Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados

35.840CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.600 exploits

Referência

CVE-2011-5257

CVE-2011-5257—

Multiple cross-site scripting (XSS) vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote att

23RISCO

abrir ↗

Referência

CVE-2009-4854

CVE-2009-4854—

addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter.

23RISCO

abrir ↗

Referência

CVE-2009-4854

CVE-2009-4854—

addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Alt-N SecurityGateway 1.00-1.01 - Remote Stack Overflow

CVE-2008-4193—remotewindows

Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers t

60RISCO

abrir ↗

Referência✓ VexDay Proof

Confixx Pro 3.3.1 - 'saveserver.php' Remote File Inclusion

CVE-2007-4009—webappsphp

PHP remote file inclusion vulnerability in admin/business_inc/saveserver.php in SWSoft Confixx Pro 2.0.12 through 3.3.1

23RISCO

abrir ↗

Referência✓ VexDay Proof

TurnkeyForms Web Hosting Directory - Multiple Vulnerabilities

CVE-2008-6939—webappsphp

TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privileg

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebPortal CMS 0.6-beta - Remote Password Change

CVE-2008-0141—webappsphp

actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it ea

23RISCO

abrir ↗

Referência

CVE-2006-5192

CVE-2006-5192—

PHP remote file inclusion vulnerability in includes/footer.php in phpGreetz 0.99 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2010-2933

CVE-2010-2933—

SQL injection vulnerability in AV Scripts AV Arcade 3 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2020-25015

CVE-2020-25015—

A specific router allows changing the Wi-Fi password remotely. Genexis Platinum 4410 V2-1.28, a compact router generally

23RISCO

abrir ↗

Referência

CVE-2021-31762

CVE-2021-31762—

Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privileged user through Webmin's add users fea

23RISCO

abrir ↗

Referência

CVE-2009-4224

CVE-2009-4224—

Multiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and earlier allow remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2013-5954

CVE-2013-5954—

Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.11 and earlier allow remote attackers to hijack

23RISCO

abrir ↗

Referência

CVE-2018-18755

CVE-2018-18755—

K-iwi Framework 1775 has SQL Injection via the admin/user/group/update user_group_id parameter or the admin/user/user/up

23RISCO

abrir ↗

Referência

CVE-2018-18755

CVE-2018-18755—

K-iwi Framework 1775 has SQL Injection via the admin/user/group/update user_group_id parameter or the admin/user/user/up

23RISCO

abrir ↗

Referência✓ VexDay Proof

KDPics 1.11 - 'exif.php?lib_path' Remote File Inclusion

CVE-2006-6516—webappsphp

Multiple PHP remote file inclusion vulnerabilities in KDPics 1.16 and earlier allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2010-3127

CVE-2010-3127—

Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers

28RISCO

abrir ↗

Referência✓ VexDay Proof

FlashFXP 3.4.0 build 1145 - Remote Buffer Overflow (Denial of Service) (PoC)

CVE-2007-0825—doswindows

FlashFXP 3.4.0 build 1145 allows remote servers to cause a denial of service (CPU consumption) via a response to a PWD c

23RISCO

abrir ↗

Referência✓ VexDay Proof

TorrentTrader Classic 1.07 - Multiple Vulnerabilities

CVE-2007-5311—webappsphp

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic Edition 1.07 allows remote att

23RISCO

abrir ↗

Referência

CVE-2010-1875

CVE-2010-1875—

Directory traversal vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows re

43RISCO

abrir ↗

Referência

CVE-2020-13228

CVE-2020-13228—

An issue was discovered in Sysax Multi Server 6.90. There is reflected XSS via the /scgi sid parameter.

23RISCO

abrir ↗

Referência

CVE-2023-0916

CVE-2023-0916MEDIUM

SourceCodester Auto Dealer Management System Users.php access control

33RISCO

abrir ↗

Referência

CVE-2014-3704

CVE-2014-3704—

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct

60RISCO

abrir ↗

Referência

CVE-2023-31902

CVE-2023-31902CRITICAL

RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE).

63RISCO

abrir ↗

Referência

CVE-2018-25115

CVE-2018-25115CRITICAL

D-Link DIR-110/412/600/615/645/815 RCE via service.cgi

48RISCO

abrir ↗

Referência

CVE-2018-25115

CVE-2018-25115CRITICAL

D-Link DIR-110/412/600/615/645/815 RCE via service.cgi

48RISCO

abrir ↗

Referência

CVE-2016-8024

CVE-2016-8024—

Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux (VS

23RISCO

abrir ↗

Referência

CVE-2018-10575

CVE-2018-10575—

An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Hardcoded credentia

23RISCO

abrir ↗

Referência

CVE-2014-3704

CVE-2014-3704—

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct

60RISCO

abrir ↗

Referência✓ VexDay Proof

ContentNow 1.4.1 - Arbitrary File Upload / Cross-Site Scripting

CVE-2008-3181—webappsphp

Unrestricted file upload vulnerability in upload.php in ContentNow CMS 1.4.1 allows remote authenticated users to execut

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.