Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.008exploits catalogados

34.638CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.662 exploits

Referência

CVE-2017-13260

CVE-2017-13260—

In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead

23RISCO

abrir ↗

Referência✓ VexDay Proof

BBClone 0.31 - 'selectlang.php' Remote File Inclusion

CVE-2007-0508—webappsphp

PHP remote file inclusion vulnerability in lib/selectlang.php in BBClone 0.31 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

AT Contenator 1.0 - 'Root_To_Script' Remote File Inclusion

CVE-2007-0983—webappsphp

PHP remote file inclusion vulnerability in _admin/nav.php in AT Contenator 1.0 and earlier allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

cPanel 11.x - 'Fantastico' Local File Inclusion

CVE-2008-4181—webappsphp

Directory traversal vulnerability in includes/xml.php in the Netenberg Fantastico De Luxe module before 2.10.4 r19 for c

23RISCO

abrir ↗

Referência✓ VexDay Proof

IntelliTamper 2.07 - HTTP Header Remote Code Execution

CVE-2008-3361—remotewindows

Stack-based buffer overflow in IntelliTamper 2.07 allows remote web sites to execute arbitrary code via a long HTTP Serv

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 1.0.154.53 - Null Pointer Remote Crash

CVE-2009-1514—doswindows

Google Chrome 1.0.154.53 allows remote attackers to cause a denial of service (NULL pointer dereference and application

23RISCO

abrir ↗

Referência

CVE-2017-6367

CVE-2017-6367—

In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology invo

23RISCO

abrir ↗

Referência

CVE-2010-1876

CVE-2010-1876—

SQL injection vulnerability in index.php in AJ Shopping Cart 1.0 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2012-2277

CVE-2012-2277—

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote

23RISCO

abrir ↗

Referência

CVE-2021-30044

CVE-2021-30044—

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php.

23RISCO

abrir ↗

Referência

CVE-2010-1876

CVE-2010-1876—

SQL injection vulnerability in index.php in AJ Shopping Cart 1.0 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2017-9602

CVE-2017-9602—

KBVault Mysql Free Knowledge Base application package 0.16a comes with a FileExplorer/Explorer.aspx?id=/Uploads file-man

23RISCO

abrir ↗

Referência

CVE-2012-5876

CVE-2012-5876—

Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier allow remote attackers to c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simplog 0.9.2 - 's' Remote Command Execution

CVE-2006-1778—webappsphp

Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2010-2744

CVE-2010-2744—

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows

23RISCO

abrir ↗

Referência

CVE-2016-5740

CVE-2016-5740—

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev5. JavaScript code can be used as part of ical atta

23RISCO

abrir ↗

Referência

CVE-2016-5740

CVE-2016-5740—

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev5. JavaScript code can be used as part of ical atta

23RISCO

abrir ↗

Referência

CVE-2011-4558

CVE-2011-4558—

Tiki 8.2 and earlier allows remote administrators to execute arbitrary PHP code via crafted input to the regexres and re

23RISCO

abrir ↗

Referência

CVE-2017-8684

CVE-2017-8684—

Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R

23RISCO

abrir ↗

Referência

CVE-2017-17110

CVE-2017-17110—

Techno Portfolio Management Panel 1.0 allows an attacker to inject SQL commands via a single.php?id= request.

23RISCO

abrir ↗

Referência

CVE-2018-8411

CVE-2018-8411—

An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vuln

23RISCO

abrir ↗

Referência

CVE-2009-2890

CVE-2009-2890—

Cross-site scripting (XSS) vulnerability in results.php in PHP Scripts Now Riddles allows remote attackers to inject arb

23RISCO

abrir ↗

Referência

CVE-2018-7701

CVE-2018-7701—

Multiple cross-site request forgery (CSRF) vulnerabilities in SecurEnvoy SecurMail before 9.2.501 allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Import Tools Mod 0.1.4 - Remote File Inclusion

CVE-2006-7147—webappsphp

PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Import Tools Mod 0.1.4 and earlier a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Chicken of the VNC 2.0 - 'NULL-pointer' Remote Denial of Service

CVE-2007-0756—dososx

Chicken of the VNC (cotv) 2.0 allows remote attackers to cause a denial of service (application crash) via a large compu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flat Chat 2.0 - 'include online.txt' Remote Code Execution

CVE-2007-1394—webappsphp

Direct static code injection vulnerability in startsession.php in Flat Chat 2.0 allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

STPHPLibrary - 'STPHPLIB_DIR' Remote File Inclusion

CVE-2007-4737—webappsphp

Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

CenterIM 4.22.3 - Remote Command Execution

CVE-2008-1467—remotelinux

CenterIM 4.22.3 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters

23RISCO

abrir ↗

Referência✓ VexDay Proof

cPanel 11.x - Cross-Site Scripting / Local File Inclusion

CVE-2008-6927—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Mo

23RISCO

abrir ↗

Referência

CVE-2017-12951

CVE-2017-12951—

The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a den

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.