Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.258exploits catalogados

36.019CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.697GitHub PoC 14.455VulnCheck XDB 8.811Nuclei 4.349Metasploit 3.488✓ só verificadosrecentes populares risco

22.657 exploits

Referência✓ VexDay Proof

BlogPHP 2 - 'id' Cross-Site Scripting / SQL Injection

CVE-2008-0679—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web scr

23RISCO

abrir ↗

Referência

CVE-2014-9322

CVE-2014-9322—

arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Butterfly ORGanizer 2.0.0 - SQL Injection / Cross-Site Scripting

CVE-2008-6700—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Butterfly Organizer 2.0.0 allow remote attackers to inject arbitr

23RISCO

abrir ↗

Referência

CVE-2015-7566

CVE-2015-7566—

The clie_5_attach function in drivers/usb/serial/visor.c in the Linux kernel through 4.4.1 allows physically proximate a

23RISCO

abrir ↗

Referência

CVE-2015-7567

CVE-2015-7567—

SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passw

23RISCO

abrir ↗

Referência✓ VexDay Proof

zeeproperty 1.0 - Arbitrary File Upload / Cross-Site Scripting

CVE-2008-6915—webappsphp

Cross-site scripting (XSS) vulnerability in view_prop_details.php in Zeeways ZEEPROPERTY 1.0 allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2009-4692

CVE-2009-4692—

Cross-site scripting (XSS) vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2009-4697

CVE-2009-4697—

Multiple cross-site scripting (XSS) vulnerabilities in index.php in RadNICS Gold 5 allow remote attackers to inject arbi

23RISCO

abrir ↗

Referência

CVE-2009-3719

CVE-2009-3719—

Cross-site scripting (XSS) vulnerability in comment.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2010-2340

CVE-2010-2340—

SQL injection vulnerability in members.php in Arab Portal 2.2, when magic_quotes_gpc is disabled, allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Enthrallweb ePhotos 1.0 - 'subLevel2.asp' SQL Injection

CVE-2006-3027—webappsasp

Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2017-16843

CVE-2017-16843—

Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic

23RISCO

abrir ↗

Referência

CVE-2014-125116

CVE-2014-125116CRITICAL

HybridAuth 2.0.9 - 2.2.2 Unauthenticated RCE via install.php Configuration Injection

63RISCO

abrir ↗

Referência

CVE-2014-125116

CVE-2014-125116CRITICAL

HybridAuth 2.0.9 - 2.2.2 Unauthenticated RCE via install.php Configuration Injection

63RISCO

abrir ↗

Referência

CVE-2014-125116

CVE-2014-125116CRITICAL

HybridAuth 2.0.9 - 2.2.2 Unauthenticated RCE via install.php Configuration Injection

63RISCO

abrir ↗

Referência

CVE-2020-8493

CVE-2020-8493MEDIUM

A stored XSS vulnerability in Kronos Web Time and Attendance (webTA) affects 3.8.x and later 3.x versions before 4.0 via

33RISCO

abrir ↗

Referência

CVE-2008-6325

CVE-2008-6325—

Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbit

23RISCO

abrir ↗

Referência

CVE-2024-25413

CVE-2024-25413CRITICAL

A XSLT Server Side injection vulnerability in the Import Jobs function of FireBear Improved Import And Export v3.8.6 all

48RISCO

abrir ↗

Referência

CVE-2010-1361

CVE-2010-1361—

Cross-site scripting (XSS) vulnerability in shop/USER_ARTIKEL_HANDLING_AUFRUF.php in PHPepperShop 2.5 allows remote atta

23RISCO

abrir ↗

Referência

CVE-2018-14533

CVE-2018-14533—

read_tmp and write_tmp in Inteno IOPSYS allow attackers to gain privileges after writing to /tmp/etc/smb.conf because /v

23RISCO

abrir ↗

Referência

CVE-2013-7274

CVE-2013-7274—

Cross-site scripting (XSS) vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitr

23RISCO

abrir ↗

Referência

CVE-2015-7707

CVE-2015-7707—

Ignite Realtime Openfire 3.10.2 allows remote authenticated users to gain administrator access via the isadmin parameter

23RISCO

abrir ↗

Referência

CVE-2009-4359

CVE-2009-4359—

Cross-site scripting (XSS) vulnerability in folder.php in the SmartMedia 0.85 Beta module for XOOPS allows remote attack

23RISCO

abrir ↗

Referência

CVE-2007-6673

CVE-2007-6673—

Cross-site scripting (XSS) vulnerability in Makale Scripti allows remote attackers to inject arbitrary web script or HTM

23RISCO

abrir ↗

Referência✓ VexDay Proof

AvailScript Article Script - 'articles.php' Multiple Vulnerabilities

CVE-2008-4372—webappsphp

Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2011-10013

CVE-2011-10013CRITICAL

Traq 2.0–2.3 admincp/common.php RCE

63RISCO

abrir ↗

Referência

CVE-2011-10013

CVE-2011-10013CRITICAL

Traq 2.0–2.3 admincp/common.php RCE

63RISCO

abrir ↗

Referência

CVE-2011-10013

CVE-2011-10013CRITICAL

Traq 2.0–2.3 admincp/common.php RCE

63RISCO

abrir ↗

Referência

CVE-2010-2341

CVE-2010-2341—

PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta al

23RISCO

abrir ↗

Referência

CVE-2010-2341

CVE-2010-2341—

PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta al

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.