Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.008exploits catalogados

34.638CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.662 exploits

Referência✓ VexDay Proof

Mantis Bug Tracker 1.1.1 - Code Execution / Cross-Site Scripting / Cross-Site Request Forgery

CVE-2008-3331—webappsphp

Cross-site scripting (XSS) vulnerability in return_dynamic_filters.php in Mantis before 1.1.2 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hammer Software MetaGauge 1.0.0.17 - Directory Traversal

CVE-2008-4421—remotewindows

Directory traversal vulnerability in MetaGauge 1.0.0.17, and probably other versions before 1.0.3.38, allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

ModernBill 4.4.x - Cross-Site Scripting / Remote File Inclusion

CVE-2008-5060—webappsphp

Multiple PHP remote file inclusion vulnerabilities in ModernBill 4.4 and earlier allow remote attackers to execute arbit

23RISCO

abrir ↗

Referência

Entrepreneur Dating Script 2.0.1 - 'marital' / 'gender' / 'country' / 'profileid' SQL Injection

CVE-2017-17648—webappsphp

Entrepreneur Dating Script 2.0.1 has SQL Injection via the search_result.php marital, gender, country, or profileid para

23RISCO

abrir ↗

Referência

CVE-2016-5425

CVE-2016-5425—

The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distribu

38RISCO

abrir ↗

Referência

CVE-2016-5425

CVE-2016-5425—

The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distribu

38RISCO

abrir ↗

Referência

Online Marriage Registration System 1.0 - 'searchdata' SQL Injection

CVE-2020-35151—webappsphp

The Online Marriage Registration System 1.0 post parameter "searchdata" in the user/search.php request is vulnerable to

23RISCO

abrir ↗

Referência

CVE-2017-13849

CVE-2017-13849—

An issue was discovered in certain Apple products. iOS before 11.1 is affected. tvOS before 11.1 is affected. watchOS be

23RISCO

abrir ↗

Referência

CVE-2011-0960

CVE-2011-0960—

Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2012-3485

CVE-2012-3485—

Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname o

38RISCO

abrir ↗

Referência

CVE-2019-0732

CVE-2019-0732—

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Wind

23RISCO

abrir ↗

Referência

CVE-2019-0732

CVE-2019-0732—

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Wind

23RISCO

abrir ↗

Referência

CVE-2024-5488

CVE-2024-5488CRITICAL

SEOPress < 7.9 - Unauthenticated Object Injection

63RISCO

abrir ↗

Referência

CVE-2013-1466

CVE-2013-1466—

Multiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitr

23RISCO

abrir ↗

Referência

CVE-2008-6799

CVE-2008-6799—

connection.php in FlashChat 5.0.8 allows remote attackers to bypass the role filter mechanism and gain administrative pr

23RISCO

abrir ↗

Referência

CVE-2012-6624

CVE-2012-6624—

Cross-site scripting (XSS) vulnerability in the SoundCloud Is Gold plugin 2.1 for WordPress allows remote attackers to i

23RISCO

abrir ↗

Referência

CVE-2014-8800

CVE-2014-8800—

Cross-site scripting (XSS) vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before

23RISCO

abrir ↗

Referência

CVE-2022-36664

CVE-2022-36664MEDIUM

Password Manager for IIS 2.0 has a cross-site scripting (XSS) vulnerability via the /isapi/PasswordManager.dll ResultURL

33RISCO

abrir ↗

Referência

CVE-2009-2223

CVE-2009-2223—

Directory traversal vulnerability in locms/smarty.php in LightOpenCMS 0.1 allows remote attackers to include and execute

23RISCO

abrir ↗

Referência

CVE-2015-1725

CVE-2015-1725—

Buffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows S

23RISCO

abrir ↗

Referência

Cyclos 4.14.7 - DOM Based Cross-Site Scripting (XSS)

CVE-2021-31674—webappsmultiple

Cyclos 4 PRO 4.14.7 and before does not validate user input at error inform, which allows remote unauthenticated attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Module galleria 1.0b - Remote File Inclusion

CVE-2006-3396—webappsphp

PHP remote file inclusion vulnerability in galleria.html.php in Galleria Mambo Module 1.0 and earlier for Mambo allows r

23RISCO

abrir ↗

Referência

CVE-2018-4090

CVE-2018-4090—

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS

23RISCO

abrir ↗

Referência

CVE-2019-19230

CVE-2019-19230CRITICAL

An unsafe deserialization vulnerability exists in CA Release Automation (Nolio) 6.6 with the DataManagement component th

48RISCO

abrir ↗

Referência

CVE-2015-3933

CVE-2015-3933—

Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote

23RISCO

abrir ↗

Referência

CVE-2015-5066

CVE-2015-5066—

Multiple cross-site scripting (XSS) vulnerabilities in the MetalGenix GeniXCMS 0.0.3 allow remote attackers to inject ar

23RISCO

abrir ↗

Referência

CVE-2015-5066

CVE-2015-5066—

Multiple cross-site scripting (XSS) vulnerabilities in the MetalGenix GeniXCMS 0.0.3 allow remote attackers to inject ar

23RISCO

abrir ↗

Referência

CVE-2019-1148

CVE-2019-1148MEDIUM

Microsoft Graphics Component Information Disclosure Vulnerability

33RISCO

abrir ↗

Referência

CVE-2007-2792

CVE-2007-2792—

SQL injection vulnerability in the Yet another Newsletter Component (aka YaNC or com_yanc) component before 1.5 beta 3 f

23RISCO

abrir ↗

Referência

CVE-2007-2792

CVE-2007-2792—

SQL injection vulnerability in the Yet another Newsletter Component (aka YaNC or com_yanc) component before 1.5 beta 3 f

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.