Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.258exploits catalogados

36.019CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.697GitHub PoC 14.455VulnCheck XDB 8.811Nuclei 4.349Metasploit 3.488✓ só verificadosrecentes populares risco

22.696 exploits

Referência

CVE-2017-14083

CVE-2017-14083—

A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to d

23RISCO

abrir ↗

Referência✓ VexDay Proof

Article Friendly Pro/Standard - SQL Injection

CVE-2008-3670—webappsphp

SQL injection vulnerability in authordetail.php in Article Friendly Pro allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

WTcom 0.2.4-alpha - 'torrents.php' SQL Injection

CVE-2006-4238—webappsphp

SQL injection vulnerability in torrents.php in WebTorrent (WTcom) 0.2.4 and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2010-4856

CVE-2010-4856—

SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

Comdev Web Blogger 4.1.3 - 'arcmonth' SQL Injection

CVE-2008-6250—webappsphp

SQL injection vulnerability in Comdev Web Blogger 4.1.3 and earlier allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

nopCommerce Store 4.30 - 'name' Stored Cross-Site Scripting

CVE-2020-29475—webappsmultiple

nopCommerce Store 4.30 is affected by cross-site scripting (XSS) in the Schedule tasks name field. This vulnerability ca

23RISCO

abrir ↗

Referência✓ VexDay Proof

Def-Blog 1.0.3 - 'comadd.php' SQL Injection

CVE-2006-5383—webappsphp

SQL injection vulnerability in comadd.php in Def-Blog 1.0.1 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Webdrivers Simple Forum - 'message_details.php' SQL Injection

CVE-2006-5802—webappsphp

SQL injection vulnerability in message_details.php in The Web Drivers Simple Forum, dated 20060318, allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASPNuke 0.80 - 'register.asp' SQL Injection

CVE-2006-6070—webappsasp

SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

NewsLetter MX 1.0.2 - 'ID' SQL Injection

CVE-2006-6787—webappsasp

SQL injection vulnerability in admin/admin_mail_adressee.asp in Newsletter MX 1.0.2 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

vShare YouTube Clone 2.6 - 'tid' SQL Injection

CVE-2008-2223—webappsphp

SQL injection vulnerability in group_posts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2012-10045

CVE-2012-10045CRITICAL

XODA 0.4.5 Arbitrary PHP File Upload

63RISCO

abrir ↗

Referência

CVE-2012-10045

CVE-2012-10045CRITICAL

XODA 0.4.5 Arbitrary PHP File Upload

63RISCO

abrir ↗

Referência

CVE-2012-10045

CVE-2012-10045CRITICAL

XODA 0.4.5 Arbitrary PHP File Upload

63RISCO

abrir ↗

Referência

CVE-2012-10049

CVE-2012-10049CRITICAL

WebPageTest Arbitrary PHP File Upload RCE

63RISCO

abrir ↗

Referência

CVE-2012-10049

CVE-2012-10049CRITICAL

WebPageTest Arbitrary PHP File Upload RCE

63RISCO

abrir ↗

Referência

CVE-2012-10049

CVE-2012-10049CRITICAL

WebPageTest Arbitrary PHP File Upload RCE

63RISCO

abrir ↗

Referência✓ VexDay Proof

easyTrade 2.x - 'id' SQL Injection

CVE-2008-2790—webappsphp

SQL injection vulnerability in detail.php in MountainGrafix easyTrade 2.x allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2016-10074

CVE-2016-10074—

The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass

35RISCO

abrir ↗

Referência✓ VexDay Proof

PHP League 0.82 - 'classement.php' SQL Injection

CVE-2006-5676—webappsasp

SQL injection vulnerability in consult/classement.php in Uni-Vert PhpLeague 0.82 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2016-10074

CVE-2016-10074—

The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass

35RISCO

abrir ↗

Referência✓ VexDay Proof

FlashGet 1.9 - 'FTP PWD Response' Remote Buffer Overflow (PoC)

CVE-2008-4321—doswindows

Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long res

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlashGet 1.9.0.1012 - 'FTP PWD Response' Remote Buffer Overflow (SafeSEH)

CVE-2008-4321—remotewindows

Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long res

23RISCO

abrir ↗

Referência✓ VexDay Proof

DigiAffiliate 1.4 - 'id' SQL Injection

CVE-2007-0306—webappsasp

SQL injection vulnerability in visu_user.asp in Digiappz DigiAffiliate 1.4 and earlier allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

celerbb 0.0.2 - Multiple Vulnerabilities

CVE-2009-0851—webappsphp

Multiple SQL injection vulnerabilities in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allow remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Car Manager 1.1 - SQL Injection

CVE-2007-1704—webappsphp

SQL injection vulnerability in index.php in the Car Manager (com_resman) 1.1 and earlier component for Joomla! allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module myAlbum-P 2.0 - 'cid' SQL Injection

CVE-2007-1807—webappsphp

SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remo

23RISCO

abrir ↗

Referência

CVE-2009-3215

CVE-2009-3215—

SQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1, and the IXXO Cart component for Joomla! 1.0.x, allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dokeos 1.8.0 - 'my_progress.php?course' SQL Injection

CVE-2007-2902—webappsphp

SQL injection vulnerability in main/auth/my_progress.php in Dokeos 1.8.0 and earlier allows remote authenticated users t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Elkagroup Image Gallery 1.0 - SQL Injection

CVE-2007-3461—webappsphp

SQL injection vulnerability in property.php in elkagroup Image Gallery 1.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.