Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.008exploits catalogados

34.638CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.662 exploits

Referência✓ VexDay Proof

Mantis Bug Tracker 1.1.1 - Code Execution / Cross-Site Scripting / Cross-Site Request Forgery

CVE-2008-2276—webappsphp

Cross-site request forgery (CSRF) vulnerability in manage_user_create.php in Mantis 1.1.1 allows remote attackers to cre

23RISCO

abrir ↗

Referência

CVE-2016-4313

CVE-2016-4313—

Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2010-1875

CVE-2010-1875—

Directory traversal vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows re

43RISCO

abrir ↗

Referência

CVE-2020-13228

CVE-2020-13228—

An issue was discovered in Sysax Multi Server 6.90. There is reflected XSS via the /scgi sid parameter.

23RISCO

abrir ↗

Referência

CVE-2023-0916

CVE-2023-0916MEDIUM

SourceCodester Auto Dealer Management System Users.php access control

33RISCO

abrir ↗

Referência✓ VexDay Proof

PGOSD - '/misc/function.php3' Remote File Inclusion

CVE-2006-5543—webappsphp

PHP remote file inclusion vulnerability in misc/function.php3 in PHP Generator of Object SQL Database (PGOSD), when regi

23RISCO

abrir ↗

Referência

CVE-2010-1313

CVE-2010-1313—

Directory traversal vulnerability in the Seber Cart (com_sebercart) component 1.0.0.12 and 1.0.0.13 for Joomla!, when ma

38RISCO

abrir ↗

Referência

CVE-2016-4313

CVE-2016-4313—

Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2023-31902

CVE-2023-31902CRITICAL

RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE).

63RISCO

abrir ↗

Referência

CVE-2018-25115

CVE-2018-25115CRITICAL

D-Link DIR-110/412/600/615/645/815 RCE via service.cgi

48RISCO

abrir ↗

Referência

CVE-2018-25115

CVE-2018-25115CRITICAL

D-Link DIR-110/412/600/615/645/815 RCE via service.cgi

48RISCO

abrir ↗

Referência

CVE-2016-8024

CVE-2016-8024—

Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux (VS

23RISCO

abrir ↗

Referência

CVE-2018-10575

CVE-2018-10575—

An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Hardcoded credentia

23RISCO

abrir ↗

Referência✓ VexDay Proof

evilboard 0.1a - SQL Injection / Cross-Site Scripting

CVE-2008-0155—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to inject arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

ContentNow 1.4.1 - Arbitrary File Upload / Cross-Site Scripting

CVE-2008-3181—webappsphp

Unrestricted file upload vulnerability in upload.php in ContentNow CMS 1.4.1 allows remote authenticated users to execut

23RISCO

abrir ↗

Referência

CVE-2013-3525

CVE-2013-3525—

SQL injection vulnerability in Approvals/ in Request Tracker (RT) 4.0.10 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2021-30030

CVE-2021-30030—

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Full Name field on register-patient.php.

23RISCO

abrir ↗

Referência

CVE-2014-4717

CVE-2014-4717—

Multiple cross-site request forgery (CSRF) vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for WordP

23RISCO

abrir ↗

Referência

CVE-2021-30034

CVE-2021-30034—

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Symptons field on patients/register-report.php.

23RISCO

abrir ↗

Referência

CVE-2010-4398

CVE-2010-4398HIGHsob ataque

Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Wi

71RISCO

abrir ↗

Referência

CVE-2010-4398

CVE-2010-4398HIGHsob ataque

Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Wi

71RISCO

abrir ↗

Referência

CVE-2018-6005

CVE-2018-6005—

SQL Injection exists in the Realpin through 1.5.04 component for Joomla! via the pinboard parameter.

23RISCO

abrir ↗

Referência

CVE-2021-30039

CVE-2021-30039—

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Fever" or "Blood Pressure" field on the patients/register-repo

23RISCO

abrir ↗

Referência

CVE-2018-6394

CVE-2018-6394—

SQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invite_type parameter in a view=invites action.

23RISCO

abrir ↗

Referência

CVE-2021-30042

CVE-2021-30042—

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Cont

23RISCO

abrir ↗

Referência

CVE-2018-6368

CVE-2018-6368—

SQL Injection exists in the JomEstate PRO through 3.7 component for Joomla! via the id parameter in a task=detailed acti

23RISCO

abrir ↗

Referência

CVE-2018-5974

CVE-2018-5974—

SQL Injection exists in the SimpleCalendar 3.1.9 component for Joomla! via the catid array parameter.

23RISCO

abrir ↗

Referência

CVE-2018-6585

CVE-2018-6585—

SQL Injection exists in the JTicketing 2.0.16 component for Joomla! via a view=events action with a filter_creator or fi

23RISCO

abrir ↗

Referência

CVE-2009-4413

CVE-2009-4413—

The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remot

23RISCO

abrir ↗

Referência

CVE-2018-5970

CVE-2018-5970—

SQL Injection exists in the JGive 2.0.9 component for Joomla! via the filter_org_ind_type or campaign_countries paramete

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.