Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

19.978 exploits

Referência

PHlyMail Lite 3.4.4 - 'mod.listmail.php' Remote File Inclusion

CVE-2006-4291—

PHP remote file inclusion vulnerability in handlers/email/mod.listmail.php in PHlyMail Lite 3.4.4 and earlier (Build 3.0

23RISCO

abrir ↗

Referência

OPENi-CMS 1.0.1beta - 'config' Remote File Inclusion

CVE-2006-4750—

PHP remote file inclusion vulnerability in openi-admin/base/fileloader.php in OPENi-CMS 1.0.1, and possibly earlier, all

23RISCO

abrir ↗

Referência

Aktueldownload Haber scripti - 'id' SQL Injection

CVE-2007-1015—

SQL injection vulnerability in HaberDetay.asp in Aktueldownload Haber script allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2020-26808

CVE-2020-26808CRITICAL

SAP AS ABAP(DMIS), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 a

48RISCO

abrir ↗

Referência

CVE-2023-28285

CVE-2023-28285HIGH

Microsoft Office Remote Code Execution Vulnerability

41RISCO

abrir ↗

Referência

CVE-2023-28285

CVE-2023-28285HIGH

Microsoft Office Remote Code Execution Vulnerability

41RISCO

abrir ↗

Referência

IBM Director 5.20.3su2 CIM Server - Remote Denial of Service

CVE-2009-0879—

The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of se

23RISCO

abrir ↗

Referência

CVE-2018-4241

CVE-2018-4241—

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS b

23RISCO

abrir ↗

Referência

CVE-2009-4251

CVE-2009-4251—

Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers

23RISCO

abrir ↗

Referência

PHP-Nuke Module AddressBook 1.2 - Local File Inclusion

CVE-2007-1720—

Directory traversal vulnerability in addressbook.php in the Addressbook 1.2 module for PHP-Nuke allows remote attackers

23RISCO

abrir ↗

Referência

Campsite 3.3.0 RC1 - Multiple Remote File Inclusions

CVE-2009-2182—

Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência

CVE-2016-8018

CVE-2016-8018—

Cross-site request forgery (CSRF) vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier)

23RISCO

abrir ↗

Referência

F3Site 2.1 - Remote Code Execution

CVE-2007-0763—

Cross-site scripting (XSS) vulnerability in the news comment functionality in F3Site 2.1 and earlier allows remote attac

23RISCO

abrir ↗

Referência

CVE-2010-5025

CVE-2010-5025—

Cross-site scripting (XSS) vulnerability in manage/main.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote attackers to i

23RISCO

abrir ↗

Referência

KGB 1.9 - 'sesskglogadmin.php' Local File Inclusion

CVE-2007-0337—

Directory traversal vulnerability in sesskglogadmin.php in KGB 1.9 and earlier allows remote attackers to include and ex

23RISCO

abrir ↗

Referência

CVE-2018-17996

CVE-2018-17996—

LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_

23RISCO

abrir ↗

Referência

CVE-2018-17996

CVE-2018-17996—

LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_

23RISCO

abrir ↗

Referência

CVE-2017-8927

CVE-2017-8927—

Buffer overflow in Larson VizEx Reader 9.7.5 allows attackers to cause a denial of service or possibly have unspecified

23RISCO

abrir ↗

Referência

Catviz 0.4.0 beta1 - Local File Inclusion / Cross-Site Scripting

CVE-2009-1749—

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Catviz 0.4.0 beta 1 allow remote attackers to inject

23RISCO

abrir ↗

Referência

public media manager 1.3 - Remote File Inclusion

CVE-2007-5149—

PHP remote file inclusion vulnerability in NewsCMS/news/newstopic_inc.php in North Country Public Radio Public Media Man

23RISCO

abrir ↗

Referência

mxBB Module mx_glance 2.3.3 - Remote File Inclusion

CVE-2007-5178—

contrib/mx_glance_sdesc.php in the mx_glance 2.3.3 module for mxBB places a critical security check within a comment bec

23RISCO

abrir ↗

Referência

CVE-2009-4542

CVE-2009-4542—

Cross-site scripting (XSS) vulnerability in newticket.php in IsolSoft Support Center 2.5 allows remote attackers to inje

23RISCO

abrir ↗

Referência

CVE-2017-17870

CVE-2017-17870—

The JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an entriessearch action.

23RISCO

abrir ↗

Referência

CVE-2018-6363

CVE-2018-6363—

SQL Injection exists in Task Rabbit Clone 1.0 via the single_blog.php id parameter.

23RISCO

abrir ↗

Referência

CVE-2018-6363

CVE-2018-6363—

SQL Injection exists in Task Rabbit Clone 1.0 via the single_blog.php id parameter.

23RISCO

abrir ↗

Referência

Jupiter CMS 1.1.5 - '/index.php' Local/Remote File Inclusion

CVE-2007-0987—

Directory traversal vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to include and execute arbit

23RISCO

abrir ↗

Referência

PHP 5.2.1 - 'substr_compare()' Information Leak

CVE-2007-1375—

Integer overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent attackers to read sens

23RISCO

abrir ↗

Referência

CVE-2017-9614

CVE-2017-9614—

The fill_input_buffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to cause a denial of service

23RISCO

abrir ↗

Referência

CVE-2017-9614

CVE-2017-9614—

The fill_input_buffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to cause a denial of service

23RISCO

abrir ↗

Referência

Link Request Contact Form 3.4 - Remote Code Execution

CVE-2007-3199—

Unrestricted file upload vulnerability in Link Request Contact Form 3.4 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.