Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.445exploits catalogados
34.432CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentespopularesrisco
24.443 exploits
Exploit-DB✓ VexDay Proof
OP5 5.3.5/5.4.0/5.4.2/5.5.0/5.5.1 - 'welcome' Remote Command Execution (Metasploit)
CVE-2012-0262—webappsmultiple05 jan 2015
op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers
60RISCO
abrir ↗
Exploit-DB
Crea8Social 2.0 - Cross-Site Scripting Change Interface
CVE-2015-1054—webappsphp04 jan 2015
Cross-site scripting (XSS) vulnerability in the Games feature in Crea8Social 2.0 allows remote authenticated users to in
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ASUSWRT 3.0.0.4.376_1071 - LAN Backdoor Command Execution
CVE-2014-9583—remotehardware04 jan 2015
common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
e107 2 Bootstrap CMS - Cross-Site Scripting
CVE-2015-1057—webappsphp03 jan 2015
Cross-site scripting (XSS) vulnerability in usersettings.php in e107 2.0.0 allows remote attackers to inject arbitrary w
23RISCO
abrir ↗
Exploit-DB
PhotoPost < 4.85 - Multiple Vulnerabilities
CVE-2005-0274—webappsphp03 jan 2015
Multiple cross-site scripting (XSS) vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers t
23RISCO
abrir ↗
Exploit-DB
PhotoPost < 4.85 - Multiple Vulnerabilities
CVE-2005-0273—webappsphp03 jan 2015
Multiple SQL injection vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to execute arb
23RISCO
abrir ↗
Exploit-DB
ReviewPost < 2.84 - Multiple Vulnerabilities
CVE-2005-0270—webappsphp02 jan 2015
Multiple cross-site scripting (XSS) vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to inject a
23RISCO
abrir ↗
Exploit-DB
ReviewPost < 2.84 - Multiple Vulnerabilities
CVE-2005-0272—webappsphp02 jan 2015
ReviewPost PHP Pro before 2.84 allows remote attackers to upload and execute arbitrary PHP files by posting a review fil
23RISCO
abrir ↗
Exploit-DB
ReviewPost < 2.84 - Multiple Vulnerabilities
CVE-2005-0271—webappsphp02 jan 2015
Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗
Exploit-DB
Absolut Engine 1.73 - Multiple Vulnerabilities
CVE-2014-9435—webappsphp01 jan 2015
Multiple SQL injection vulnerabilities in Absolut Engine 1.73 allow remote authenticated users to execute arbitrary SQL
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows 8.1 (x86/x64) - 'ahcache.sys' NtApphelpCacheControl Privilege Escalation
CVE-2015-0002—localwindows01 jan 2015
The AhcVerifyAdminContext function in ahcache.sys in the Application Compatibility component in Microsoft Windows 7 SP1,
43RISCO
abrir ↗
Exploit-DB
Absolut Engine 1.73 - Multiple Vulnerabilities
CVE-2014-9434—webappsphp01 jan 2015
Cross-site scripting (XSS) vulnerability in admin/managerrelated.php in the administrative backend in Absolut Engine 1.7
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ProjectSend - Arbitrary File Upload (Metasploit)
CVE-2014-9567—remotephp31 dez 2014
Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows rem
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Social Microblogging PRO 1.5 - Persistent Cross-Site Scripting
CVE-2014-9516—webappsphp31 dez 2014
Cross-site scripting (XSS) vulnerability in Social Microblogging PRO 1.5 allows remote attackers to inject arbitrary web
23RISCO
abrir ↗
Exploit-DB
PHP-Calendar < 0.10.1 - Arbitrary File Inclusion
CVE-2004-1423—webappsphp29 dez 2014
Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth o
28RISCO
abrir ↗
Exploit-DB
Easy File Sharing Web Server 6.8 - Persistent Cross-Site Scripting
CVE-2014-9439—webappsphp27 dez 2014
Cross-site scripting (XSS) vulnerability in Easy File Sharing Web Server 6.8 allows remote attackers to inject arbitrary
23RISCO
abrir ↗
Exploit-DB
WHM.AutoPilot < 2.4.6.5 - Multiple Vulnerabilities
CVE-2004-1422—webappsphp27 dez 2014
WHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via phpinfo, which reveals php s
23RISCO
abrir ↗
Exploit-DB
WHM.AutoPilot < 2.4.6.5 - Multiple Vulnerabilities
CVE-2004-1421—webappsphp27 dez 2014
Multiple PHP remote file inclusion vulnerabilities (1) step_one.php, (2) step_one_tables.php, (3) step_two_tables.php in
23RISCO
abrir ↗
Exploit-DB
WHM.AutoPilot < 2.4.6.5 - Multiple Vulnerabilities
CVE-2004-1420—webappsphp27 dez 2014
Multiple cross-site scripting (XSS) vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and earlier allow remote atta
23RISCO
abrir ↗
Exploit-DB
PMB 4.1.3 - (Authenticated) SQL Injection
CVE-2014-9457—webappsphp27 dez 2014
SQL injection vulnerability in classes/mono_display.class.php in PMB 4.1.3 and earlier allows remote authenticated users
23RISCO
abrir ↗
Exploit-DB
PHPMyRecipes 1.2.2 - 'browse.php?category' SQL Injection
CVE-2014-9440—webappsphp23 dez 2014
SQL injection vulnerability in browse.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗
Exploit-DB
NetIQ Access Manager 4.0 SP1 - Multiple Vulnerabilities
CVE-2014-5216—webappsjsp23 dez 2014
Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allow remote atta
23RISCO
abrir ↗
Exploit-DB
SysAid Server - Arbitrary File Disclosure
CVE-2014-9436—webappswindows23 dez 2014
Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers to read arbitrary files
23RISCO
abrir ↗
Exploit-DB
GParted 0.14.1 - OS Command Execution
CVE-2014-7208—locallinux23 dez 2014
GParted before 0.15.0 allows local users to execute arbitrary commands with root privileges via shell metacharacters in
23RISCO
abrir ↗
Exploit-DB
NetIQ Access Manager 4.0 SP1 - Multiple Vulnerabilities
CVE-2014-9412—webappsjsp23 dez 2014
Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.1 allow remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Notepad++ 6.6.9 - Buffer Overflow
CVE-2014-1004—doswindows22 dez 2014
20RISCO
abrir ↗
Exploit-DB
PsychoStats < 2.2.4 Beta - Cross Site Scripting
CVE-2004-1417—localwindows22 dez 2014
Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to i
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Notepad++ 6.6.9 - Buffer Overflow
CVE-2014-9456—doswindows22 dez 2014
Buffer overflow in NotePad++ 6.6.9 allows remote attackers to have unspecified impact via a long Time attribute in an Ev
28RISCO
abrir ↗
Exploit-DB
Ettercap 0.8.0 < 0.8.1 - Multiple Denial of Service Vulnerabilities
CVE-2014-6395—doslinux19 dez 2014
Heap-based buffer overflow in the dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 a
28RISCO
abrir ↗
Exploit-DB
ProjectSend r561 - Multiple Vulnerabilities
CVE-2011-3713—webappsphp19 dez 2014
cFTP r80 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the
23RISCO
abrir ↗
← anteriorpágina 205 / 815próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.