Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.813exploits catalogados

35.788CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.549 exploits

Referência

CVE-2016-7617

CVE-2016-7617—

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Bluetooth"

23RISCO

abrir ↗

Referência

CVE-2009-3752

CVE-2009-3752—

SQL injection vulnerability in home.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the g

23RISCO

abrir ↗

Referência

CVE-2015-10137

CVE-2015-10137CRITICAL

Website Contact Form With File Upload <= 1.3.4 - Arbitrary File Upload

63RISCO

abrir ↗

Referência✓ VexDay Proof

Docebo 3.0.3 - Multiple Remote File Inclusions

CVE-2006-2576—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

MoviePlay 4.76 - '.lst' Local Buffer Overflow

CVE-2007-0016—localwindows

Stack-based buffer overflow in MoviePlay 4.76 allows remote attackers to execute arbitrary code via a long filename in a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Advanced Login 0.7 - 'root' Remote File Inclusion

CVE-2007-1766—webappsphp

PHP remote file inclusion vulnerability in login/engine/db/profiledit.php in Advanced Login 0.76 and earlier allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

TCExam 4.0.011 - 'SessionUserLang' Shell Injection

CVE-2007-2431—webappsphp

Dynamic variable evaluation vulnerability in shared/config/tce_config.php in TCExam 4.0.011 and earlier allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Madirish Webmail 2.0 - 'addressbook.php' Remote File Inclusion

CVE-2007-2826—webappsphp

PHP remote file inclusion vulnerability in lib/addressbook.php in Madirish Webmail 2.0 allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebChamado 1.1 - Arbitrary Add Admin

CVE-2008-2907—webappsphp

SQL injection vulnerability in admin/index.php in WebChamado 1.1, when magic_quotes_gpc is disabled, allows remote attac

23RISCO

abrir ↗

Referência

CVE-2022-36804

CVE-2022-36804HIGHsob ataque

Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 bef

100RISCO

abrir ↗

Referência

CVE-2014-0867

CVE-2014-0867—

rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM A

23RISCO

abrir ↗

Referência

CVE-2022-36804

CVE-2022-36804HIGHsob ataque

Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 bef

100RISCO

abrir ↗

Referência

CVE-2018-10900

CVE-2018-10900HIGH

Network Manager VPNC plugin (aka networkmanager-vpnc) before version 1.2.6 is vulnerable to a privilege escalation attac

56RISCO

abrir ↗

Referência

CVE-2010-2701

CVE-2010-2701—

Multiple buffer overflows in the FathFTP ActiveX control 1.7 allow remote attackers to execute arbitrary code via (1) th

23RISCO

abrir ↗

Referência✓ VexDay Proof

KVIrc 3.4.2 Shiny - URI handler Remote Command Execution

CVE-2008-7070—remotewindows

Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary co

23RISCO

abrir ↗

Referência

CVE-2017-12950

CVE-2017-12950—

The gig::Region::Region function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL p

23RISCO

abrir ↗

Referência

CVE-2021-24308

CVE-2021-24308—

LifterLMS < 4.21.1 - Authenticated Stored XSS in Edit Profile

23RISCO

abrir ↗

Referência✓ VexDay Proof

PayProCart 1146078425 - Multiple Remote File Inclusions

CVE-2006-4672—webappsphp

PHP remote file inclusion vulnerability in profitCode ppalCart 2.5 EE, possibly a component of PayProCart, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

QK SMTP 3.01 - 'RCPT TO' Remote Denial of Service

CVE-2006-5551—doswindows

Stack-based buffer overflow in QK SMTP 3.01 and earlier might allow remote attackers to execute arbitrary code via a lon

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ultimate PHP Board 2.0 - 'header_simple.php' File Inclusion

CVE-2006-7169—webappsphp

PHP remote file inclusion vulnerability in includes/header_simple.php in Ultimate PHP Board (UPB) 2.0 and earlier allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-Smart Cart - 'productsofcat.asp' SQL Injection

CVE-2008-2917—webappsasp

SQL injection vulnerability in productsofcat.asp in E-SMART CART allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBLASTER CMS 1.0 RC1 - Multiple Local File Inclusions

CVE-2008-5171—webappsphp

Multiple directory traversal vulnerabilities in admin/minibb/index.php in phpBLASTER CMS 1.0 RC1, when register_globals

23RISCO

abrir ↗

Referência

CVE-2019-6275

CVE-2019-6275—

Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attac

28RISCO

abrir ↗

Referência

CVE-2019-6275

CVE-2019-6275—

Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attac

28RISCO

abrir ↗

Referência

CVE-2019-6272

CVE-2019-6272—

Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attacker

28RISCO

abrir ↗

Referência

CVE-2010-1174

CVE-2010-1174—

Cisco TFTP Server 1.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted (1) read (aka RR

23RISCO

abrir ↗

Referência

CVE-2015-10141

CVE-2015-10141CRITICAL

Xdebug Remote Debugger Unauthenticated OS Command Execution

63RISCO

abrir ↗

Referência

CVE-2017-13847

CVE-2017-13847—

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The is

23RISCO

abrir ↗

Referência

CVE-2012-6622

CVE-2012-6622—

Multiple cross-site scripting (XSS) vulnerabilities in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin be

23RISCO

abrir ↗

Referência

CVE-2017-7402

CVE-2017-7402—

Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/ind

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.