Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.445exploits catalogados

34.432CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

21.497 exploits

Referência

CVE-2018-8410

CVE-2018-8410—

An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory

23RISCO

abrir ↗

Referência✓ VexDay Proof

simple file manager 0.24a - Multiple Vulnerabilities

CVE-2006-6376—webappsphp

Multiple directory traversal vulnerabilities in fm.php in Simple File Manager (SFM) 0.24a allow remote attackers to use

23RISCO

abrir ↗

Referência✓ VexDay Proof

e-Vision CMS 2.02 - SQL Injection / Remote Code Execution

CVE-2007-3251—webappsphp

Multiple directory traversal vulnerabilities in e-Vision CMS 2.02 and earlier allow remote attackers to (1) include and

23RISCO

abrir ↗

Referência✓ VexDay Proof

TuMusika Evolution 1.7R5 - Remote File Disclosure

CVE-2007-6188—webappsphp

Multiple directory traversal vulnerabilities in TuMusika Evolution 1.7R5 allow remote attackers to include and execute a

23RISCO

abrir ↗

Referência

CVE-2018-11339

CVE-2018-11339—

An XSS issue was discovered in Frappe ERPNext v11.x.x-develop b1036e5 via a comment.

23RISCO

abrir ↗

Referência

CVE-2017-6550

CVE-2017-6550—

Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2017-6550

CVE-2017-6550—

Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2017-9126

CVE-2017-9126—

The quicktime_read_dref_table function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of serv

23RISCO

abrir ↗

Referência

CVE-2010-4875

CVE-2010-4875—

Cross-site scripting (XSS) vulnerability in vodpod-video-gallery/vodpod_gallery_thumbs.php in the Vodpod Video Gallery P

23RISCO

abrir ↗

Referência

CVE-2017-9412

CVE-2017-9412—

The unpack_read_samples function in frontend/get_audio.c in LAME 3.99.5 allows remote attackers to cause a denial of ser

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Net Tools 2.7.1 - Remote Code Execution

CVE-2006-1921—webappsphp

nettools.php in PHP Net Tools 2.7.1 allows remote attackers to execute arbitrary commands via shell metacharacters in th

23RISCO

abrir ↗

Referência

CVE-2015-2248

CVE-2015-2248—

Cross-site request forgery (CSRF) vulnerability in the user portal in Dell SonicWALL Secure Remote Access (SRA) products

23RISCO

abrir ↗

Referência

CVE-2015-2248

CVE-2015-2248—

Cross-site request forgery (CSRF) vulnerability in the user portal in Dell SonicWALL Secure Remote Access (SRA) products

23RISCO

abrir ↗

Referência✓ VexDay Proof

docmint 2.0 - '/engine/require.php' Remote File Inclusion

CVE-2006-5240—webappsphp

PHP remote file inclusion vulnerability in engine/require.php in Docmint 2.0 and earlier, when register_globals is enabl

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPQuickGallery 1.9 - 'textFile' Remote File Inclusion

CVE-2006-6044—webappsphp

PHP remote file inclusion vulnerability in gallery_top.inc.php in PHPQuickGallery 1.9 and earlier allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Tweaked 3 - 'phpbb_root_path' Remote File Inclusion

CVE-2007-0680—webappsphp

PHP remote file inclusion vulnerability in includes/functions.php in Phpbb Tweaked 3 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Module SupaNav 1.0.0 - 'link_main.php' Remote File Inclusion

CVE-2007-3935—webappsphp

PHP remote file inclusion vulnerability in link_main.php in the SupaNav 1.0.0 module for phpBB allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2010-2034

CVE-2010-2034—

Directory traversal vulnerability in the Percha Image Attach (com_perchaimageattach) component 1.1 for Joomla! allows re

43RISCO

abrir ↗

Referência

CVE-2020-13118

CVE-2020-13118—

An issue was discovered in Mikrotik-Router-Monitoring-System through 2018-10-22. SQL Injection exists in check_community

23RISCO

abrir ↗

Referência

CVE-2010-2035

CVE-2010-2035—

Directory traversal vulnerability in the Percha Gallery (com_perchagallery) component 1.6 Beta for Joomla! allows remote

43RISCO

abrir ↗

Referência

CVE-2014-8690

CVE-2014-8690—

Multiple cross-site scripting (XSS) vulnerabilities in Exponent CMS before 2.1.4 patch 6, 2.2.x before 2.2.3 patch 9, an

23RISCO

abrir ↗

Referência

CVE-2014-8690

CVE-2014-8690—

Multiple cross-site scripting (XSS) vulnerabilities in Exponent CMS before 2.1.4 patch 6, 2.2.x before 2.2.3 patch 9, an

23RISCO

abrir ↗

Referência

CVE-2010-2036

CVE-2010-2036—

Directory traversal vulnerability in the Percha Fields Attach (com_perchafieldsattach) component 1.x for Joomla! allows

43RISCO

abrir ↗

Referência

CVE-2010-2037

CVE-2010-2037—

Directory traversal vulnerability in the Percha Downloads Attach (com_perchadownloadsattach) component 1.1 for Joomla! a

43RISCO

abrir ↗

Referência✓ VexDay Proof

Quake 3 Engine 1.32b - 'R_RemapShader()' Remote Client Buffer Overflow

CVE-2006-2236—remotelinux

Buffer overflow in the Quake 3 Engine, as used by (1) ET 2.60, (2) Return to Castle Wolfenstein 1.41, and (3) Quake III

23RISCO

abrir ↗

Referência

CVE-2016-1915

CVE-2016-1915—

Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB User Viewed Posts Tracker 1.0 - Remote File Inclusion

CVE-2006-5223—webappsphp

PHP remote file inclusion vulnerability in includes/functions_user_viewed_posts.php in the Nivisec User Viewed Posts Tra

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenEMR 2.8.1 - 'srcdir' Multiple Remote File Inclusions

CVE-2006-5811—webappsphp

PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with register_globals enabled,

23RISCO

abrir ↗

Referência✓ VexDay Proof

MiniBB 2.0.5 - 'Language' Local File Inclusion

CVE-2007-3272—webappsphp

Directory traversal vulnerability in index.php in MiniBB 2.0.5 allows remote attackers to read arbitrary files via a ..

23RISCO

abrir ↗

Referência

CVE-2017-15957

CVE-2017-15957—

my_profile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file.

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.