Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.904exploits catalogados

34.599CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.624 exploits

Referência✓ VexDay Proof

Rankem - File Disclosure / Cross-Site Scripting / Cookie

CVE-2009-0248—webappsphp

Cross-site scripting (XSS) vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component beamospetition 1.0.12 - SQL Injection / Cross-Site Scripting

CVE-2009-0378—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in the beamospetition (com_beamospetition) 1.0.12 component for Jo

23RISCO

abrir ↗

Referência

CVE-2022-41413

CVE-2022-41413MEDIUM

perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attack

33RISCO

abrir ↗

Referência

CVE-2010-0371

CVE-2010-0371—

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Hitmaaan Gallery 1.3 allow remote attackers to injec

23RISCO

abrir ↗

Referência

CVE-2012-6518

CVE-2012-6518—

Cross-site request forgery (CSRF) vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authenti

23RISCO

abrir ↗

Referência

CVE-2010-0365

CVE-2010-0365—

Cross-site scripting (XSS) vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows re

23RISCO

abrir ↗

Referência

CVE-2009-4461

CVE-2009-4461—

Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.909 allow remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência

CVE-2017-12579

CVE-2017-12579—

An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 4.0.24 and ear

23RISCO

abrir ↗

Referência

CVE-2010-2715

CVE-2010-2715—

Cross-site scripting (XSS) vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arbi

23RISCO

abrir ↗

Referência

CVE-2010-3895

CVE-2010-3895—

esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges by specifying an arbitr

23RISCO

abrir ↗

Referência

CVE-2013-2639

CVE-2013-2639—

Cross-site scripting (XSS) vulnerability in CTERA Cloud Storage OS before 3.2.29.0, 3.2.42.0, and earlier allows remote

23RISCO

abrir ↗

Referência

CVE-2010-3904

CVE-2010-3904HIGHsob ataque

The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the

91RISCO

abrir ↗

Referência

CVE-2014-9516

CVE-2014-9516—

Cross-site scripting (XSS) vulnerability in Social Microblogging PRO 1.5 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2014-100013

CVE-2014-100013—

Multiple cross-site scripting (XSS) vulnerabilities in clientResponse 4.1 allow remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2010-3962

CVE-2010-3962HIGHsob ataque

Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary cod

100RISCO

abrir ↗

Referência

CVE-2010-3962

CVE-2010-3962HIGHsob ataque

Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary cod

100RISCO

abrir ↗

Referência

CVE-2009-4767

CVE-2009-4767—

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2022-41544

CVE-2022-41544HIGH

GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file paramete

41RISCO

abrir ↗

Referência

CVE-2010-4772

CVE-2010-4772—

Cross-site scripting (XSS) vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2008-5126

CVE-2008-5126—

Cross-site scripting (XSS) vulnerability in search.php in BoutikOne CMS allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2017-2671

CVE-2017-2671—

The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock a

23RISCO

abrir ↗

Referência

CVE-2010-20113

CVE-2010-20113CRITICAL

EasyFTP Server list.html path Stack Buffer Overflow

63RISCO

abrir ↗

Referência

CVE-2010-20113

CVE-2010-20113CRITICAL

EasyFTP Server list.html path Stack Buffer Overflow

63RISCO

abrir ↗

Referência

CVE-2009-0302

CVE-2009-0302—

SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated

23RISCO

abrir ↗

Referência

CVE-2008-4648

CVE-2008-4648—

Cross-site scripting (XSS) vulnerability in index.php in Elxis CMS 2008.1 revision 2204 allows remote attackers to injec

23RISCO

abrir ↗

Referência

CVE-2012-10053

CVE-2012-10053CRITICAL

Simple Web Server Connection Header Buffer Overflow

63RISCO

abrir ↗

Referência

CVE-2012-10053

CVE-2012-10053CRITICAL

Simple Web Server Connection Header Buffer Overflow

63RISCO

abrir ↗

Referência

CVE-2012-10053

CVE-2012-10053CRITICAL

Simple Web Server Connection Header Buffer Overflow

63RISCO

abrir ↗

Referência

CVE-2012-10053

CVE-2012-10053CRITICAL

Simple Web Server Connection Header Buffer Overflow

63RISCO

abrir ↗

Referência

CVE-2009-4822

CVE-2009-4822—

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.