Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.863exploits catalogados

32.152CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.279VulnCheck XDB 8.156Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

19.978 exploits

Referência

CVE-2006-7127

CVE-2006-7127—

Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

JAF CMS 4.0 RC2 - Multiple Remote File Inclusions

CVE-2006-7127—

Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2015-5529

CVE-2015-5529—

Multiple cross-site scripting (XSS) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to injec

23RISCO

abrir ↗

Referência

CVE-2015-5529

CVE-2015-5529—

Multiple cross-site scripting (XSS) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to injec

23RISCO

abrir ↗

Referência

CVE-2019-25707

CVE-2019-25707HIGH

eBrigade ERP 4.5 SQL Injection via pdf.php

41RISCO

abrir ↗

Referência

CVE-2014-5112

CVE-2014-5112—

maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary commands via shell metacha

23RISCO

abrir ↗

Referência

Multi-Threaded TFTP 1.1 - GET Denial of Service

CVE-2006-4781—

Heap-based buffer overflow in FutureSoft TFTP Server Multithreaded (MT) 1.1 allows remote attackers to cause a denial of

23RISCO

abrir ↗

Referência

Pragyan CMS 2.6.2 - 'sourceFolder' Remote File Inclusion

CVE-2008-3207—

PHP remote file inclusion vulnerability in cms/modules/form.lib.php in Pragyan CMS 2.6.2, when register_globals is enabl

23RISCO

abrir ↗

Referência

CVE-2009-4761

CVE-2009-4761—

Stack-based buffer overflow in Mini-stream RM Downloader allows remote attackers to execute arbitrary code via a long st

23RISCO

abrir ↗

Referência

CVE-2009-4761

CVE-2009-4761—

Stack-based buffer overflow in Mini-stream RM Downloader allows remote attackers to execute arbitrary code via a long st

23RISCO

abrir ↗

Referência

CVE-2010-2348

CVE-2010-2348—

Stack-based buffer overflow in Batch Audio Converter Lite Edition 1.0.0.0 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2024-3673

CVE-2024-3673CRITICAL

Web Directory Free < 1.7.3 - Unauthenticated LFI

63RISCO

abrir ↗

Referência

TotalCalendar 2.30 - 'inc' Remote File Inclusion

CVE-2006-7055—

PHP remote file inclusion vulnerability in index.php in TotalCalendar 2.30 and earlier allows remote attackers to execut

23RISCO

abrir ↗

Referência

Joomla! Component JD-Wiki 1.0.2 - Remote File Inclusion

CVE-2006-4074—

PHP remote file inclusion vulnerability in lib/tpl/default/main.php in the JD-Wiki Component (com_jd-wiki) 1.0.2 and ear

23RISCO

abrir ↗

Referência

CVE-2010-1533

CVE-2010-1533—

Directory traversal vulnerability in the TweetLA (com_tweetla) component 1.0.1 for Joomla! allows remote attackers to re

43RISCO

abrir ↗

Referência

Adiscon LogAnalyzer v.4.1.13 - Cross Site Scripting

CVE-2023-36306—

A Cross Site Scripting (XSS) vulnerability in Adiscon Aiscon LogAnalyzer through 4.1.13 allows a remote attacker to exec

38RISCO

abrir ↗

Referência

CVE-2023-0777

CVE-2023-0777HIGH

Authentication Bypass by Primary Weakness in modoboa/modoboa

61RISCO

abrir ↗

Referência

CVE-2013-1602

CVE-2013-1602—

An Information Disclosure vulnerability exists due to insufficient validation of authentication cookies for the RTSP ses

28RISCO

abrir ↗

Referência

Ipswitch WS_FTP Home/Professional FTP Client - Remote Format String (PoC)

CVE-2008-3795—

Buffer overflow in Ipswitch WS_FTP Home client allows remote FTP servers to have an unknown impact via a long "message r

28RISCO

abrir ↗

Referência

CVE-2010-3140

CVE-2010-3140—

Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local

28RISCO

abrir ↗

Referência

CVE-2018-11505

CVE-2018-11505—

The Werewolf Online application 0.8.8 for Android allows attackers to discover the Firebase token by reading logcat outp

23RISCO

abrir ↗

Referência

CVE-2011-5219

CVE-2011-5219—

Directory traversal vulnerability in examples/show_code.php in mPDF 5.3 and earlier allows remote attackers to read arbi

23RISCO

abrir ↗

Referência

Snort 2.6.1.1/2.6.1.2/2.7.0 - 'fragementation' Remote Denial of Service

CVE-2007-1398—

The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the ip

23RISCO

abrir ↗

Referência

CVE-2016-3974

CVE-2016-3974—

XML external entity (XXE) vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1 through 7.5 allows remo

28RISCO

abrir ↗

Referência

acronis pxe server 2.0.0.1076 - Directory Traversal / Null Pointer

CVE-2008-1410—

Directory traversal vulnerability in the PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows re

23RISCO

abrir ↗

Referência

CVE-2017-15287

CVE-2017-15287—

There is XSS in the BouquetEditor WebPlugin for Dream Multimedia Dreambox devices, as demonstrated by the "Name des Bouq

38RISCO

abrir ↗

Referência

CVE-2016-3974

CVE-2016-3974—

XML external entity (XXE) vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1 through 7.5 allows remo

28RISCO

abrir ↗

Referência

CVE-2017-11319

CVE-2017-11319—

Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and c

23RISCO

abrir ↗

Referência

CVE-2017-11319

CVE-2017-11319—

Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and c

23RISCO

abrir ↗

Referência

CVE-2009-2379

CVE-2009-2379—

Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execu

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.