Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.526exploits catalogados

34.478CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.534GitHub PoC 13.654VulnCheck XDB 8.213Nuclei 4.218Metasploit 3.464✓ só verificadosrecentes populares risco

21.534 exploits

Referência

CVE-2012-5452

CVE-2012-5452—

Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS 2.2.1 allow remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2014-8596

CVE-2014-8596—

Multiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2014-8596

CVE-2014-8596—

Multiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2014-8596

CVE-2014-8596—

Multiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2017-18344

CVE-2017-18344—

The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly

23RISCO

abrir ↗

Referência

CVE-2015-4062

CVE-2015-4062—

SQL injection vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remo

38RISCO

abrir ↗

Referência

CVE-2017-7462

CVE-2017-7462—

Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI scr

28RISCO

abrir ↗

Referência

CVE-2015-4062

CVE-2015-4062—

SQL injection vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remo

38RISCO

abrir ↗

Referência✓ VexDay Proof

Mx Module Smartor Album FAP 2.0 RC 1 - Remote File Inclusion

CVE-2007-2189—webappsphp

PHP remote file inclusion vulnerability in admin/admin_album_otf.php in the MX Smartor Full Album Pack (FAP) 2.0 RC1 mod

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlashBB 1.1.8 - 'sendmsg.php' Remote File Inclusion

CVE-2007-3697—webappsphp

PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to exe

28RISCO

abrir ↗

Referência

CVE-2013-5092

CVE-2013-5092—

Cross-site scripting (XSS) vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2013-3538

CVE-2013-3538—

Multiple cross-site scripting (XSS) vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to injec

23RISCO

abrir ↗

Referência

CVE-2017-1002002

CVE-2017-1002002—

Vulnerability in wordpress plugin webapp-builder v2.0, The plugin includes unlicensed vulnerable CMS software from http:

28RISCO

abrir ↗

Referência

CVE-2014-100030

CVE-2014-100030—

Cross-site scripting (XSS) vulnerability in module/search/function.php in Ganesha Digital Library (GDL) 4.2 allows remot

23RISCO

abrir ↗

Referência

CVE-2023-2636

CVE-2023-2636—

AN_GradeBook <= 5.0.1 - Subscriber+ SQLi

23RISCO

abrir ↗

Referência

CVE-2023-2636

CVE-2023-2636—

AN_GradeBook <= 5.0.1 - Subscriber+ SQLi

23RISCO

abrir ↗

Referência

CVE-2018-9172

CVE-2018-9172—

The Iptanus WordPress File Upload plugin before 4.3.3 for WordPress mishandles shortcode attributes.

23RISCO

abrir ↗

Referência

CVE-2016-1609

CVE-2016-1609—

Multiple cross-site scripting (XSS) vulnerabilities in Novell Filr before 1.2 Security Update 3 and 2.0 before Security

23RISCO

abrir ↗

Referência✓ VexDay Proof

ACal 2.2.6 - 'day.php' Remote File Inclusion

CVE-2006-2261—webappsphp

PHP remote file inclusion vulnerability in day.php in ACal 2.2.6 allows remote attackers to execute arbitrary PHP code v

23RISCO

abrir ↗

Referência

CVE-2011-4879

CVE-2011-4879—

miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA po

28RISCO

abrir ↗

Referência

CVE-2019-7541

CVE-2019-7541—

Rukovoditel through 2.4.1 allows XSS via a URL that lacks a module=users%2flogin substring.

23RISCO

abrir ↗

Referência

CVE-2019-7541

CVE-2019-7541—

Rukovoditel through 2.4.1 allows XSS via a URL that lacks a module=users%2flogin substring.

23RISCO

abrir ↗

Referência

CVE-2022-24082

CVE-2022-24082CRITICAL

If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Inte

53RISCO

abrir ↗

Referência

CVE-2018-7745

CVE-2018-7745—

An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/install/inst

28RISCO

abrir ↗

Referência

CVE-2016-6599

CVE-2016-6599—

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service (ConfigurationService)

28RISCO

abrir ↗

Referência✓ VexDay Proof

Axiom Photo/News Gallery 0.8.6 - Remote File Inclusion

CVE-2007-0200—webappsphp

PHP remote file inclusion vulnerability in template.php in Geoffrey Golliher Axiom Photo/News Gallery (axiompng) 0.8.6 a

23RISCO

abrir ↗

Referência✓ VexDay Proof

CoD2: DreamStats 4.2 - 'index.php' Remote File Inclusion

CVE-2007-0757—webappsphp

PHP remote file inclusion vulnerability in index.php in Miguel Nunes Call of Duty 2 (CoD2) DreamStats System 4.2 and ear

23RISCO

abrir ↗

Referência✓ VexDay Proof

AgerMenu 0.01 - 'top.inc.php?rootdir' Remote File Inclusion

CVE-2007-0837—webappsphp

PHP remote file inclusion vulnerability in examples/inc/top.inc.php in AgerMenu 0.03 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flatnux - html/JavaScript Injection Cookie Grabber

CVE-2008-5761—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to

23RISCO

abrir ↗

Referência

CVE-2015-7241

CVE-2015-7241—

XML External Entity (XXE) vulnerability in SAP Netweaver before 7.01.

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.