Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência✓ VexDay Proof

TorrentVolve 1.4 - 'deleteTorrent' Delete Arbitrary File

CVE-2009-2101—webappsphp

Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when register_globals is enabled, allows remote at

23RISCO

abrir ↗

Referência

CVE-2009-3948

CVE-2009-3948—

JetAudio 7.5.3 COWON Media Center allows remote attackers to cause a denial of service (memory consumption and applicati

23RISCO

abrir ↗

Referência

CVE-2009-4659

CVE-2009-4659—

Unspecified vulnerability in MP3-Cutter Ease Audio Cutter 1.20 allows user-assisted remote attackers to cause a denial o

23RISCO

abrir ↗

Referência

CVE-2018-11124

CVE-2018-11124—

Cross-site scripting (XSS) vulnerability in Attributes functionality in Open-AudIT Community edition before 2.2.2 allows

23RISCO

abrir ↗

Referência

CVE-2013-4867

CVE-2013-4867—

Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking

23RISCO

abrir ↗

Referência✓ VexDay Proof

XRms 1.99.2 - Remote File Inclusion / Cross-Site Scripting / Information Gathering

CVE-2008-3398—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in XRMS CRM 1.99.2 allow remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência

CVE-2012-4251

CVE-2012-4251—

Multiple cross-site scripting (XSS) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2015-5399

CVE-2015-5399—

Cross-site scripting (XSS) vulnerability in PHPVibe before 4.21 allows remote authenticated users to inject arbitrary we

23RISCO

abrir ↗

Referência

CVE-2009-4690

CVE-2009-4690—

Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to in

23RISCO

abrir ↗

Referência✓ VexDay Proof

bcoos 1.0.13 - 'viewcat.php' SQL Injection

CVE-2008-6381—webappsphp

SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authent

23RISCO

abrir ↗

Referência✓ VexDay Proof

Easy Photo Gallery 2.1 - Cross-Site Scripting / File Disclosure/Bypass / SQL Injection

CVE-2008-6988—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Easy Photo Gallery (aka Ezphotogallery) 2.1 allow remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fastpublish CMS 1.6.9 - config[fsBase] Remote File Inclusion

CVE-2006-2726—webappsphp

PHP remote file inclusion vulnerability in Fastpublish CMS 1.6.9.d allows remote attackers to include arbitrary files vi

28RISCO

abrir ↗

Referência

phpVibe < 4.20 - Persistent Cross-Site Scripting

CVE-2015-5399—webappsphp

Cross-site scripting (XSS) vulnerability in PHPVibe before 4.21 allows remote authenticated users to inject arbitrary we

23RISCO

abrir ↗

Referência

CVE-2015-6945

CVE-2015-6945—

Cross-site scripting (XSS) vulnerability in JSP/MySQL Administrador Web 1 allows remote attackers to inject arbitrary we

23RISCO

abrir ↗

Referência

CVE-2023-6269

CVE-2023-6269CRITICAL

Argument injection vulnerability in Atos Unify OpenScape Session Border Controller, Atos Unify OpenScape Branch and Atos Unify OpenScape BCF

48RISCO

abrir ↗

Referência

CVE-2018-1186

CVE-2018-1186—

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and vers

23RISCO

abrir ↗

Referência

CVE-2018-1187

CVE-2018-1187—

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6 is affected by a cross-site

23RISCO

abrir ↗

Referência

CVE-2009-3660

CVE-2009-3660—

PHP remote file inclusion vulnerability in libraries/database.php in Efront 3.5.4 and earlier, when register_globals is

23RISCO

abrir ↗

Referência

CVE-2015-6962

CVE-2015-6962—

SQL injection vulnerability in the web application in Farol allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência

CVE-2017-14956

CVE-2017-14956—

AlienVault USM v5.4.2 and earlier offers authenticated users the functionality of exporting generated reports via the "/

23RISCO

abrir ↗

Referência

CVE-2011-10018

CVE-2011-10018CRITICAL

myBB 1.6.4 Backdoor Arbitrary Command Execution

63RISCO

abrir ↗

Referência

CVE-2011-10018

CVE-2011-10018CRITICAL

myBB 1.6.4 Backdoor Arbitrary Command Execution

63RISCO

abrir ↗

Referência✓ VexDay Proof

Ottoman CMS 1.1.3 - '?default_path=' Remote File Inclusion (1)

CVE-2006-2767—webappsphp

PHP remote file inclusion vulnerability in Ottoman 1.1.2, when register_globals is enabled, allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2006-3823

CVE-2006-3823—

SQL injection vulnerability in index.php in GeodesicSolutions (1) GeoAuctions Premier 2.0.3 and (2) GeoClassifieds Basic

23RISCO

abrir ↗

Referência✓ VexDay Proof

SHOUTcast Admin Panel 2.0 - 'page' Local File Inclusion

CVE-2008-2813—webappsphp

Directory traversal vulnerability in index.php in WallCity-Server Shoutcast Admin Panel 2.0, when magic_quotes_gpc is di

23RISCO

abrir ↗

Referência

CVE-2010-0958

CVE-2010-0958—

Directory traversal vulnerability in modules/hayoo/index.php in Tribisur 2.1, 2.0, and earlier, when magic_quotes_gpc is

23RISCO

abrir ↗

Referência

CVE-2010-0958

CVE-2010-0958—

Directory traversal vulnerability in modules/hayoo/index.php in Tribisur 2.1, 2.0, and earlier, when magic_quotes_gpc is

23RISCO

abrir ↗

Referência

CVE-2008-7254

CVE-2008-7254—

Directory traversal vulnerability in includes/template-loader.php in Irmin CMS (formerly Pepsi CMS) 0.5 and 0.6 BETA2, w

23RISCO

abrir ↗

Referência

CVE-2008-7254

CVE-2008-7254—

Directory traversal vulnerability in includes/template-loader.php in Irmin CMS (formerly Pepsi CMS) 0.5 and 0.6 BETA2, w

23RISCO

abrir ↗

Referência✓ VexDay Proof

metajour 2.1 - 'system_path' Remote File Inclusion

CVE-2006-2768—webappsphp

PHP remote file inclusion vulnerability in METAjour 2.1, when register_globals is enabled, allows remote attackers to ex

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.