Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.902exploits catalogados
34.597CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentespopularesrisco
21.624 exploits
Referência✓ VexDay Proof
WEBBDOMAIN WebShop 1.02 - SQL Injection / Cross-Site Scripting
CVE-2008-6267—webappsphp
Cross-site scripting (XSS) vulnerability in detail.php in Multi Languages WebShop Online 1.02 allows remote attackers to
23RISCO
abrir ↗
Referência✓ VexDay Proof
ezpack 4.2b2 - Cross-Site Scripting / SQL Injection
CVE-2009-0105—webappsphp
Cross-site scripting (XSS) vulnerability in index.php in EZpack 4.2b2 allows remote attackers to inject arbitrary web sc
23RISCO
abrir ↗
Referência✓ VexDay Proof
ASP Product Catalog 1.0 - Cross-Site Scripting / File Disclosure
CVE-2009-1321—webappsphp
Cross-site scripting (XSS) vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbi
23RISCO
abrir ↗
Referência✓ VexDay Proof
LinkBase 2.0 - Remote Cookie Grabber
CVE-2009-1607—webappsphp
Cross-site scripting (XSS) vulnerability in the administrator panel in phpForm.net LinkBase 2.0 allows remote attackers
23RISCO
abrir ↗
Referência✓ VexDay Proof
yogurt 0.3 - Cross-Site Scripting / SQL Injection
CVE-2009-2033—webappsphp
Cross-site scripting (XSS) vulnerability in index.php in Yogurt 0.3 allows remote attackers to inject arbitrary web scri
23RISCO
abrir ↗
Referência
CVE-2010-3962
CVE-2010-3962HIGHsob ataque
Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary cod
100RISCO
abrir ↗
Referência
CVE-2009-4767
CVE-2009-4767—
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject
23RISCO
abrir ↗
Referência
CVE-2022-41544
CVE-2022-41544HIGH
GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file paramete
41RISCO
abrir ↗
Referência
CVE-2010-4772
CVE-2010-4772—
Cross-site scripting (XSS) vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web
23RISCO
abrir ↗
Referência
CVE-2008-5126
CVE-2008-5126—
Cross-site scripting (XSS) vulnerability in search.php in BoutikOne CMS allows remote attackers to inject arbitrary web
23RISCO
abrir ↗
Referência
CVE-2017-2671
CVE-2017-2671—
The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock a
23RISCO
abrir ↗
Referência
CVE-2010-20113
CVE-2010-20113CRITICAL
EasyFTP Server list.html path Stack Buffer Overflow
63RISCO
abrir ↗
Referência
CVE-2010-20113
CVE-2010-20113CRITICAL
EasyFTP Server list.html path Stack Buffer Overflow
63RISCO
abrir ↗
Referência
CVE-2009-0302
CVE-2009-0302—
SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated
23RISCO
abrir ↗
Referência
CVE-2008-4648
CVE-2008-4648—
Cross-site scripting (XSS) vulnerability in index.php in Elxis CMS 2008.1 revision 2204 allows remote attackers to injec
23RISCO
abrir ↗
Referência
CVE-2012-10053
CVE-2012-10053CRITICAL
Simple Web Server Connection Header Buffer Overflow
63RISCO
abrir ↗
Referência
CVE-2012-10053
CVE-2012-10053CRITICAL
Simple Web Server Connection Header Buffer Overflow
63RISCO
abrir ↗
Referência
CVE-2012-10053
CVE-2012-10053CRITICAL
Simple Web Server Connection Header Buffer Overflow
63RISCO
abrir ↗
Referência
CVE-2012-10053
CVE-2012-10053CRITICAL
Simple Web Server Connection Header Buffer Overflow
63RISCO
abrir ↗
Referência
CVE-2009-4822
CVE-2009-4822—
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject
23RISCO
abrir ↗
Referência
CVE-2022-42889
CVE-2022-42889—
Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults
60RISCO
abrir ↗
Referência
CVE-2023-3342
CVE-2023-3342CRITICAL
User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload
48RISCO
abrir ↗
Referência
CVE-2010-0706
CVE-2010-0706—
Cross-site scripting (XSS) vulnerability in the login/prompt component in Subex Nikira Fraud Management System allows re
23RISCO
abrir ↗
Referência
CVE-2022-42889
CVE-2022-42889—
Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults
60RISCO
abrir ↗
Referência
CVE-2009-4382
CVE-2009-4382—
Cross-site scripting (XSS) vulnerability in module.php in PHPFABER CMS, possibly 1.3.36, allows remote attackers to inje
23RISCO
abrir ↗
Referência
CVE-2009-4382
CVE-2009-4382—
Cross-site scripting (XSS) vulnerability in module.php in PHPFABER CMS, possibly 1.3.36, allows remote attackers to inje
23RISCO
abrir ↗
Referência
CVE-2010-0675
CVE-2010-0675—
Cross-site scripting (XSS) vulnerability in index.php in BGSvetionik BGS CMS 2.2.1 allows remote attackers to inject arb
23RISCO
abrir ↗
Referência
CVE-2010-2256
CVE-2010-2256—
Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attacke
23RISCO
abrir ↗
Referência
CVE-2010-2256
CVE-2010-2256—
Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attacke
23RISCO
abrir ↗
Referência
CVE-2010-1872
CVE-2010-1872—
Cross-site scripting (XSS) vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows remote attackers to inject a
23RISCO
abrir ↗
← anteriorpágina 243 / 721próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.