envolution 1.1.0 - 'PNSVlang' Remote Code Execution

CVE-2006-6445—webappsphp

Directory traversal vulnerability in error.php in Envolution 1.1.0 and earlier allows remote attackers to include and ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-GADS! 2.2.6 - 'common.php?locale' Remote File Inclusion

CVE-2007-2521—webappsphp

PHP remote file inclusion vulnerability in common.php in E-GADS! before 2.2.7 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

samPHPweb 4.2.2 - 'db.php' Remote File Inclusion

CVE-2008-0143—webappsphp

PHP remote file inclusion vulnerability in common/db.php in samPHPweb, possibly 4.2.2 and others, as provided with SAM B

23RISCO

abrir ↗

Referência

CVE-2010-5033

CVE-2010-5033—

SQL injection vulnerability in ProductList.cfm in Fusebox 5.5.1 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Fusion 7.0.2 - Blind SQL Injection

CVE-2008-1918—webappsphp

SQL injection vulnerability in submit.php in PHP-Fusion 6.01.14 and 6.00.307, when magic_quotes_gpc is disabled and the

23RISCO

abrir ↗

Referência

CVE-2010-5034

CVE-2010-5034—

SQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2015-7986

CVE-2015-7986—

The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a deni

23RISCO

abrir ↗

Referência

CVE-2010-0390

CVE-2010-0390—

Unrestricted file upload vulnerability in maxImageUpload/index.php in PHP F1 Max's Image Uploader 1.0, when Apache is no

23RISCO

abrir ↗

Referência

CVE-2010-4863

CVE-2010-4863—

Cross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2012-4250

CVE-2012-4250—

Stack-based buffer overflow in the RequestScreenOptimization function in the XProcessControl.ocx ActiveX control in msls

23RISCO

abrir ↗

Referência

CVE-2015-4594

CVE-2015-4594—

eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability. When authenticating a user, the a

23RISCO

abrir ↗

Referência

CVE-2015-4594

CVE-2015-4594—

eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability. When authenticating a user, the a

23RISCO

abrir ↗

Referência

CVE-2019-12616

CVE-2019-12616—

An issue was discovered in phpMyAdmin before 4.9.0. A vulnerability was found that allows an attacker to trigger a CSRF

28RISCO

abrir ↗

Referência

CVE-2023-28288

CVE-2023-28288HIGH

Microsoft SharePoint Server Spoofing Vulnerability

41RISCO

abrir ↗

Referência

CVE-2018-0952

CVE-2018-0952—

An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-0802

CVE-2010-0802—

SQL injection vulnerability in index.php in (nv2) Awards 1.1.0, a modification for Invision Power Board, allows remote a

23RISCO

abrir ↗

Referência

CVE-2012-2593

CVE-2012-2593—

Cross-site scripting (XSS) vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote atta

23RISCO

abrir ↗

Referência

CVE-2016-2208

CVE-2016-2208—

The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute a

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.