Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2010-1599

CVE-2010-1599—

SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2012-3351

CVE-2012-3351—

Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295 allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2016-4208

CVE-2016-4208—

Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acro

28RISCO

abrir ↗

Referência

CVE-2010-1600

CVE-2010-1600—

SQL injection vulnerability in the Media Mall Factory (com_mediamall) component 1.0.4 for Joomla! allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2012-6586

CVE-2012-6586—

Multiple SQL injection vulnerabilities in MYRE Vacation Rental Software allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

Uplay 92.0.0.6280 - Local Privilege Escalation

CVE-2019-14737—localwindows

Ubisoft Uplay 92.0.0.6280 has Insecure Permissions.

23RISCO

abrir ↗

Referência✓ VexDay Proof

TlGuestBook 1.2 - Insecure Cookie Handling

CVE-2008-5065—webappsphp

TlGuestBook 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the tlGuestBo

23RISCO

abrir ↗

Referência✓ VexDay Proof

mini-pub 0.3 - Local Directory Traversal / File Disclosure

CVE-2008-5883—webappsphp

Absolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list a

23RISCO

abrir ↗

Referência

CVE-2014-1206

CVE-2014-1206—

SQL injection vulnerability in the password reset page in Open Web Analytics (OWA) before 1.5.5 allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-1604

CVE-2010-1604—

Multiple SQL injection vulnerabilities in admin_login.php in NCT Jobs Portal Script allow remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2009-3423

CVE-2009-3423—

23RISCO

abrir ↗

Referência

CVE-2019-12745

CVE-2019-12745—

out/out.UsrMgr.php in SeedDMS before 5.1.11 allows Stored Cross-Site Scripting (XSS) via the name field.

23RISCO

abrir ↗

Referência✓ VexDay Proof

shibby shop 2.2 - Multiple Vulnerabilities

CVE-2008-2872—webappsphp

SQL injection vulnerability in default.asp in sHibby sHop 2.2 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2013-3524

CVE-2013-3524—

SQL injection vulnerability in popupnewsitem/ in the Pop Up News module 2.0 and possibly earlier for phpVMS allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

shibby shop 2.2 - Multiple Vulnerabilities

CVE-2008-2873—webappsphp

sHibby sHop 2.2 and earlier stores sensitive information under the web root with insufficient access control, which allo

23RISCO

abrir ↗

Referência

CVE-2018-10366

CVE-2018-10366—

An issue was discovered in the Users (aka Front-end user management) plugin 1.4.5 for October CMS. XSS exists in the nam

23RISCO

abrir ↗

Referência

CVE-2008-5943

CVE-2008-5943—

Multiple directory traversal vulnerabilities in NavBoard 16 (2.6.0) allow remote attackers to include and execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

PhpCommander 3.0 - 'upload' Remote Code Execution

CVE-2006-4636—webappsphp

Directory traversal vulnerability in SZEWO PhpCommander 3.0 and earlier allows remote attackers to include and execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ninja Blog 4.8 - Remote Information Disclosure

CVE-2009-0325—webappsphp

Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magic_quotes_gpc is disabled, allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Polaring 0.04.03 - 'general.php' Remote File Inclusion

CVE-2006-5078—webappsphp

PHP remote file inclusion vulnerability in view/general.php in Kristian Niemi Polaring 00.04.03 and earlier allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpYabs 0.1.2 - 'Azione' Remote File Inclusion

CVE-2009-0639—webappsphp

PHP remote file inclusion vulnerability in moduli/libri/index.php in phpyabs 0.1.2 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebBuilder 2.0 - 'StageLoader.php' Remote File Inclusion

CVE-2007-0703—webappsphp

PHP remote file inclusion vulnerability in library/StageLoader.php in WebBuilder 2.0 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Webavis 0.1.1 - 'class.php?root' Remote File Inclusion

CVE-2007-2943—webappsphp

PHP remote file inclusion vulnerability in class/class.php in Webavis 0.1.1 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

LimeSurvey 1.52 - 'language.php' Remote File Inclusion

CVE-2007-5573—webappsphp

PHP remote file inclusion vulnerability in classes/core/language.php in LimeSurvey 1.5.2 and earlier allows remote attac

23RISCO

abrir ↗

Referência

CVE-2014-5520

CVE-2014-5520—

SQL injection vulnerability in XRMS CRM, possibly 1.99.2, allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2022-40797

CVE-2022-40797CRITICAL

Roxy Fileman 1.4.6 allows Remote Code Execution via a .phar upload, because the default FORBIDDEN_UPLOADS value in conf.

48RISCO

abrir ↗

Referência

CVE-2014-3871

CVE-2014-3871—

Multiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX 7.3.3 (formerly GeoClassifieds

23RISCO

abrir ↗

Referência

CVE-2020-5147

CVE-2020-5147—

SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to

23RISCO

abrir ↗

Referência

CVE-2012-4998

CVE-2012-4998—

Cross-site scripting (XSS) vulnerability in index.php in starCMS allows remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Referência

CVE-2008-0843

CVE-2008-0843—

StatCounteX 3.0 and 3.1 allows remote attackers to obtain sensitive information and edit configuration scripts via a dir

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.