Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.008exploits catalogados

34.638CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.662 exploits

Referência✓ VexDay Proof

WebSVN 2.0 - Cross-Site Scripting / File Handling / Code Execution

CVE-2008-5918—webappsphp

Cross-site scripting (XSS) vulnerability in the getParameterisedSelfUrl function in index.php in WebSVN 2.0 and earlier

23RISCO

abrir ↗

Referência

CVE-2020-7934

CVE-2020-7934—

In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and Last Name fields for user accounts in MyA

23RISCO

abrir ↗

Referência

CVE-2010-1538

CVE-2010-1538—

SQL injection vulnerability in print_raincheck.php in phpRAINCHECK 1.0.1 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2010-1538

CVE-2010-1538—

SQL injection vulnerability in print_raincheck.php in phpRAINCHECK 1.0.1 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2015-2182

CVE-2015-2182—

Multiple cross-site scripting (XSS) vulnerabilities in ZeusCart 4 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Referência

CVE-2015-2182

CVE-2015-2182—

Multiple cross-site scripting (XSS) vulnerabilities in ZeusCart 4 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Referência

CVE-2014-5464

CVE-2014-5464—

Cross-site scripting (XSS) vulnerability in the nDPI traffic classification library in ntopng (aka ntop) before 1.2.1 al

23RISCO

abrir ↗

Referência

CVE-2014-5464

CVE-2014-5464—

Cross-site scripting (XSS) vulnerability in the nDPI traffic classification library in ntopng (aka ntop) before 1.2.1 al

23RISCO

abrir ↗

Referência

CVE-2019-12788

CVE-2019-12788—

An issue was discovered in Photodex ProShow Producer v9.0.3797 (an application that runs with Administrator privileges).

23RISCO

abrir ↗

Referência

CVE-2018-20010

CVE-2018-20010—

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field.

38RISCO

abrir ↗

Referência

CVE-2018-20011

CVE-2018-20011—

DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field.

38RISCO

abrir ↗

Referência

CVE-2014-2084

CVE-2014-2084—

Skybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57 does not properly re

23RISCO

abrir ↗

Referência

CVE-2018-20009

CVE-2018-20009—

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field.

38RISCO

abrir ↗

Referência✓ VexDay Proof

Sponge News 2.2 - 'sndir' Remote File Inclusion

CVE-2006-4647—webappsphp

PHP remote file inclusion vulnerability in news.php in Sponge News 2.2 and earlier allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Safari 3.2.2/4b - nested elements XML Parsing Remote Crash

CVE-2009-1233—doswindows

Apple Safari 3.2.2 and 4 Beta on Windows allows remote attackers to cause a denial of service (application crash) via an

23RISCO

abrir ↗

Referência✓ VexDay Proof

Acoustica Mixcraft 4.2 - Universal Stack Overflow (SEH)

CVE-2008-3877—localwindows

Stack-based buffer overflow in Acoustica Mixcraft 4.1 Build 96 and 4.2 Build 98 allows user-assisted attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component CopperminePhotoGalery - Remote File Inclusion

CVE-2006-4321—webappsphp

PHP remote file inclusion vulnerability in cpg.php in the Coppermine Photo Gallery component (com_cpg) 1.0 and earlier f

23RISCO

abrir ↗

Referência

CVE-2021-28417

CVE-2021-28417—

A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and t

23RISCO

abrir ↗

Referência

CVE-2010-1599

CVE-2010-1599—

SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2010-1599

CVE-2010-1599—

SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2010-1604

CVE-2010-1604—

Multiple SQL injection vulnerabilities in admin_login.php in NCT Jobs Portal Script allow remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2010-1604

CVE-2010-1604—

Multiple SQL injection vulnerabilities in admin_login.php in NCT Jobs Portal Script allow remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2010-1653

CVE-2010-1653—

Directory traversal vulnerability in graphics.php in the Graphics (com_graphics) component 1.0.6 and 1.5.0 for Joomla! a

43RISCO

abrir ↗

Referência

CVE-2010-1657

CVE-2010-1657—

Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0.0 for Joomla! allows remote attackers t

43RISCO

abrir ↗

Referência

CVE-2010-1657

CVE-2010-1657—

Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0.0 for Joomla! allows remote attackers t

43RISCO

abrir ↗

Referência

CVE-2010-1658

CVE-2010-1658—

Directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboard) component 1.3 for Joomla! allows remo

43RISCO

abrir ↗

Referência

CVE-2010-1658

CVE-2010-1658—

Directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboard) component 1.3 for Joomla! allows remo

43RISCO

abrir ↗

Referência

CVE-2010-1681

CVE-2010-1681—

Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to ex

50RISCO

abrir ↗

Referência

CVE-2010-1701

CVE-2010-1701—

SQL injection vulnerability in browse.html in PHP Video Battle Script allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS Ez Forum - SQL Injection

CVE-2008-4754—webappsphp

SQL injection vulnerability in forum.php in Scripts for Sites (SFS) Ez Forum allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.