Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.149exploits catalogados

35.965CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.349Metasploit 3.488✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2009-4601

CVE-2009-4601—

Cross-site scripting (XSS) vulnerability in basic_search_result.php in Zeeways ZeeJobsite 3x allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2023-23059

CVE-2023-23059CRITICAL

An issue was discovered in GeoVision GV-Edge Recording Manager 2.2.3.0 for windows, which contains improper permissions

48RISCO

abrir ↗

Referência

CVE-2009-3202

CVE-2009-3202—

Cross-site scripting (XSS) vulnerability in search.php in ULoKI PHP Forum 2.1 allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Easy Scripts Answer and Question Script - Multiple Vulnerabilities

CVE-2009-1654—webappsphp

Cross-site scripting (XSS) vulnerability in questiondetail.php in Easy Scripts Answer and Question Script allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

tbdev 01-01-2008 - Multiple Vulnerabilities

CVE-2009-2141—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2010-0371

CVE-2010-0371—

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Hitmaaan Gallery 1.3 allow remote attackers to injec

23RISCO

abrir ↗

Referência

CVE-2012-6518

CVE-2012-6518—

Cross-site request forgery (CSRF) vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authenti

23RISCO

abrir ↗

Referência

CVE-2010-0365

CVE-2010-0365—

Cross-site scripting (XSS) vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows re

23RISCO

abrir ↗

Referência

CVE-2010-2715

CVE-2010-2715—

Cross-site scripting (XSS) vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arbi

23RISCO

abrir ↗

Referência

CVE-2010-3895

CVE-2010-3895—

esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges by specifying an arbitr

23RISCO

abrir ↗

Referência

CVE-2013-2639

CVE-2013-2639—

Cross-site scripting (XSS) vulnerability in CTERA Cloud Storage OS before 3.2.29.0, 3.2.42.0, and earlier allows remote

23RISCO

abrir ↗

Referência

CVE-2010-3904

CVE-2010-3904HIGHsob ataque

The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the

91RISCO

abrir ↗

Referência

CVE-2014-9516

CVE-2014-9516—

Cross-site scripting (XSS) vulnerability in Social Microblogging PRO 1.5 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2014-100013

CVE-2014-100013—

Multiple cross-site scripting (XSS) vulnerabilities in clientResponse 4.1 allow remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP Stats Generator 2.1.1 - SQL Injection

CVE-2006-3184—webappsasp

Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to

23RISCO

abrir ↗

Referência

CVE-2015-7890

CVE-2015-7890—

Multiple buffer overflows in the esa_write function in /dev/seirenin the Exynos Seiren Audio driver, as used in Samsung

23RISCO

abrir ↗

Referência

CVE-2023-3342

CVE-2023-3342CRITICAL

User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload

48RISCO

abrir ↗

Referência

CVE-2010-0706

CVE-2010-0706—

Cross-site scripting (XSS) vulnerability in the login/prompt component in Subex Nikira Fraud Management System allows re

23RISCO

abrir ↗

Referência

CVE-2009-4382

CVE-2009-4382—

Cross-site scripting (XSS) vulnerability in module.php in PHPFABER CMS, possibly 1.3.36, allows remote attackers to inje

23RISCO

abrir ↗

Referência

CVE-2009-4382

CVE-2009-4382—

Cross-site scripting (XSS) vulnerability in module.php in PHPFABER CMS, possibly 1.3.36, allows remote attackers to inje

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpclanwebsite 1.23.3 fix pack #5 - Multiple Vulnerabilities

CVE-2008-5879—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, allows

23RISCO

abrir ↗

Referência

CVE-2010-0675

CVE-2010-0675—

Cross-site scripting (XSS) vulnerability in index.php in BGSvetionik BGS CMS 2.2.1 allows remote attackers to inject arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

BandSite CMS 1.1.1 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-3193—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, al

28RISCO

abrir ↗

Referência

CVE-2010-2256

CVE-2010-2256—

Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attacke

23RISCO

abrir ↗

Referência

CVE-2010-2256

CVE-2010-2256—

Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attacke

23RISCO

abrir ↗

Referência

CVE-2010-1872

CVE-2010-1872—

Cross-site scripting (XSS) vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows remote attackers to inject a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Galatolo Web Manager 1.3a - Cross-Site Scripting / SQL Injection

CVE-2008-6248—webappsphp

Cross-site scripting (XSS) vulnerability in all.php in Galatolo WebManager 1.3a and earlier allows remote attackers to i

23RISCO

abrir ↗

Referência

CVE-2008-6278

CVE-2008-6278—

Multiple cross-site scripting (XSS) vulnerabilities in product.php in RakhiSoftware Price Comparison Script (aka Shoppin

23RISCO

abrir ↗

Referência

CVE-2010-1091

CVE-2010-1091—

Multiple cross-site scripting (XSS) vulnerabilities in contact.php in phpMySite allow remote attackers to inject arbitra

23RISCO

abrir ↗

Referência

CVE-2010-1091

CVE-2010-1091—

Multiple cross-site scripting (XSS) vulnerabilities in contact.php in phpMySite allow remote attackers to inject arbitra

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.