Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.902exploits catalogados

34.597CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentes populares risco

21.624 exploits

Referência

CVE-2017-9810

CVE-2017-9810—

There are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux File Server before Mai

23RISCO

abrir ↗

Referência

CVE-2009-4939

CVE-2009-4939—

Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

gCards 1.45 - Multiple Vulnerabilities

CVE-2006-1348—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in Greg Neustaetter gCards 1.45 and earlier allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

ourvideo CMS 9.5 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting

CVE-2008-2978—webappsphp

Directory traversal vulnerability in phpi/rss.php in Ourvideo CMS 9.5, when register_globals is enabled, allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Wsn (Multiple Products) - Local File Inclusion / Code Execution

CVE-2008-3555—webappsphp

Directory traversal vulnerability in index.php in (1) WSN Forum 4.1.43 and earlier, (2) Gallery 4.1.30 and earlier, (3)

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rianxosencabos CMS 0.9 - Arbitrary Add Admin

CVE-2008-4245—webappsphp

The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authent

23RISCO

abrir ↗

Referência✓ VexDay Proof

eDNews 2.0 - Local File Inclusion

CVE-2008-5819—webappsphp

Directory traversal vulnerability in eDNews_archive.php in eDreamers eDNews 2, when magic_quotes_gpc is disabled, allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

emergecolab 1.0 - 'sitecode' Local File Inclusion

CVE-2008-5990—webappsphp

Directory traversal vulnerability in connect/init.inc in emergecolab 1.0 allows remote attackers to include and execute

23RISCO

abrir ↗

Referência

CVE-2010-3404

CVE-2010-3404—

Multiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2022-33098

CVE-2022-33098—

Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting (XSS) vulnerability via the Edit Contact function.

35RISCO

abrir ↗

Referência

CVE-2018-5211

CVE-2018-5211—

PHP Melody version 2.7.1 suffer from SQL Injection Time-based attack on the page ajax.php with the parameter playlist.

23RISCO

abrir ↗

Referência

CVE-2014-3414

CVE-2014-3414—

Cross-site request forgery (CSRF) vulnerability in Sharetronix before 3.4 allows remote attackers to hijack the authenti

23RISCO

abrir ↗

Referência

CVE-2013-6826

CVE-2013-6826—

cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate th

23RISCO

abrir ↗

Referência

CVE-2018-14894

CVE-2018-14894—

CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker (who is able to edit permissions of a file

23RISCO

abrir ↗

Referência

CVE-2018-14894

CVE-2018-14894—

CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker (who is able to edit permissions of a file

23RISCO

abrir ↗

Referência

CVE-2012-5343

CVE-2012-5343—

Cross-site scripting (XSS) vulnerability in admin/login.php in Limny 3.0.1 allows remote attackers to inject arbitrary w

23RISCO

abrir ↗

Referência✓ VexDay Proof

kubix 0.7 - Multiple Vulnerabilities

CVE-2006-7117—webappsphp

Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

SLAED CMS 2.5 Lite - 'newlang' Local File Inclusion

CVE-2008-0458—webappsphp

Directory traversal vulnerability in function/sources.php in SLAED CMS 2.5 Lite allows remote attackers to include and e

23RISCO

abrir ↗

Referência✓ VexDay Proof

EntertainmentScript 1.4.0 - 'page.php' Local File Inclusion

CVE-2008-2459—webappsphp

Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote attackers to include and execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

FubarForum 1.5 - 'index.php' Local File Inclusion

CVE-2008-2887—webappsphp

Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Minishowcase 09b136 - 'lang' Local File Inclusion

CVE-2008-3390—webappsphp

Directory traversal vulnerability in libraries/general.init.php in Minishowcase Image Gallery 09b136, when register_glob

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kure 0.6.3 - 'index.php' Local File Inclusion

CVE-2008-4632—webappsphp

Multiple directory traversal vulnerabilities in index.php in Kure 0.6.3, when magic_quotes_gpc is disabled, allow remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

nicLOR Sito - includefile Local File Inclusion

CVE-2008-6290—webappsphp

Directory traversal vulnerability in includefile.php in nicLOR Sito, when register_globals is enabled or magic_quotes_gp

23RISCO

abrir ↗

Referência

CVE-2024-34833

CVE-2024-34833CRITICAL

Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload. Users can upload images via the "save_settin

48RISCO

abrir ↗

Referência

CVE-2010-3419

CVE-2010-3419—

Multiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 2.2.3 allow remote atta

23RISCO

abrir ↗

Referência

CVE-2021-4434

CVE-2021-4434CRITICAL

Social Warfare <= 3.5.2 - Remote Code Execution

48RISCO

abrir ↗

Referência

CVE-2012-2105

CVE-2012-2105—

Multiple SQL injection vulnerabilities in login.php in Timesheet Next Gen 1.5.2 allow remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2010-3419

CVE-2010-3419—

Multiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 2.2.3 allow remote atta

23RISCO

abrir ↗

Referência

CVE-2011-0635

CVE-2011-0635—

Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitra

23RISCO

abrir ↗

Referência

CVE-2009-3201

CVE-2009-3201—

Integer overflow in Media Player Classic 6.4.9 allows user-assisted remote attackers to cause a denial of service (appli

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.