Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.445exploits catalogados

34.432CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

21.497 exploits

Referência

CVE-2022-41358

CVE-2022-41358MEDIUM

A stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows attackers to execute arbitrary

33RISCO

abrir ↗

Referência

CVE-2018-0882

CVE-2018-0882—

The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an el

23RISCO

abrir ↗

Referência✓ VexDay Proof

Newswriter SW 1.42 - 'editfunc.inc.php' File Inclusion

CVE-2006-5102—webappsphp

PHP remote file inclusion vulnerability in include/editfunc.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter S

23RISCO

abrir ↗

Referência✓ VexDay Proof

PowerClan 1.14a - 'footer.inc.php' Remote File Inclusion

CVE-2006-6715—webappsphp

PHP remote file inclusion vulnerability in footer.inc.php in PowerClan 1.14a and earlier, when register_globals is enabl

23RISCO

abrir ↗

Referência✓ VexDay Proof

Eudora 7.1 - SMTP ResponseRemote Remote Buffer Overflow

CVE-2007-2770—remotewindows

Stack-based buffer overflow in Eudora 7.1 allows user-assisted, remote SMTP servers to execute arbitrary code via a long

23RISCO

abrir ↗

Referência✓ VexDay Proof

OZJournals 2.1.1 - 'id' File Disclosure

CVE-2008-0435—webappsphp

Directory traversal vulnerability in index.php in OZJournals 2.1.1 allows remote attackers to read portions of arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

MG-SOFT Net Inspector 6.5.0.828 - Multiple Vulnerabilities

CVE-2008-1400—remotewindows

Directory traversal vulnerability in the Net Inspector HTTP Server (mghttpd) in MG-SOFT Net Inspector 6.5.0.828 and earl

23RISCO

abrir ↗

Referência✓ VexDay Proof

gelato CMS 0.95 - 'img' Remote File Disclosure

CVE-2008-3675—webappsphp

Directory traversal vulnerability in classes/imgsize.php in Gelato 0.95 allows remote attackers to read arbitrary files

23RISCO

abrir ↗

Referência✓ VexDay Proof

Falt4 CMS RC4 - 'FCKeditor' Arbitrary File Upload

CVE-2008-6178—webappsphp

Unrestricted file upload vulnerability in editor/filemanager/browser/default/connectors/php/connector.php in FCKeditor 2

23RISCO

abrir ↗

Referência✓ VexDay Proof

CYASK 3.x - 'neturl' Local File Disclosure

CVE-2008-4151—webappsphp

Directory traversal vulnerability in collect.php in CYASK 3.x allows remote attackers to read arbitrary files via a .. (

23RISCO

abrir ↗

Referência

CVE-2010-1928

CVE-2010-1928—

Directory traversal vulnerability in scr/soustab.php in openMairie openPlanning 1.00, when register_globals is enabled,

23RISCO

abrir ↗

Referência

CVE-2010-1928

CVE-2010-1928—

Directory traversal vulnerability in scr/soustab.php in openMairie openPlanning 1.00, when register_globals is enabled,

23RISCO

abrir ↗

Referência

Shopizer 2.16.0 - 'Multiple' Cross-Site Scripting (XSS)

CVE-2021-33562—webappsjava

A reflected cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitra

23RISCO

abrir ↗

Referência

CVE-2013-3727

CVE-2013-3727—

SQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

PH Pexplorer 0.24 - 'explorer_load_lang.php' Local File Inclusion

CVE-2006-5510—webappsphp

Directory traversal vulnerability in explorer_load_lang.php in PH Pexplorer 0.24 allows remote attackers to include arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

FTP Voyager 14.0.0.3 - 'CWD' Remote Stack Overflow (PoC)

CVE-2007-1079—doswindows

Stack-based buffer overflow in Rhino Software, Inc. FTP Voyager 14.0.0.3 and earlier allows remote servers to cause a de

23RISCO

abrir ↗

Referência

CVE-2017-2468

CVE-2017-2468—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef

23RISCO

abrir ↗

Referência✓ VexDay Proof

AssetMan 2.4a - 'download_pdf.php' Remote File Disclosure

CVE-2007-1427—webappsphp

Directory traversal vulnerability in download_pdf.php in AssetMan 2.4a and earlier allows remote attackers to read arbit

23RISCO

abrir ↗

Referência

CVE-2006-1954

CVE-2006-1954—

SQL injection vulnerability in authent.php4 in Nicolas Fischer (aka NFec) RechnungsZentrale V2 1.1.3, and possibly earli

23RISCO

abrir ↗

Referência

CVE-2017-3558

CVE-2017-3558—

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPOF 20040226 - 'DB_adodb.class.php' Remote File Inclusion

CVE-2007-4763—webappsphp

PHP remote file inclusion vulnerability in dbmodules/DB_adodb.class.php in PHP Object Framework (PHPOF) 20040226 and ear

23RISCO

abrir ↗

Referência✓ VexDay Proof

Irola My-Time 3.5 - SQL Injection

CVE-2007-6217—webappsphp

Multiple SQL injection vulnerabilities in login.asp in Irola My-Time (aka Timesheet) 3.5 allow remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

RunCMS 1.6 - Multiple Vulnerabilities

CVE-2007-6548—webappsphp

Multiple direct static code injection vulnerabilities in RunCMS before 1.6.1 allow remote authenticated administrators t

23RISCO

abrir ↗

Referência✓ VexDay Proof

HIS-Webshop - 'his-webshop.pl t' Remote File Disclosure

CVE-2008-1541—webappscgi

Directory traversal vulnerability in cgi-bin/his-webshop.pl in HIS Webshop 2.50 allows remote attackers to read arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP iCalendar 2.24 - 'cookie_language' Local File Inclusion / Arbitrary File Upload

CVE-2008-5968—webappsphp

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and

23RISCO

abrir ↗

Referência✓ VexDay Proof

TinyButStrong 3.4.0 - 'script' Local File Disclosure

CVE-2009-1653—webappsphp

Directory traversal vulnerability in examples/tbs_us_examples_0view.php in TinyButStrong 3.4.0 allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2020-27422

CVE-2020-27422—

In Anuko Time Tracker v1.19.23.5311, the password reset link emailed to the user doesn't expire once used, allowing an a

23RISCO

abrir ↗

Referência

CVE-2014-2533

CVE-2014-2533—

/sbin/ifwatchd in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to gain privileges by providing an arb

38RISCO

abrir ↗

Referência

CVE-2014-2533

CVE-2014-2533—

/sbin/ifwatchd in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to gain privileges by providing an arb

38RISCO

abrir ↗

Referência

CVE-2009-4886

CVE-2009-4886—

Multiple directory traversal vulnerabilities in phpCommunity 2 2.1.8 allow remote attackers to read arbitrary files via

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.