Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.866exploits catalogados

35.812CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.573GitHub PoC 14.316VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.549 exploits

Referência

CVE-2014-5189

CVE-2014-5189—

SQL injection vulnerability in lib/optin/optin_page.php in the Lead Octopus plugin for WordPress allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fuju News 1.0 - Authentication Bypass / SQL Injection

CVE-2006-1838—webappsphp

edit_kategorie.php in Fuju News 1.0 allows remote attackers to bypass authentication by setting the authorized cookie.

23RISCO

abrir ↗

Referência✓ VexDay Proof

WFTPD Pro Server 3.23.1.1 - 'APPE' Remote Buffer Overflow (PoC)

CVE-2006-5826—doswindows

Buffer overflow in Texas Imperial Software WFTPD Pro Server 3.23.1.1 allows remote authenticated users to execute arbitr

28RISCO

abrir ↗

Referência✓ VexDay Proof

meBiblio 0.4.5 - 'action' Remote File Inclusion

CVE-2007-6089—webappsphp

PHP remote file inclusion vulnerability in index.php in meBiblio 0.4.5 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component mosDirectory 2.3.2 - 'catid' SQL Injection

CVE-2008-0690—webappsphp

SQL injection vulnerability in index.php in the mosDirectory (com_directory) 2.3.2 component for Joomla! allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

GC Auction Platinum - 'cate_id' SQL Injection

CVE-2008-3413—webappsphp

SQL injection vulnerability in category.php in Greatclone GC Auction Platinum allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyRealty 2.0.0 - 'location' SQL Injection

CVE-2008-3445—webappsphp

SQL injection vulnerability in index.php in phpMyRealty (PMR) 2.0.0 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2014-9224

CVE-2014-9224—

Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management serve

23RISCO

abrir ↗

Referência

CVE-2010-1352

CVE-2010-1352—

Directory traversal vulnerability in the JOOFORGE Jutebox (com_jukebox) component 1.0 and 1.7 for Joomla! allows remote

43RISCO

abrir ↗

Referência

CVE-2010-0288

CVE-2010-0288—

A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12

28RISCO

abrir ↗

Referência

CVE-2020-23839

CVE-2020-23839—

A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpa

28RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.4 ionCube - 'ioncube_read_file' Safe Mode / disable_functions Bypass

CVE-2007-5447—localwindows

ioncube_loader_win_5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow safe_mode and disable_funct

23RISCO

abrir ↗

Referência

CVE-2020-35754

CVE-2020-35754—

OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequentl

28RISCO

abrir ↗

Referência

CVE-2012-4768

CVE-2012-4768—

Cross-site scripting (XSS) vulnerability in the Download Monitor plugin before 3.3.5.9 for WordPress allows remote attac

43RISCO

abrir ↗

Referência

CVE-2016-6754

CVE-2016-6754—

A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-

23RISCO

abrir ↗

Referência

CVE-2011-4571

CVE-2011-4571—

SQL injection vulnerability in the Estate Agent (com_estateagent) component for Joomla! allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Coppermine Photo Gallery 1.4.18 - Local File Inclusion / Remote Code Execution

CVE-2008-3486—webappsphp

Directory traversal vulnerability in the user_get_profile function in include/functions.inc.php in Coppermine Photo Gall

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpAuction GPL Enhanced 2.51 - 'profile.php' SQL Injection

CVE-2008-3487—webappsphp

SQL injection vulnerability in profile.php in PHPAuction GPL Enhanced 2.51 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2017-2472

CVE-2017-2472—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b

23RISCO

abrir ↗

Referência

CVE-2010-1363

CVE-2010-1363—

SQL injection vulnerability in the JProjects (com_j-projects) component for Joomla! allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2018-7747

CVE-2018-7747—

Multiple cross-site scripting (XSS) vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow re

23RISCO

abrir ↗

Referência

CVE-2018-7747

CVE-2018-7747—

Multiple cross-site scripting (XSS) vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow re

23RISCO

abrir ↗

Referência

CVE-2013-7319

CVE-2013-7319—

Cross-site scripting (XSS) vulnerability in the Download Manager plugin before 2.5.9 for WordPress allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2021-24287

CVE-2021-24287—

Select All Categories and Taxonomies < 1.3.2 - Reflected Cross-Site Scripting (XSS)

43RISCO

abrir ↗

Referência

CVE-2010-0641

CVE-2010-0641—

Cross-site scripting (XSS) vulnerability in webline/html/admin/wcs/LoginPage.jhtml in Cisco Collaboration Server (CCS) 5

23RISCO

abrir ↗

Referência✓ VexDay Proof

Icewarp Merak Mail Server 9.4.1 - 'Base64FileEncode()' Buffer Overflow (PoC)

CVE-2009-1516—doswindows

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1

23RISCO

abrir ↗

Referência

CVE-2018-18324

CVE-2018-18324—

CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has XSS via the admin/fileManager2.php fm_current_dir parameter

23RISCO

abrir ↗

Referência

CVE-2014-8681

CVE-2014-8681—

SQL injection vulnerability in the GetIssues function in models/issue.go in Gogs (aka Go Git Service) 0.3.1-9 through 0.

23RISCO

abrir ↗

Referência

CVE-2014-8681

CVE-2014-8681—

SQL injection vulnerability in the GetIssues function in models/issue.go in Gogs (aka Go Git Service) 0.3.1-9 through 0.

23RISCO

abrir ↗

Referência✓ VexDay Proof

iLife iPhoto Photocast - XML Title Remote Format String (PoC)

CVE-2007-0051—dososx

Format string vulnerability in Apple iPhoto 6.0.5 (316), and other versions before 6.0.6, allows remote user-assisted at

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.