Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.866exploits catalogados

35.812CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.573GitHub PoC 14.316VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.572 exploits

Referência

CVE-2020-6170

CVE-2020-6170—

An authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows attackers to obtain cl

23RISCO

abrir ↗

Referência

CVE-2017-6104

CVE-2017-6104—

Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0.

23RISCO

abrir ↗

Referência

CVE-2020-3153

CVE-2020-3153MEDIUMsob ataqueransomware

Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

83RISCO

abrir ↗

Referência

CVE-2014-2588

CVE-2014-2588—

Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated user

23RISCO

abrir ↗

Referência

CVE-2014-2588

CVE-2014-2588—

Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated user

23RISCO

abrir ↗

Referência

CVE-2010-4847

CVE-2010-4847—

SQL injection vulnerability in view_item.php in MH Products MHP Downloadshop allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2010-4850

CVE-2010-4850—

Multiple cross-site scripting (XSS) vulnerabilities in Diferior 8.03 allow remote attackers to inject arbitrary web scri

23RISCO

abrir ↗

Referência

CVE-2012-4032

CVE-2012-4032—

Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users t

43RISCO

abrir ↗

Referência

CVE-2013-4097

CVE-2013-4097—

ServerAdmin/TestDRConnection.jsp in DS3 Authentication Server allows remote attackers to obtain sensitive information vi

23RISCO

abrir ↗

Referência

CVE-2010-4857

CVE-2010-4857—

SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

EQdkp 1.3.0 - 'dbal.php' Remote File Inclusion

CVE-2006-2256—webappsphp

PHP remote file inclusion vulnerability in includes/dbal.php in EQdkp 1.3.0 and earlier allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

ZebraFeeds 1.0 - 'zf_path' Remote File Inclusion

CVE-2007-1010—webappsphp

Multiple PHP remote file inclusion vulnerabilities in ZebraFeeds 1.0, when register_globals is enabled, allow remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Core 2.2 - 'xmlrpc.php' SQL Injection

CVE-2007-3140—webappsphp

SQL injection vulnerability in xmlrpc.php in WordPress 2.2 allows remote authenticated users to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jasmine CMS 1.0 - SQL Injection / Remote Code Execution

CVE-2007-3312—webappsphp

Directory traversal vulnerability in admin/plugin_manager.php in Jasmine CMS 1.0 allows remote authenticated administrat

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pligg CMS 9.9.0 - 'editlink.php' SQL Injection

CVE-2008-1774—webappsphp

SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.6 - 'error_log' Safe_mode Bypass

CVE-2008-5625—localmultiple

PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_f

23RISCO

abrir ↗

Referência

CVE-2015-1577

CVE-2015-1577—

Directory traversal vulnerability in u5admin/deletefile.php in u5CMS before 3.9.4 allows remote attackers to write to ar

23RISCO

abrir ↗

Referência

CVE-2010-0458

CVE-2010-0458—

Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2016-2226

CVE-2016-2226—

Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-2143

CVE-2010-2143—

Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to read arbitrary files and

23RISCO

abrir ↗

Referência

CVE-2023-33829

CVE-2023-33829MEDIUM

A stored cross-site scripting (XSS) vulnerability in Cloudogu GmbH SCM Manager v1.2 to v1.60 allows attackers to execute

33RISCO

abrir ↗

Referência✓ VexDay Proof

Faq Administrator 2.1 - 'faq_reply.php' Remote File Inclusion

CVE-2006-5637—webappsphp

PHP remote file inclusion vulnerability in faq_reply.php in Faq Administrator 2.1b allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2018-8057

CVE-2018-8057—

A SQL Injection vulnerability exists in Western Bridge Cobub Razor 0.8.0 via the channel_name or platform parameter in a

28RISCO

abrir ↗

Referência

CVE-2020-3950

CVE-2020-3950HIGHsob ataque

VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for

86RISCO

abrir ↗

Referência

CVE-2010-4861

CVE-2010-4861—

SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Restaurante - Arbitrary File Upload

CVE-2007-4817—webappsphp

Unrestricted file upload vulnerability in the Restaurante (com_restaurante) component for Joomla! allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2010-4876

CVE-2010-4876—

SQL injection vulnerability in viewpost.php in mBlogger 1.0.04 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

JBC Explorer 7.20 RC 1 - Remote Code Execution

CVE-2007-5913—webappsphp

dirsys/modules/auth.php in JBC Explorer 7.20 RC1 and earlier does not require authentication, which allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Top 100 1.2 - Arbitrary Delete Stats

CVE-2008-1785—webappsphp

delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary user

23RISCO

abrir ↗

Referência✓ VexDay Proof

Entertainment Directory 1.1 - SQL Injection

CVE-2008-1788—webappsphp

SQL injection vulnerability in directory.php in Prozilla Entertainers 1.1 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.