Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

72.018exploits catalogados

32.219CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.023GitHub PoC 13.334VulnCheck XDB 8.195Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

20.023 exploits

Referência

CVE-2017-6193

CVE-2017-6193—

Buffer overflow in APNGDis 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arb

23RISCO

abrir ↗

Referência

CVE-2017-6193

CVE-2017-6193—

Buffer overflow in APNGDis 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arb

23RISCO

abrir ↗

Referência

CVE-2020-10387

CVE-2020-10387—

Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files

23RISCO

abrir ↗

Referência

PHPKB Multi-Language 9 - Authenticated Directory Traversal

CVE-2020-10387—

Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files

23RISCO

abrir ↗

Referência

Downline Goldmine Builder - SQL Injection

CVE-2008-4178—

SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and D

23RISCO

abrir ↗

Referência

CVE-2020-12712

CVE-2020-12712—

A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobScheduler 1.12 an

23RISCO

abrir ↗

Referência

CVE-2013-1806

CVE-2013-1806—

Multiple directory traversal vulnerabilities in PHP-Fusion before 7.02.06 allow remote authenticated users to include an

23RISCO

abrir ↗

Referência

Autodesk DWF Viewer Control / LiveUpdate Module - Remote Code Execution

CVE-2008-4472—

The UpdateEngine class in the LiveUpdate ActiveX control (LiveUpdate16.DLL 17.2.56), as used in Revit Architecture 2009

23RISCO

abrir ↗

Referência

CVE-2011-4644

CVE-2011-4644—

Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an envir

23RISCO

abrir ↗

Referência

CVE-2011-4106

CVE-2011-4106—

TimThumb (timthumb.php) before 2.0 does not validate the entire source with the domain white list, which allows remote a

28RISCO

abrir ↗

Referência

Imageview 5.3 - 'fileview.php?album' Local File Inclusion

CVE-2007-2425—

Directory traversal vulnerability in fileview.php in Imageview 5.3 allows remote attackers to read arbitrary files via a

23RISCO

abrir ↗

Referência

CVE-2012-2271

CVE-2012-2271—

Buffer overflow in the InitLicenKeys function in a certain ActiveX control in SkinCrafter3_vs2005.dll in SkinCrafter 3.0

23RISCO

abrir ↗

Referência

CVE-2011-4106

CVE-2011-4106—

TimThumb (timthumb.php) before 2.0 does not validate the entire source with the domain white list, which allows remote a

28RISCO

abrir ↗

Referência

Quicksilver Forums 1.2.1 - Remote File Inclusion

CVE-2006-4824—

PHP remote file inclusion vulnerability in lib/activeutil.php in Quicksilver Forums (QSF) 1.2.1 and earlier allows remot

23RISCO

abrir ↗

Referência

Shadows Rising RPG 0.0.5b - Remote File Inclusion

CVE-2006-4329—

Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG (Pre-Alpha) 0.0.5b and earlier allow remote att

23RISCO

abrir ↗

Referência

Simple Discussion Board 0.1.0 - Remote File Inclusion

CVE-2006-4918—

Multiple PHP remote file inclusion vulnerabilities in Simple Discussion Board 0.1.0 allow remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2018-10608

CVE-2018-10608—

SEL AcSELerator Architect version 2.2.24.0 and prior can be exploited when the AcSELerator Architect FTP client connects

23RISCO

abrir ↗

Referência

CGX 20050314 - 'pathCGX' Remote File Inclusion

CVE-2007-2611—

Multiple PHP remote file inclusion vulnerabilities in CGX 20050314 allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência

SendStudio 2004.14 - 'ROOTDIR' Remote File Inclusion

CVE-2007-1060—

Multiple PHP remote file inclusion vulnerabilities in Interspire SendStudio 2004.14 and earlier, when register_globals a

23RISCO

abrir ↗

Referência

Charrays CMS 0.9.3 - Multiple Remote File Inclusions

CVE-2007-6179—

Multiple PHP remote file inclusion vulnerabilities in Charray's CMS 0.9.3 allow remote attackers to execute arbitrary PH

23RISCO

abrir ↗

Referência

Transmit.app 3.5.5 - 'ftps://' URL Handler Heap Buffer Overflow (PoC)

CVE-2007-0020—

Heap-based buffer overflow in the SFTP protocol handler for Panic Transmit (Transmit.app) up to 3.5.5 allows remote atta

23RISCO

abrir ↗

Referência

phpMyPortal 3.0.0 RC3 - GLOBALS[CHEMINMODULES] Remote File Inclusion

CVE-2007-2594—

PHP remote file inclusion vulnerability in inc/articles.inc.php in phpMyPortal 3.0.0 RC3 allows remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2014-5116

CVE-2014-5116—

The cairo_image_surface_get_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent attac

23RISCO

abrir ↗

Referência

CVE-2019-10273

CVE-2019-10273—

Information leakage vulnerability in the /mc login page in ManageEngine ServiceDesk Plus 9.3 software allows authenticat

23RISCO

abrir ↗

Referência

CVE-2019-10273

CVE-2019-10273—

Information leakage vulnerability in the /mc login page in ManageEngine ServiceDesk Plus 9.3 software allows authenticat

23RISCO

abrir ↗

Referência

Limbo CMS Module event 1.0 - Remote File Inclusion

CVE-2006-6800—

PHP remote file inclusion in eventcal/mod_eventcal.php in the event module 1.0 for Limbo CMS allows remote attackers to

23RISCO

abrir ↗

Referência

C-News 1.0.1 - 'path' Remote File Inclusion

CVE-2006-4629—

PHP remote file inclusion vulnerability in affichage/commentaires.php in C-News.fr C-News 1.0.1 and earlier allows remot

23RISCO

abrir ↗

Referência

MySpeach 3.0.2 - 'my_ms[root]' Remote File Inclusion

CVE-2006-4630—

PHP remote file inclusion vulnerability in jscript.php in Sky GUNNING MySpeach 3.0.2 and earlier, when register_globals

23RISCO

abrir ↗

Referência

Mambo Component bigAPE-Backup 1.1 - Remote File Inclusion

CVE-2006-4296—

PHP remote file inclusion vulnerability in classes/Tar.php in bigAPE-Backup component (com_babackup) for Mambo 1.1 allow

23RISCO

abrir ↗

Referência

CVE-2017-15012

CVE-2017-15012—

OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 does not properly validate the i

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.