Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.589exploits catalogados

34.508CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8.216Nuclei 4.223Metasploit 3.464✓ só verificadosrecentes populares risco

21.554 exploits

Referência✓ VexDay Proof

doITlive CMS 2.50 - SQL Injection / Cross-Site Scripting

CVE-2008-2842—webappsasp

Cross-site scripting (XSS) vulnerability in edit/showmedia.asp in doITLive CMS 2.50 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Wysi Wiki Wyg 1.0 - Local File Inclusion / Cross-Site Scripting / PHPInfo

CVE-2008-5323—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject arbitrary w

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ocean12 Contact Manager Pro - SQL Injection / Cross-Site Scripting / File Disclosure

CVE-2008-6370—webappsphp

Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to i

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ultimate PHP Board 2.2.1 - Privilege Escalation

CVE-2008-6727—webappsphp

Cross-site scripting (XSS) vulnerability in Ultimate PHP Board (UPB) 2.2.2, 2.2.1, and earlier 2.x versions allows remot

23RISCO

abrir ↗

Referência

CVE-2009-4692

CVE-2009-4692—

Cross-site scripting (XSS) vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2009-4697

CVE-2009-4697—

Multiple cross-site scripting (XSS) vulnerabilities in index.php in RadNICS Gold 5 allow remote attackers to inject arbi

23RISCO

abrir ↗

Referência

CVE-2009-3719

CVE-2009-3719—

Cross-site scripting (XSS) vulnerability in comment.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2014-2090

CVE-2014-2090—

Multiple cross-site scripting (XSS) vulnerabilities in ilias.php in ILIAS 4.4.1 allow remote authenticated users to inje

23RISCO

abrir ↗

Referência

CVE-2016-7385

CVE-2016-7385—

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3

23RISCO

abrir ↗

Referência

CVE-2016-7083

CVE-2016-7083—

VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado Thin

23RISCO

abrir ↗

Referência

CVE-2017-16843

CVE-2017-16843—

Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic

23RISCO

abrir ↗

Referência

CVE-2014-125116

CVE-2014-125116CRITICAL

HybridAuth 2.0.9 - 2.2.2 Unauthenticated RCE via install.php Configuration Injection

63RISCO

abrir ↗

Referência

CVE-2014-125116

CVE-2014-125116CRITICAL

HybridAuth 2.0.9 - 2.2.2 Unauthenticated RCE via install.php Configuration Injection

63RISCO

abrir ↗

Referência

CVE-2014-125116

CVE-2014-125116CRITICAL

HybridAuth 2.0.9 - 2.2.2 Unauthenticated RCE via install.php Configuration Injection

63RISCO

abrir ↗

Referência

CVE-2020-8493

CVE-2020-8493MEDIUM

A stored XSS vulnerability in Kronos Web Time and Attendance (webTA) affects 3.8.x and later 3.x versions before 4.0 via

33RISCO

abrir ↗

Referência

CVE-2008-6325

CVE-2008-6325—

Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbit

23RISCO

abrir ↗

Referência

CVE-2024-25413

CVE-2024-25413CRITICAL

A XSLT Server Side injection vulnerability in the Import Jobs function of FireBear Improved Import And Export v3.8.6 all

48RISCO

abrir ↗

Referência

CVE-2010-1361

CVE-2010-1361—

Cross-site scripting (XSS) vulnerability in shop/USER_ARTIKEL_HANDLING_AUFRUF.php in PHPepperShop 2.5 allows remote atta

23RISCO

abrir ↗

Referência

CVE-2018-14533

CVE-2018-14533—

read_tmp and write_tmp in Inteno IOPSYS allow attackers to gain privileges after writing to /tmp/etc/smb.conf because /v

23RISCO

abrir ↗

Referência

CVE-2013-7274

CVE-2013-7274—

Cross-site scripting (XSS) vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitr

23RISCO

abrir ↗

Referência

CVE-2009-4359

CVE-2009-4359—

Cross-site scripting (XSS) vulnerability in folder.php in the SmartMedia 0.85 Beta module for XOOPS allows remote attack

23RISCO

abrir ↗

Referência

CVE-2017-1297

CVE-2017-1297—

IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-bas

23RISCO

abrir ↗

Referência

CVE-2007-6673

CVE-2007-6673—

Cross-site scripting (XSS) vulnerability in Makale Scripti allows remote attackers to inject arbitrary web script or HTM

23RISCO

abrir ↗

Referência

CVE-2011-10013

CVE-2011-10013CRITICAL

Traq 2.0–2.3 admincp/common.php RCE

63RISCO

abrir ↗

Referência

CVE-2011-10013

CVE-2011-10013CRITICAL

Traq 2.0–2.3 admincp/common.php RCE

63RISCO

abrir ↗

Referência

CVE-2011-10013

CVE-2011-10013CRITICAL

Traq 2.0–2.3 admincp/common.php RCE

63RISCO

abrir ↗

Referência✓ VexDay Proof

AvailScript Article Script - 'articles.php' Multiple Vulnerabilities

CVE-2008-4372—webappsphp

Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bandwebsite 1.5 - SQL Injection / Cross-Site Scripting

CVE-2008-5338—webappsphp

Cross-site scripting (XSS) vulnerability in info.php in Bandwebsite (aka Bandsite portal system) 1.5 allows remote attac

23RISCO

abrir ↗

Referência

CVE-2018-5705

CVE-2018-5705—

Reservo Image Hosting 1.6 is vulnerable to XSS attacks. The affected function is its search engine (the t parameter to t

23RISCO

abrir ↗

Referência

CVE-2018-5705

CVE-2018-5705—

Reservo Image Hosting 1.6 is vulnerable to XSS attacks. The affected function is its search engine (the t parameter to t

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.